Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d00a21f2-bc70-3cdd-94de-6e0d60a056a3.roa
File:                     d00a21f2-bc70-3cdd-94de-6e0d60a056a3.roa (raw, json)
Hash identifier:          dXrZREW+dDzCSCGspTLm+D54sevZ+mQwnjFAaBR5t0U=
Subject key identifier:   94:08:91:6C:EB:5F:77:C2:CB:9B:22:6F:6D:42:BE:0C:1D:54:A9:72
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584AAC8B81CF6912860F848A5B80
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d00a21f2-bc70-3cdd-94de-6e0d60a056a3.roa
Signing time:             Tue 29 Jul 2025 01:00:48 +0000
ROA not before:           Tue 29 Jul 2025 01:00:48 +0000
ROA not after:            Mon 27 Oct 2025 01:00:48 +0000
asID:                     5769
IP address blocks:        2606:3c00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ac:8b:81:cf:69:12:86:0f:84:8a:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Jul 29 01:00:48 2025 GMT
            Not After : Oct 27 01:00:48 2025 GMT
        Subject: CN=9e3ef6b8-e256-41c3-b041-d3b9e198010d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:50:92:d3:00:ad:5c:c5:8c:5b:73:ef:dc:3f:
                    ef:f5:2c:34:f7:e5:10:56:18:77:00:6c:6e:6c:37:
                    db:fc:8d:bc:a5:9a:e0:aa:97:81:c9:bf:c7:97:08:
                    48:3b:14:dc:fd:dd:3f:a5:84:23:38:09:ee:f7:8f:
                    eb:c0:43:ef:42:fd:37:4a:d9:90:c8:37:55:a6:68:
                    54:60:90:b2:0c:24:66:f7:40:24:15:3c:bd:78:cf:
                    5c:e1:51:8a:a0:ee:42:3e:bd:57:70:eb:9d:06:02:
                    da:af:bd:f3:7a:3a:a0:f4:b7:25:5e:47:95:2f:a1:
                    79:10:61:bd:46:48:59:d0:c8:91:f8:61:5e:ed:bd:
                    82:99:45:17:a1:90:1a:00:30:73:e3:73:6d:dc:f1:
                    2c:c0:0d:01:d9:83:d3:52:dc:64:a2:8e:aa:66:4d:
                    e1:9a:b9:af:ad:68:6f:fb:ac:6c:89:b2:b8:04:de:
                    6e:b8:9d:1f:45:b7:50:e5:5f:3a:2e:be:b0:4b:b5:
                    69:a1:26:53:ac:cc:4d:4d:46:c4:b0:e3:c3:24:4c:
                    15:1d:1e:60:4d:7d:17:81:bb:0b:52:fd:51:74:6b:
                    f2:ed:ec:99:83:27:58:dc:da:6e:2d:35:d9:e2:c9:
                    2d:3b:43:52:1b:b3:52:62:09:fb:19:4e:20:93:a7:
                    38:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:08:91:6C:EB:5F:77:C2:CB:9B:22:6F:6D:42:BE:0C:1D:54:A9:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d00a21f2-bc70-3cdd-94de-6e0d60a056a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3c00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b9:0c:5c:21:71:ea:d2:a1:d9:c6:74:b6:11:52:ef:ea:46:
         bf:db:68:8a:f9:eb:fe:9c:79:0c:14:53:5e:56:1f:72:2a:17:
         10:f2:e1:13:7d:8c:c3:9d:71:13:32:c9:68:a4:e7:00:5b:aa:
         cc:79:d7:72:fe:89:52:80:5c:79:ee:30:a2:a0:b0:ee:e7:f9:
         ed:f6:92:40:17:aa:ae:3a:50:30:f9:06:c8:5c:e2:16:35:1e:
         07:14:bb:62:dc:21:a5:3e:24:a7:a6:a7:e4:19:05:8c:26:94:
         94:e9:1b:83:58:6f:99:8e:dc:51:4e:2a:2b:e9:5d:dc:4d:5e:
         77:7f:49:dc:c3:9d:40:df:42:6b:94:53:01:58:ee:cf:cc:e1:
         73:3d:da:b3:b7:79:38:90:99:8d:d2:7f:ac:fa:a1:2e:5b:ff:
         8a:83:10:07:85:fb:00:7f:a5:c1:a2:4a:ee:66:59:75:42:91:
         5e:99:d3:ff:ce:dd:a8:25:1c:d6:09:74:11:b1:5b:3e:73:e2:
         dc:e9:79:3b:f9:03:bf:20:9f:22:c1:58:f5:e6:d7:48:df:e0:
         95:4d:2e:00:6f:e2:f6:ba:53:a7:88:29:b8:f0:3c:79:a8:79:
         d7:83:d5:6d:42:19:0b:57:24:44:74:ad:6a:fa:10:79:45:44:
         d3:db:c6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 05:05:19 2025 by rpki-client