Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/c0c026d8-87c0-3619-a341-f0f3782750ee.roa
File:                     c0c026d8-87c0-3619-a341-f0f3782750ee.roa (raw, json)
Hash identifier:          5MRQfDeWjPRmeVnNjbY/ttOm5iJNSsFHtw1IMFq21bo=
Subject key identifier:   F6:40:08:C6:49:F7:A6:62:8F:5E:08:1B:47:23:F8:F4:08:9D:28:73
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F4328584B0A1165FFD8AE38F0E423D800
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/c0c026d8-87c0-3619-a341-f0f3782750ee.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     393885
IP address blocks:        2604:4a00::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:65:ff:d8:ae:38:f0:e4:23:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=81b12daa-3800-46d1-872c-0860d5a85e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6c:a1:e1:76:c0:e0:17:7f:bf:f0:70:ae:8f:
                    55:7a:23:1d:0b:c2:2e:02:8a:f7:e6:bd:43:e9:59:
                    dd:31:09:23:54:67:30:6b:fb:c3:08:b0:78:25:23:
                    24:4a:e0:19:6b:36:c5:e5:7e:c3:bb:51:9a:9a:6f:
                    4a:90:af:58:41:ad:69:7a:4c:97:69:1c:ad:ea:f8:
                    f3:32:57:27:c4:ec:b5:21:c3:4e:cf:a5:7e:5d:d6:
                    32:6d:83:09:f8:d8:37:1e:4a:dc:6f:cf:ba:af:b0:
                    17:7a:ba:fe:c1:6c:73:34:7c:5e:f2:56:a1:99:6a:
                    59:8b:d7:c7:41:35:b1:24:c7:b6:86:72:ce:49:f7:
                    fe:de:d8:ae:b4:91:16:33:ce:b9:3a:5e:ed:95:86:
                    c0:05:e5:f7:0f:81:b8:5d:d4:f0:2a:28:3f:ad:51:
                    73:2b:6e:85:f5:c5:3e:c5:35:fa:ad:94:c7:04:9b:
                    49:e4:74:cd:d4:57:62:e3:c8:d3:ed:c9:1d:72:d9:
                    8a:8c:f8:f8:e1:e1:a1:b1:26:80:c2:2d:b1:d0:f6:
                    3d:a8:4b:8c:2c:31:c4:68:50:2f:2c:14:a1:17:e8:
                    3b:86:68:05:01:f8:5a:1c:30:93:95:07:ed:f9:87:
                    3f:5f:5e:4c:37:30:5f:05:74:14:ed:b8:87:86:ad:
                    e3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:40:08:C6:49:F7:A6:62:8F:5E:08:1B:47:23:F8:F4:08:9D:28:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/c0c026d8-87c0-3619-a341-f0f3782750ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:99:e0:4d:c1:d3:fd:be:18:bf:5c:17:55:6d:3f:5b:79:89:
         f0:00:52:f5:4c:35:72:4f:95:97:d8:4f:3c:3d:8e:0d:01:81:
         58:4b:84:7e:d2:24:0b:a0:df:61:e5:e2:ff:b3:9d:d9:9f:1e:
         cb:dc:e7:68:ec:21:80:33:68:cd:98:87:ee:e8:e7:5c:04:8a:
         32:43:ab:0d:5f:df:3a:0f:f5:5c:2a:ae:cc:37:7f:ae:0b:67:
         04:b6:94:08:f0:21:f7:9e:f9:58:1a:75:4c:55:4f:b0:aa:c6:
         48:e8:51:c8:13:0d:06:b9:52:e4:73:29:c4:8c:3c:d5:fc:9d:
         e3:2e:9a:e6:8b:02:5b:a3:c8:64:6b:10:52:62:3e:08:42:b3:
         94:6c:b7:65:00:40:e1:af:a8:fa:c9:8f:98:9f:01:00:86:1e:
         85:d4:fe:f3:fe:d0:56:09:81:e1:99:fc:a7:2d:15:c1:9b:5f:
         1d:dc:4c:fa:c7:1a:e0:ef:f6:65:3f:10:c5:0a:e2:b8:f3:06:
         c1:e6:a8:91:d0:e8:e8:9c:df:29:d4:79:08:81:89:cc:88:55:
         61:76:99:04:d7:96:33:de:16:fc:7e:72:37:e9:e5:07:6e:a7:
         1f:0b:05:6f:dd:71:ca:bc:5d:e8:e2:78:97:d9:4e:16:96:84:
         f5:7f:c3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:42:18 2025 by rpki-client