Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa
File:                     6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa (raw, json)
Hash identifier:          hmfiaxlKnbHEZbb6U/szufW/zwneYZoPg+StNbfzb1A=
Subject key identifier:   57:D4:6C:07:A1:43:E9:78:E5:CD:F2:53:22:37:45:BD:B2:09:B3:6F
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584AB650E38BCCA5F9FF6B937130
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     12129
IP address blocks:        2607:f790::/32 maxlen: 32
                          2607:f790:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e3:8b:cc:a5:f9:ff:6b:93:71:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=6235b340-ba52-47bb-bcaa-53348ac5fa4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ba:12:4e:1c:60:6a:68:0e:eb:b8:6a:bd:90:
                    fc:76:ab:c0:49:31:2c:92:f6:32:04:23:8a:fb:84:
                    9c:f7:b5:97:63:73:73:70:67:f9:06:b6:d6:56:fc:
                    56:e1:e6:ba:ef:8d:02:43:cd:19:79:03:e3:fa:14:
                    5f:7a:07:89:58:c3:f7:8d:a9:5c:ac:79:0b:51:44:
                    5c:fc:4b:e3:bb:f9:69:db:53:2b:5b:da:1d:c3:fa:
                    73:f9:4b:7f:b0:85:7c:5a:7d:f1:29:e9:87:af:5d:
                    15:fd:c0:d4:a8:09:7d:a7:83:db:9c:fb:2d:af:18:
                    24:d7:7d:62:a6:de:7b:05:69:33:0e:97:f5:1d:2c:
                    c1:91:15:ef:38:35:a3:f0:87:3c:b8:e6:a1:b8:86:
                    23:ad:7b:be:2d:79:2a:c9:e3:90:c4:a8:9c:2d:04:
                    44:f4:e7:67:0d:b9:fc:31:1c:14:8d:14:3c:58:90:
                    4f:40:f4:df:cd:cf:37:95:ad:c2:4b:0d:b2:bf:42:
                    32:85:30:3d:a2:ca:c1:8c:63:85:60:76:5f:54:56:
                    ae:c1:7d:1b:29:04:9e:93:32:29:c9:76:8a:7b:40:
                    53:65:15:a3:61:4e:f6:b2:5e:32:84:64:2f:47:55:
                    d4:13:96:a8:a6:ae:43:f4:f5:92:21:d9:68:e8:0a:
                    ec:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D4:6C:07:A1:43:E9:78:E5:CD:F2:53:22:37:45:BD:B2:09:B3:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6ba94df3-35c6-32c2-a7c0-e1b0817f0606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f790::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:cd:96:36:54:77:e9:c6:51:52:d8:3d:ba:94:9c:63:43:b8:
         b5:3e:78:a0:10:58:b9:a7:4c:a9:47:38:35:1f:f3:c2:62:49:
         fd:26:3d:5e:9b:21:15:c9:41:99:59:11:34:8c:d2:5a:1a:46:
         54:62:37:7a:7e:f5:5e:b6:58:a1:ea:32:42:c3:02:66:0d:31:
         c9:20:cf:74:73:11:19:81:0f:34:33:84:b7:db:12:79:6f:1d:
         f6:84:d3:22:be:e3:e5:3d:a3:fb:ee:d5:f2:88:e8:ed:57:fa:
         31:2d:0e:8c:4c:4c:81:cf:c8:ca:bb:40:60:47:e3:61:3a:20:
         c4:94:29:18:48:98:00:d7:1a:eb:b0:55:7a:97:75:50:21:19:
         88:38:bf:33:9a:f8:41:96:99:12:d8:75:d9:97:76:b6:02:cb:
         49:27:5e:9a:6b:81:ea:e5:19:d4:17:15:45:a8:74:dc:f2:a4:
         14:b6:cb:36:77:75:33:23:a7:47:32:13:f3:8b:41:bb:94:62:
         73:ac:25:ae:81:f5:80:b9:f6:e0:d8:e5:86:19:84:40:65:04:
         cd:f4:d8:e8:15:d1:68:ec:69:7c:fe:9a:76:64:b6:18:b4:bb:
         f0:be:33:54:c2:f3:ad:f5:e6:f8:22:db:8f:b8:94:23:5e:80:
         8f:25:25:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:17:06 2025 by rpki-client