Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/3612a7fb-9f3d-35cb-a341-b647a5bd7005.roa
File:                     3612a7fb-9f3d-35cb-a341-b647a5bd7005.roa (raw, json)
Hash identifier:          KBhiBSi9SFKot/vuN2QiNi/NKxHUBHkv0t8YueTzNyY=
Subject key identifier:   82:3E:F3:06:AD:C0:BE:C4:D0:7B:17:00:8A:73:CF:F3:A2:A4:BF:3B
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584AECC151087A94A4E0D29CB0F0
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/3612a7fb-9f3d-35cb-a341-b647a5bd7005.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     397041
IP address blocks:        2604:f740:bacb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:51:08:7a:94:a4:e0:d2:9c:b0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=7a0bd3f8-8348-49a2-a51c-1a5fd0674121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:65:c5:93:f2:30:2d:cd:04:f5:52:f8:68:11:
                    03:f0:a1:37:f4:6c:6a:98:5b:3e:4b:6e:04:69:53:
                    2e:69:16:f8:c3:fc:e0:4f:49:0d:f9:fc:87:79:10:
                    33:af:a3:31:d6:34:a9:04:86:11:2c:8d:8e:aa:26:
                    c2:b0:d0:18:b5:29:71:9f:7b:a0:5c:7c:43:6e:f1:
                    60:ad:6a:de:86:ca:63:da:82:f0:0c:52:03:6a:5f:
                    44:53:45:11:8d:5b:03:bd:51:17:05:34:d1:2a:22:
                    8e:85:19:6b:2e:f5:3f:d4:4d:f6:1e:e0:31:26:13:
                    fc:ed:30:bd:02:ef:d9:77:cb:f4:ab:26:c6:91:4f:
                    31:a2:6e:ff:c8:4a:91:a1:ca:ca:e4:3b:90:c1:57:
                    10:75:49:38:ee:2f:a0:2b:3b:ee:80:5e:c9:2f:23:
                    0f:9c:38:3f:56:9c:c3:cd:e6:34:c0:7c:f0:ab:a3:
                    da:58:74:10:c8:18:fb:fb:da:1e:3e:c3:f2:ec:25:
                    04:d4:b0:c6:0d:c1:fd:24:bf:a6:90:f7:69:c2:99:
                    bb:70:0e:7f:08:a1:fe:6a:6a:0d:89:14:f8:15:e6:
                    7f:b1:b2:9b:8e:7b:a3:92:18:b9:eb:3f:c8:f6:ca:
                    bf:74:ee:bd:c5:5e:81:0f:11:73:f8:12:ff:28:49:
                    ae:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3E:F3:06:AD:C0:BE:C4:D0:7B:17:00:8A:73:CF:F3:A2:A4:BF:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/3612a7fb-9f3d-35cb-a341-b647a5bd7005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f740:bacb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:d2:e3:ab:11:42:98:b5:b1:63:dd:94:3f:6d:7a:5a:5f:a1:
         d0:04:d7:1d:2a:71:29:fa:a9:38:1d:dd:d8:a6:43:f2:b9:88:
         fd:20:ab:da:1b:70:75:65:95:1f:d6:19:bd:78:5c:aa:e8:48:
         fa:7c:03:1b:65:53:c7:2f:81:e8:aa:65:5f:5f:1f:41:bb:b7:
         d1:92:4a:eb:fb:41:c1:23:12:83:c7:cc:20:c5:b1:47:7a:e6:
         23:8b:c9:e8:38:3d:3e:61:fb:e0:76:93:95:ee:e3:d6:52:d2:
         19:3d:f2:6e:ba:66:9c:d9:32:69:02:ff:b5:1d:69:20:6f:4b:
         08:eb:50:f1:ed:43:63:79:b4:35:73:db:11:9a:a1:93:ea:db:
         07:0b:cc:7e:1c:62:3e:53:89:55:ea:41:6b:19:a6:b1:cd:ca:
         44:16:ff:56:35:a3:b8:6e:fb:f0:f5:b5:74:3b:a1:e3:52:3a:
         8f:e4:11:8f:5f:44:a0:bb:3b:45:c9:31:ed:98:8c:c0:e1:77:
         6e:0e:51:7a:64:33:bb:3e:7b:b9:7d:c4:a4:f9:89:08:dd:e0:
         4f:b2:34:6e:2a:78:7b:cc:37:4a:2e:c4:95:70:1c:68:f6:e2:
         c2:e2:fc:92:a6:91:e0:35:7d:cb:e9:0c:e0:e0:f3:31:d0:84:
         6f:0d:69:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 12:23:57 2025 by rpki-client