Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7f1fa8d4-f417-30da-8705-0d5a8f99f752.roa
File:                     7f1fa8d4-f417-30da-8705-0d5a8f99f752.roa (raw, json)
Hash identifier:          HYGdJW5Ee5WufcP9+MDfvfPla5PaJB1SHd2Y4cSAgX0=
Subject key identifier:   17:A1:85:C4:17:61:A1:B6:EA:4A:D6:10:F0:07:1C:5B:F3:50:8E:30
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584A8410F47315DF6B6853D3A200
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7f1fa8d4-f417-30da-8705-0d5a8f99f752.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     2734
IP address blocks:        2605:6c00:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f4:73:15:df:6b:68:53:d3:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c771f0a4-4ad5-49e3-8c4b-de689eb4aeba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7c:5e:ee:e9:ba:e1:37:b7:81:c3:f8:b2:e5:
                    93:30:61:61:a1:7a:97:44:37:a2:92:68:64:8e:af:
                    8f:8c:13:ce:ef:c9:6a:83:4c:cf:bb:1d:6b:87:df:
                    7a:53:58:96:09:a3:38:8c:1b:c6:33:2c:e0:9f:19:
                    a7:7c:04:39:88:9a:94:f3:1b:a6:27:cb:93:93:96:
                    4e:c2:82:7a:6c:e7:e4:09:ef:db:1b:63:1d:ac:0e:
                    cb:44:12:f8:eb:3d:01:c2:c4:28:30:2c:7a:52:aa:
                    27:e0:bc:68:07:af:91:27:35:e9:49:22:cf:07:78:
                    c4:ec:e5:9f:da:91:ed:04:21:21:cc:3b:1f:93:2a:
                    7a:f5:1f:76:c6:d4:f6:91:4e:b6:28:d7:53:7e:9f:
                    a0:52:fa:67:76:e0:ef:65:6b:a0:8d:c3:d1:ed:89:
                    0e:c2:89:f4:41:b9:6b:6c:9a:16:ea:c6:b5:70:fe:
                    e4:ff:6c:48:7d:b6:83:9b:a7:7c:87:c3:f2:02:6a:
                    23:51:09:22:e5:48:3a:20:7e:01:7f:d9:ed:a6:8c:
                    7d:06:f4:77:7c:9c:de:6d:75:c0:38:f2:5e:e9:45:
                    db:30:08:96:95:b5:6f:02:75:f9:bf:4d:fd:77:fa:
                    8b:a6:c6:70:42:da:50:51:76:d1:6f:af:b8:4e:95:
                    7b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A1:85:C4:17:61:A1:B6:EA:4A:D6:10:F0:07:1C:5B:F3:50:8E:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7f1fa8d4-f417-30da-8705-0d5a8f99f752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:57:00:65:b4:b4:07:47:11:a3:91:84:f6:02:5d:90:e6:c6:
         64:d9:21:7e:1a:42:4f:92:56:0d:a7:e5:48:4e:16:cf:37:70:
         19:1b:50:55:f8:0f:08:3c:8e:b2:01:5e:9e:e4:df:9d:77:c4:
         ec:ba:21:34:07:c5:ce:ed:27:fd:dd:bd:23:22:ab:e0:4f:82:
         26:94:fb:d7:d2:81:85:41:3e:f4:a7:5a:57:f5:7a:cb:7b:e9:
         30:e9:24:c4:0b:e7:db:14:5e:81:98:24:81:28:ff:15:b6:72:
         0c:8c:51:8d:bb:e1:77:40:70:6a:35:28:a9:b1:73:37:52:07:
         93:8f:cf:d3:60:2b:67:02:a5:74:bc:d7:00:1e:32:0b:80:8b:
         13:3d:c4:c3:35:8c:1c:e6:dd:a3:25:31:98:1e:3e:51:01:26:
         de:98:22:c3:f9:de:85:20:7d:26:6c:1e:a5:28:13:ce:77:aa:
         ba:64:33:ef:0f:f4:c6:d7:fc:3c:9c:c2:3e:5e:33:5f:ec:01:
         47:25:43:0f:7a:fc:56:13:26:7f:4d:b8:e7:ac:85:d2:a9:a6:
         c2:3a:2b:35:55:d1:0a:f4:ef:1d:5b:aa:f6:c5:c7:5e:04:b0:
         66:18:c1:f6:00:84:fd:ae:1f:78:23:64:fe:65:15:ff:ae:42:
         1f:7e:11:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:08:27 2025 by rpki-client