Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/730e6a0c-a4cc-3ed1-bfcb-eb43b653fd7c.roa
File:                     730e6a0c-a4cc-3ed1-bfcb-eb43b653fd7c.roa (raw, json)
Hash identifier:          mxjoCT/oUWdINW+gWWFGQVVjHlkhBjCR/IarrNpgMSk=
Subject key identifier:   D0:A1:0F:FA:6A:01:2D:2F:B8:AF:7F:D4:0C:D0:F1:46:6A:3B:80:97
Certificate issuer:       /CN=0dc43efe-e9d9-42d7-9b51-d08600e413fa
Certificate serial:       010D0C9F4328584B13D6B539367B82D671ED9E00
Authority key identifier: 31:B3:44:BB:3A:5E:1E:07:49:A0:AC:60:18:D5:52:DF:81:D3:F6:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/730e6a0c-a4cc-3ed1-bfcb-eb43b653fd7c.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     396298
IP address blocks:        2604:3cc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:b5:39:36:7b:82:d6:71:ed:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dc43efe-e9d9-42d7-9b51-d08600e413fa
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=9741697d-1462-40d5-9be7-5e52f8cf7009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a8:a7:cd:cc:28:fe:76:5c:33:6f:2b:2b:40:
                    a8:c3:ad:8a:63:39:ec:25:b1:2d:a8:96:f0:e8:e1:
                    0e:57:a4:5d:e1:3f:4f:bc:39:28:78:57:4d:63:e8:
                    3a:f1:5c:8b:b3:49:40:5c:18:be:95:c8:f4:e1:12:
                    79:4d:ab:aa:fd:ea:7a:56:73:df:4f:57:00:a4:9a:
                    c8:8c:47:d6:33:2c:ae:2d:69:33:6f:90:19:48:4d:
                    08:81:e9:a3:e7:98:fb:f1:21:23:9a:58:00:15:ab:
                    78:03:da:40:41:e5:41:91:f3:12:f2:5b:e6:6e:29:
                    ef:44:89:0c:69:0c:54:78:b0:1e:ab:53:ae:9c:da:
                    a3:07:da:53:a6:20:df:fe:15:5f:c3:8b:76:68:4b:
                    94:c1:63:b8:8b:33:3c:0b:bb:f1:7c:92:80:eb:69:
                    16:ff:fa:59:11:ef:54:a1:ff:99:55:fd:2f:fc:ee:
                    9b:26:1b:ea:dd:ea:1b:de:b8:df:59:da:27:89:53:
                    ae:f4:4b:d1:af:41:73:29:96:fd:71:2d:68:01:60:
                    12:ad:42:bc:87:be:2d:db:62:ce:ac:6b:a2:79:84:
                    19:a4:99:40:d2:8b:44:da:50:39:ae:5b:51:8d:f1:
                    ba:53:66:96:b6:eb:7a:14:72:13:35:13:68:85:31:
                    39:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A1:0F:FA:6A:01:2D:2F:B8:AF:7F:D4:0C:D0:F1:46:6A:3B:80:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/730e6a0c-a4cc-3ed1-bfcb-eb43b653fd7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa/0dc43efe-e9d9-42d7-9b51-d08600e413fa.crl

            X509v3 Authority Key Identifier:
                keyid:31:B3:44:BB:3A:5E:1E:07:49:A0:AC:60:18:D5:52:DF:81:D3:F6:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0dc43efe-e9d9-42d7-9b51-d08600e413fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ac:f1:84:07:9a:ba:e5:03:69:47:5e:72:47:54:bc:2d:31:
         d8:2d:ec:17:d6:d0:d8:0f:3c:c8:16:e5:a2:65:9b:ca:52:c4:
         a3:34:cf:c0:ab:55:45:43:3e:0b:66:c9:5e:97:6a:ca:15:76:
         3e:8b:ed:dc:86:11:f3:a7:6c:69:cd:6f:69:ae:c0:3f:13:92:
         2b:e5:54:75:1e:ea:66:36:04:28:2c:58:1c:82:27:ea:64:72:
         be:4b:03:32:9b:73:ed:fa:f0:e5:8a:fb:8c:4b:26:e0:78:22:
         3b:df:af:f6:a4:8f:4a:cc:92:6d:fe:8d:83:30:f0:9f:87:0f:
         d8:39:42:c8:8c:99:41:54:d2:a4:42:9b:92:db:34:02:6f:29:
         f0:61:70:63:31:07:36:03:be:54:79:e9:cb:a1:81:46:70:be:
         11:9c:1e:98:10:c1:3c:72:37:24:b2:a9:c2:37:e5:5d:07:71:
         fa:36:1d:73:f4:63:a7:dd:bd:45:80:e2:08:42:3b:0a:29:fa:
         ff:94:44:e9:58:46:e3:d8:91:c9:85:81:97:9d:97:32:76:40:
         d6:a6:1a:63:75:4a:fa:e0:f6:54:2b:91:14:05:ba:a6:d9:25:
         f4:f0:56:c5:83:30:cc:02:e7:2c:1e:72:55:f0:8f:25:af:8c:
         16:42:ff:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 16:03:08 2025 by rpki-client