Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/cfdce237-bed0-38a8-9b8c-86a6a3779667.roa
File:                     cfdce237-bed0-38a8-9b8c-86a6a3779667.roa (raw, json)
Hash identifier:          hzpKLLS9N4vdwzFKHmDVd+06HJs1PWtlC4SnEDYWzLU=
Subject key identifier:   DD:60:4A:CC:A3:B8:6A:46:34:4C:2B:6E:98:8D:B7:18:FD:89:AD:6B
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584EA79C426CE04C46BED0099500
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/cfdce237-bed0-38a8-9b8c-86a6a3779667.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     2734
IP address blocks:        2605:6c00:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:42:6c:e0:4c:46:be:d0:09:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=56dff496-0cb5-46cd-a3ba-2c2147eba4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bb:2a:09:3b:01:1c:2f:2e:88:fd:47:14:d6:
                    98:8e:0c:6a:9d:e4:75:36:f2:0b:7f:6c:13:bb:b4:
                    06:2a:76:52:c0:4f:26:8f:82:9b:41:70:f1:b7:70:
                    ec:56:30:01:7f:3b:9a:0b:85:47:90:1d:c8:1e:13:
                    c0:fe:c8:eb:11:1e:07:7c:94:b6:69:d9:06:30:f0:
                    8f:7d:15:ba:89:bd:f4:8b:11:17:e5:d3:f5:77:29:
                    1d:ac:68:96:eb:e8:6c:83:c7:43:98:5d:c1:d0:ce:
                    0e:4d:6c:c0:1c:13:f7:c0:b4:a1:ef:0f:e2:8b:78:
                    83:f9:2a:84:8a:51:17:b2:aa:70:08:59:f1:a6:e1:
                    7f:80:4a:6e:d5:b2:d2:15:fe:61:47:1d:fe:0e:cb:
                    36:9e:2a:84:46:93:48:b6:fc:8e:28:18:b5:8d:76:
                    c2:47:4d:c8:04:8c:b6:a3:bd:85:46:35:34:b7:99:
                    78:2a:4d:33:d8:08:7c:7b:65:4d:ea:2e:bb:74:82:
                    c3:76:45:7d:5f:8b:8c:c1:fc:c9:2c:43:66:e5:06:
                    da:65:a1:ca:37:3e:a7:72:80:3a:86:7a:9b:f4:e4:
                    d0:b8:fa:7b:63:be:32:c5:cd:6c:46:32:3c:4b:72:
                    a6:4f:26:4f:49:8c:70:4a:a7:eb:8e:eb:12:fc:3e:
                    f5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:60:4A:CC:A3:B8:6A:46:34:4C:2B:6E:98:8D:B7:18:FD:89:AD:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/cfdce237-bed0-38a8-9b8c-86a6a3779667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:cc:a2:bc:fa:82:c3:5f:9c:e2:22:d0:12:d1:fb:c0:a2:5a:
         0e:6f:27:52:1c:aa:c4:10:fb:53:89:02:8b:3c:76:54:2b:36:
         5c:72:93:36:5f:e6:64:6f:85:8f:d2:52:aa:69:d8:b3:28:a6:
         f2:90:d9:ed:80:31:74:bf:77:3a:fe:b5:b1:b0:dd:9b:ae:fe:
         94:01:1f:b5:bc:5f:f3:4e:df:0a:1b:f7:dd:90:15:c1:47:08:
         79:c4:79:79:3e:d5:f5:a5:94:41:79:4a:81:fc:f6:09:69:8c:
         83:e0:df:46:db:c3:72:7b:61:c7:cb:c8:c1:77:19:79:06:ce:
         ef:1c:d5:f3:05:91:c7:ba:74:07:10:d5:fe:06:0b:41:bc:67:
         17:6d:85:f2:95:92:54:02:16:e9:9f:72:b2:8c:88:1e:6a:e9:
         b8:78:a4:4e:27:b7:dc:96:7f:13:46:e4:b2:b6:63:80:58:e4:
         a6:aa:bd:5b:af:96:0b:72:a9:c9:d6:3a:8f:a8:5a:07:36:52:
         6f:cf:aa:a3:d6:cd:31:da:79:16:52:ec:3e:12:f6:8a:52:ee:
         8d:f4:28:3b:54:9c:74:e9:6f:b9:60:79:12:7e:85:f0:cd:19:
         98:0c:be:58:41:14:e2:b0:d4:72:85:d0:b1:82:4a:4f:05:00:
         f6:f9:88:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:35:58 2026 by rpki-client