Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/8944aab0-1fe3-3687-adf3-f634249121f2.roa
File:                     8944aab0-1fe3-3687-adf3-f634249121f2.roa (raw, json)
Hash identifier:          lcYU7TLNAK6Q4yk3qKDLkYETkGjhVVIHHaQeJ/KX4SQ=
Subject key identifier:   F3:A1:F8:CA:2D:21:D0:FC:08:E3:B4:95:A5:E9:87:58:3D:C1:99:1B
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584A8410F49DDF7EF0DB40DE7180
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/8944aab0-1fe3-3687-adf3-f634249121f2.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     2734
IP address blocks:        2605:6c00:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f4:9d:df:7e:f0:db:40:de:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=519b62b5-d5c5-4d60-992f-c136b78d0913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6b:0b:57:09:65:d2:4c:d0:0a:22:a6:9b:5d:
                    de:b2:36:28:1b:27:59:d6:47:27:20:a2:36:13:48:
                    a3:87:97:9a:29:d0:e5:ac:02:8a:d9:2a:7f:d1:22:
                    20:a2:40:00:02:3b:45:ef:61:52:19:18:d5:7e:7c:
                    9d:e9:4f:11:26:21:80:71:dd:da:1d:ec:cd:d9:ed:
                    1e:01:e9:28:6e:17:0a:dc:53:4e:ca:4d:cf:a6:55:
                    fe:91:78:76:79:51:63:eb:9e:78:17:5e:c4:05:fa:
                    28:5c:6d:a0:04:ff:7c:85:6b:26:98:80:3f:dc:83:
                    e2:0a:d8:76:a8:f8:81:f7:4c:7e:45:06:14:b6:a9:
                    df:0a:4b:ea:8e:94:ed:07:c9:4f:07:48:e3:51:26:
                    38:ad:d3:7a:79:3d:d2:f3:04:35:8c:98:69:a5:f5:
                    29:bd:77:5b:ca:07:20:6a:8a:81:b2:70:b3:d5:1c:
                    75:55:93:93:37:93:ae:27:d1:2b:41:ea:35:72:b2:
                    bc:68:da:ab:fd:98:df:d1:f5:33:ef:66:9a:2f:dc:
                    13:6a:5c:b1:16:10:f1:1f:30:e6:e6:25:7e:1d:d4:
                    4d:2e:b6:8e:b9:95:55:9a:6a:90:59:4e:25:cb:ac:
                    df:fb:7a:3d:6a:3b:90:07:44:e2:46:66:42:3a:9b:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A1:F8:CA:2D:21:D0:FC:08:E3:B4:95:A5:E9:87:58:3D:C1:99:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/8944aab0-1fe3-3687-adf3-f634249121f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:72:8a:fa:dd:c2:82:9d:2a:cc:67:26:06:fa:af:d0:40:05:
         bc:88:81:c2:52:a8:40:77:a8:b5:a1:ca:3d:ea:b3:8f:b0:0a:
         ca:e5:e0:22:a1:55:8d:c5:39:60:df:5b:67:e0:c8:78:1f:68:
         21:18:21:53:c6:7f:4a:2f:88:76:b9:d2:51:51:3b:22:91:6d:
         62:bb:1b:b8:3e:92:35:11:a6:70:7b:ea:11:6d:13:ef:a8:cb:
         e5:66:20:e5:dc:ef:57:44:0f:4e:99:66:23:ad:9b:19:04:17:
         01:fb:20:eb:37:64:62:1a:a8:68:c0:73:ef:4f:dc:33:51:90:
         cc:b0:4f:53:7e:41:71:b1:61:d0:e7:f4:ea:0a:62:3d:9d:ec:
         78:bf:df:d9:ea:9a:c3:55:9d:b3:60:9c:80:0a:55:5b:63:0d:
         05:6f:7e:7f:4b:1f:91:d4:8d:dc:e7:2d:dc:10:0c:16:85:29:
         aa:7e:92:6a:31:5e:d2:9f:2a:75:d0:79:c9:d8:ec:b4:00:ce:
         c5:95:80:83:54:38:79:84:db:9c:42:b4:0a:98:0c:21:7f:d2:
         3b:38:12:04:a9:54:bc:d7:2b:02:01:cf:b2:b8:c1:63:41:bb:
         1b:ac:dc:8d:a2:75:b9:56:34:05:c9:8e:03:51:e2:ed:42:db:
         75:7f:b3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:07:09 2025 by rpki-client