Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/36746d5e-b777-3090-864b-cc36fff7cc3f.roa
File:                     36746d5e-b777-3090-864b-cc36fff7cc3f.roa (raw, json)
Hash identifier:          pb0ZP9LyOvyqeTq9ykz+qsJZ280L103y675wgMEqP6I=
Subject key identifier:   34:41:62:3A:A4:FA:35:EB:EE:77:C2:8B:6F:2B:D2:B1:6A:D5:C9:0A
Certificate issuer:       /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
Certificate serial:       010D0C9F4328584AD7D119ED9451EA416AAE8980
Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/36746d5e-b777-3090-864b-cc36fff7cc3f.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     53589
IP address blocks:        2605:2900::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:19:ed:94:51:ea:41:6a:ae:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=5ac3d22b-4271-4ec2-bf83-e9f6719c88e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d1:cb:46:8c:8d:bd:3c:a4:47:52:80:61:e3:
                    ce:2c:f0:db:05:56:f3:a1:c0:40:d9:1b:6b:4b:43:
                    22:c2:23:26:09:8b:03:a1:f0:f0:ad:87:a1:f4:a3:
                    30:bc:4a:d5:3c:34:ac:02:f6:5a:bf:d3:51:9e:ae:
                    90:06:56:13:64:4a:29:90:93:60:62:31:0b:cf:12:
                    37:e8:9f:a4:f1:3b:13:05:48:7a:7b:9e:f1:bb:19:
                    c0:da:9f:6b:4e:75:e6:58:bb:44:a4:9e:ba:35:b5:
                    3e:a3:15:c8:e7:b1:c5:0b:c5:8a:bf:e4:f1:80:4c:
                    0d:1c:ce:37:ac:06:c3:dd:12:f5:4f:21:aa:09:bb:
                    6c:14:e7:2f:aa:30:ae:2c:2b:0c:bc:e9:25:96:11:
                    6e:d9:45:d6:f5:93:9b:eb:a5:e2:3b:3c:31:19:5c:
                    e5:b1:06:1c:1a:60:a4:0e:6f:93:64:54:88:24:02:
                    c8:75:da:1d:23:d6:5b:28:e9:e3:b0:0f:f6:00:95:
                    a5:79:60:6a:a1:b1:8d:e7:2d:50:27:db:60:ee:ea:
                    d6:6f:c3:5c:4f:b0:a1:a6:28:b6:0b:2c:25:bd:2c:
                    cb:89:29:98:76:8d:5b:79:cc:c7:32:8a:30:d2:de:
                    06:41:c3:73:87:99:b9:b7:37:f9:24:e4:07:43:df:
                    a4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:41:62:3A:A4:FA:35:EB:EE:77:C2:8B:6F:2B:D2:B1:6A:D5:C9:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/36746d5e-b777-3090-864b-cc36fff7cc3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl

            X509v3 Authority Key Identifier:
                keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:df:43:c8:fc:b7:af:a5:29:a6:7a:6f:ab:a0:60:82:d9:b8:
         ea:9a:85:64:c2:1c:7e:96:27:9e:b5:50:b6:86:1f:34:a9:9b:
         25:c3:bc:4d:c4:0e:67:2c:c5:51:d7:fb:2f:c7:b7:d8:e6:8a:
         f5:f7:cd:b1:86:2a:d7:e8:ea:2f:18:a3:e8:15:44:93:9f:db:
         e7:eb:cd:52:3d:5a:4e:f3:c3:1e:43:93:e6:69:17:89:14:b5:
         32:16:3b:f8:fb:ee:6c:18:41:9d:55:0f:02:0c:b4:67:4e:d8:
         e9:f8:38:35:09:71:8e:ec:ec:76:c0:05:7a:0f:ac:3f:18:91:
         96:dd:dc:9b:39:64:f5:35:5d:c9:73:a6:44:38:d9:c6:28:e3:
         0c:c0:c9:7c:1f:38:23:41:a9:d8:3a:ab:9c:07:2c:7d:62:e2:
         a1:da:6a:c7:0f:27:91:e7:96:2c:87:91:86:37:ec:9d:98:2c:
         22:d6:e3:a2:d3:8b:af:86:24:68:a6:14:08:b2:b1:98:af:31:
         18:5f:d7:6c:c8:7b:b7:8a:fb:82:13:bf:09:ec:e9:76:3d:9a:
         6c:5b:40:d2:75:51:a9:7c:6e:4a:2c:3d:38:e6:3b:98:92:3f:
         2c:08:b5:65:df:86:2a:a8:17:34:21:13:2b:13:05:60:32:00:
         b4:17:26:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 11:06:36 2025 by rpki-client