Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/a29d5ba2-6995-3c9d-a08c-28b666cd1b84.roa
File:                     a29d5ba2-6995-3c9d-a08c-28b666cd1b84.roa (raw, json)
Hash identifier:          9KkFyAdVJoOlBk5GlGttdyJYnjPQcFcS/e6z7GhvkOI=
Subject key identifier:   CE:67:FA:1C:BE:AB:3E:A4:B2:65:BA:01:60:E1:6D:81:BA:75:55:6C
Certificate issuer:       /CN=03a7a8d3-26fa-4915-bacf-2848f9754758
Certificate serial:       010D0C9F4328584A62909457C18F45F4AFEA1880
Authority key identifier: 53:99:8A:12:01:32:65:4D:FD:B5:26:2B:D5:F8:28:BC:E6:EF:7B:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/a29d5ba2-6995-3c9d-a08c-28b666cd1b84.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     400326
IP address blocks:        2606:3f80:b000::/36 maxlen: 40
                          2606:3f80:c000::/36 maxlen: 48
                          2606:3f80:e000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:94:57:c1:8f:45:f4:af:ea:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a7a8d3-26fa-4915-bacf-2848f9754758
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=5354d06f-d0bf-45c7-86dc-7e1772ee8ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8b:0d:dc:04:ef:fb:28:03:e6:be:d7:e0:f8:
                    49:ae:42:d5:ff:93:e7:69:bb:27:6a:93:cc:73:36:
                    8c:a8:7f:9b:48:98:34:3e:31:0b:fa:8d:81:5a:a9:
                    6f:2e:a1:0f:ba:4b:76:5b:cf:ac:9e:7f:5b:60:12:
                    bc:b8:75:89:31:ec:30:7e:b2:d0:c3:2f:54:55:8e:
                    c3:56:09:04:e3:29:b5:47:db:59:ee:3e:b2:74:a1:
                    80:c1:45:43:f6:0a:91:f3:33:14:4f:1f:91:fb:0c:
                    77:a8:19:2f:70:2c:e0:dc:b8:a1:9a:e5:ca:5c:b6:
                    e7:44:91:01:eb:ea:63:cb:83:b8:88:6a:93:b8:b6:
                    21:cc:bb:f9:69:89:ab:c1:ac:f1:46:34:1f:a1:58:
                    76:f7:3d:c3:c9:e2:00:14:f7:1c:2a:e9:41:bd:c7:
                    a8:2a:b8:f5:18:da:04:a1:c4:58:17:db:50:c4:d3:
                    52:e5:6f:6e:d9:cc:49:b7:f4:54:41:5d:32:70:bf:
                    ed:31:46:9a:eb:ab:14:fa:7b:8c:2e:93:3b:3d:cd:
                    88:34:6b:9c:5c:4f:a1:31:52:6a:b1:5b:05:2c:af:
                    cc:a8:ad:71:9f:ec:ff:1f:d7:11:b2:a6:96:2d:a4:
                    f6:69:e7:7c:c3:4d:a4:1d:ab:fe:35:03:6e:45:f5:
                    65:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:67:FA:1C:BE:AB:3E:A4:B2:65:BA:01:60:E1:6D:81:BA:75:55:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/a29d5ba2-6995-3c9d-a08c-28b666cd1b84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.crl

            X509v3 Authority Key Identifier:
                keyid:53:99:8A:12:01:32:65:4D:FD:B5:26:2B:D5:F8:28:BC:E6:EF:7B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3f80:b000::-2606:3f80:cfff:ffff:ffff:ffff:ffff:ffff
                  2606:3f80:e000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:37:52:fa:b6:2a:6e:a9:60:d8:d9:5d:d8:99:18:fe:6a:3f:
         bc:44:89:a6:13:fe:0c:91:bc:08:8f:a3:5d:07:f5:7e:07:79:
         36:99:a4:d7:69:71:3f:94:47:cd:da:3a:a2:34:84:a0:a7:ea:
         f1:a5:10:07:2e:aa:0a:b9:cb:b3:dd:11:29:02:b3:38:a4:b4:
         97:cd:9b:e5:a4:ba:1d:e3:36:1e:b8:21:a1:c2:5f:f9:2c:0b:
         a1:b1:f0:26:42:d0:dc:8c:24:2e:b8:03:19:d7:e5:fd:d9:98:
         cc:9e:7a:f0:cf:c0:b4:4d:59:4b:d3:30:6f:6d:02:da:1e:f5:
         d0:4b:c7:36:cb:cb:5a:35:2b:15:8b:2b:77:c0:fa:63:34:7f:
         cb:61:f8:7a:c3:bf:47:bb:29:00:c6:a0:c7:4c:02:09:25:91:
         fc:7f:6a:4d:de:96:da:d0:c4:23:74:c8:58:90:17:c5:f5:2f:
         18:30:c6:13:3a:65:c5:42:40:39:f9:88:18:5b:8b:cc:26:15:
         aa:3f:d8:83:0e:71:cf:2d:0a:cd:34:d0:91:bb:57:d9:65:c3:
         06:c8:86:d5:31:8d:b1:e2:0e:76:75:f8:35:a6:9b:fb:59:a5:
         ec:ac:d2:14:5f:4e:82:93:7c:3d:b0:4c:f2:23:33:40:4b:bd:
         32:67:a7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 16:10:47 2025 by rpki-client