Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/e6729abf-04c8-3788-a91a-7f7d1939e242.roa
File:                     e6729abf-04c8-3788-a91a-7f7d1939e242.roa (raw, json)
Hash identifier:          SqZx8ZW7AMx2pt+eQAUx2ZPJhUdfrR6tfSc6dO4gYpc=
Subject key identifier:   37:14:31:44:E4:65:E0:C2:D1:A7:9E:95:F4:D0:0E:48:B2:20:45:43
Certificate issuer:       /CN=07b1b458-5261-4e4a-a0fc-1757fe461f75
Certificate serial:       010D0C9F4328584B3126F23748A3058EFAFC3950
Authority key identifier: 93:6E:45:7E:D8:C9:63:EE:99:E8:2F:26:1A:3D:10:CE:14:AA:B6:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/e6729abf-04c8-3788-a91a-7f7d1939e242.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     20371
IP address blocks:        2604:a740::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:f2:37:48:a3:05:8e:fa:fc:39:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b1b458-5261-4e4a-a0fc-1757fe461f75
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=1bdf9649-b1ad-41e5-9657-8e0c16369b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1e:8d:92:50:48:66:ac:8e:33:a8:7a:90:02:
                    94:d4:b1:b3:70:d3:1d:5e:37:ec:c8:d0:40:e1:22:
                    33:a2:fc:1d:03:7a:81:e1:12:26:88:62:bc:aa:8e:
                    56:c5:bc:b0:02:59:0e:94:cc:c8:48:68:88:44:ae:
                    62:6c:6e:11:5f:d6:ea:1e:27:2f:48:c2:c6:f0:4d:
                    71:15:ff:56:69:d5:23:52:dd:88:d6:ba:26:63:8f:
                    b6:c0:0d:4d:14:ef:6f:19:af:fd:ec:5a:01:d5:43:
                    48:4f:9c:87:f0:ce:6a:95:26:b5:20:2e:8c:58:ae:
                    2b:ba:3c:9c:39:0c:60:cb:5d:e6:a6:16:a5:31:1f:
                    9a:7d:0b:08:77:e6:d9:b7:e9:24:6b:dc:f0:c3:f1:
                    9f:c7:11:91:f9:a4:fd:24:e9:50:4a:3c:f3:9c:ae:
                    5d:88:9f:4e:ad:ad:15:c8:dc:c6:a7:83:a6:68:18:
                    11:ab:a6:0f:0a:d8:57:7a:be:3f:51:9d:9b:4a:46:
                    6a:54:82:ae:58:66:80:e2:1e:70:bf:b8:dd:d6:62:
                    a0:97:c1:76:e3:a5:45:0c:aa:1b:e9:64:a4:8c:a8:
                    dd:a6:7c:d7:96:61:bc:e6:06:46:dd:5e:a7:ac:ed:
                    3b:0f:93:b7:ce:06:95:67:3e:4f:03:fc:2d:15:d3:
                    3c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:14:31:44:E4:65:E0:C2:D1:A7:9E:95:F4:D0:0E:48:B2:20:45:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/e6729abf-04c8-3788-a91a-7f7d1939e242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.crl

            X509v3 Authority Key Identifier:
                keyid:93:6E:45:7E:D8:C9:63:EE:99:E8:2F:26:1A:3D:10:CE:14:AA:B6:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:89:df:06:db:7b:f2:89:77:99:50:46:18:8b:b9:3b:a6:da:
         54:a1:cc:40:1f:69:b6:cb:1e:20:6b:55:1c:68:c1:4f:90:b1:
         44:b3:ad:c9:87:80:00:f1:fe:8c:f8:8c:af:d9:97:1f:87:7e:
         07:54:ba:8e:33:3a:98:2b:d7:e6:b5:95:3a:b0:2b:a0:ab:8a:
         16:c5:bf:d0:e0:59:e9:4b:33:e5:02:6e:a2:fc:23:1a:55:6b:
         90:ce:56:0d:3c:0d:7b:a6:c7:ee:54:80:ba:9f:8f:57:05:a7:
         07:d6:ba:84:4a:42:f9:c5:35:37:48:01:e6:c6:a9:bf:9a:fa:
         c7:2b:cd:2f:80:12:bd:87:0b:65:bd:75:4f:58:25:57:55:90:
         cb:b6:50:c9:c5:71:1e:04:ac:00:a5:c7:2e:aa:34:56:e7:73:
         7e:c3:72:f2:1a:63:1d:ac:6d:54:d8:7d:e7:81:a7:38:3d:4d:
         cd:70:70:1c:0c:27:b9:16:cd:2a:ef:a5:a0:34:d7:ce:9c:c4:
         3a:65:91:e8:33:f5:87:a2:d0:0d:92:cf:45:d1:97:3a:e7:c3:
         55:63:3b:86:89:28:bd:74:41:a4:3e:31:a3:94:1e:e8:87:c0:
         42:c4:57:ef:b8:51:58:ff:54:70:26:9b:53:4d:59:dc:d5:b4:
         2e:72:66:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:39:15 2025 by rpki-client