Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2e58d574-11fd-3248-8d46-82d8c4d93007.roa
File:                     2e58d574-11fd-3248-8d46-82d8c4d93007.roa (raw, json)
Hash identifier:          OZ0+fVcRP8BPLQcBGRB5pWXmI5EF/SiAVI2z/pJggwQ=
Subject key identifier:   D4:28:BB:51:C3:D8:D6:C8:23:3E:7A:89:25:FE:2F:66:86:86:D2:BF
Certificate issuer:       /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
Certificate serial:       010D0C9F4328584B1D9C229E637CCE4026685260
Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2e58d574-11fd-3248-8d46-82d8c4d93007.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     396026
IP address blocks:        2607:fc30:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:22:9e:63:7c:ce:40:26:68:52:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=337bbd13-25c5-4fc4-a340-a83e81fc5471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b0:1b:f9:cb:96:a0:ca:51:97:cf:d3:eb:63:
                    f4:15:f2:51:5e:98:c4:c1:ca:15:b9:eb:52:6c:20:
                    01:ef:86:f2:91:0f:12:30:6e:bc:45:58:45:2f:ec:
                    42:07:82:74:15:4f:c9:82:76:c5:a3:06:92:8f:74:
                    f5:b2:3b:40:25:5a:1e:91:a0:2d:3b:64:20:30:f9:
                    73:bc:1f:40:1c:d6:a7:1e:0f:60:3c:46:45:52:ef:
                    41:82:b9:b4:50:cb:63:dc:98:7b:9c:e4:73:b9:1e:
                    46:b1:3a:8a:a6:5f:f8:f8:5f:c4:e2:bf:a9:dc:33:
                    80:f6:9b:50:92:08:8a:53:da:01:19:2c:56:d3:31:
                    5f:9e:c9:86:34:6a:41:5b:84:b7:43:86:13:d1:7b:
                    fc:f1:8d:12:fa:96:69:49:b8:55:92:f9:c5:45:c3:
                    18:ac:e5:a6:a9:00:4e:38:54:5e:8f:94:23:d1:ac:
                    fe:49:50:9d:fd:e2:9a:5e:a7:ca:98:6c:de:fa:a4:
                    39:de:fd:c7:7c:41:0a:a8:22:26:bd:31:18:af:68:
                    71:a3:ad:2f:b5:49:4c:b3:fa:3a:84:92:2f:db:b3:
                    89:52:e5:ad:db:a6:c0:27:f6:6a:ba:40:87:b7:a2:
                    5b:45:02:bf:05:7a:8b:f4:fc:fa:a5:d7:2b:8f:8a:
                    38:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:28:BB:51:C3:D8:D6:C8:23:3E:7A:89:25:FE:2F:66:86:86:D2:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2e58d574-11fd-3248-8d46-82d8c4d93007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl

            X509v3 Authority Key Identifier:
                keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc30:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:8c:71:1a:89:f2:a7:5d:f5:01:d1:25:b0:72:9e:61:7e:55:
         1a:73:c4:3c:74:83:73:4e:2e:cc:bb:94:00:81:b1:61:49:9a:
         f2:55:cb:e4:40:a7:7a:0b:02:a9:61:b2:f4:47:c9:7e:ad:6c:
         6c:b9:75:31:b9:28:27:13:a5:a9:88:07:c1:9f:6a:e9:33:e4:
         92:3f:32:36:6a:81:b6:6b:00:15:03:cc:4c:d8:65:f6:4f:ae:
         70:be:30:4f:dc:98:c4:5a:e0:c1:7b:e6:a5:79:48:7e:1f:82:
         89:35:2f:51:eb:d5:82:fd:d9:02:b9:08:73:7a:64:7b:94:79:
         a3:07:c6:c2:fc:f1:26:45:b1:69:fc:9f:4b:89:e7:b0:5e:1c:
         05:c6:b5:47:1f:41:9d:81:ed:fa:77:0f:45:aa:41:d9:77:80:
         a3:ef:03:88:b2:cc:d0:75:4b:86:6f:35:cc:7b:71:ca:77:68:
         cf:14:d8:8a:3a:bb:6b:a7:d4:7c:c7:cd:da:33:4a:0a:1a:51:
         8b:72:5d:a7:d4:ae:07:cb:aa:09:42:f5:74:c0:fb:64:af:4a:
         f7:ac:d7:d4:9c:a5:21:e1:f5:ae:d3:c2:e0:b9:cc:5f:d8:a6:
         70:87:38:04:59:41:c7:8c:5e:36:fe:61:fe:67:3b:79:f8:cb:
         6d:22:31:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:14:09 2025 by rpki-client