Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/429b7a0a-fe87-3890-8ac4-5cb5975e8748.roa
File:                     429b7a0a-fe87-3890-8ac4-5cb5975e8748.roa (raw, json)
Hash identifier:          5dBGXOt+kaPvJk9kf+gzX9lS3D4+JtK7KD28CV0kovU=
Subject key identifier:   E2:9B:C3:5C:B6:C2:5B:E2:6D:2F:C3:A7:75:38:09:85:71:CC:D7:CB
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584B64CCBDAC5663A712EBE65F80
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/429b7a0a-fe87-3890-8ac4-5cb5975e8748.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     2734
IP address blocks:        2605:6c00:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:bd:ac:56:63:a7:12:eb:e6:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b4382fe8-1e5a-450d-ac70-811ef1730f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2d:fc:c9:9d:29:a2:de:7d:26:7c:9c:ac:e2:
                    79:bc:c4:60:eb:b2:71:3b:db:7c:25:5f:ba:4b:5f:
                    96:f5:4c:ee:5b:10:c9:f8:e3:de:cc:46:4c:68:50:
                    fb:af:25:b8:f3:36:ba:7e:dc:60:02:3d:47:51:84:
                    78:f2:91:50:86:e2:c0:17:fb:c7:c9:d3:25:ac:6b:
                    0b:8a:74:20:19:b4:31:03:af:60:67:f5:32:7d:fe:
                    e8:3b:2e:81:31:0b:79:ac:6f:26:c9:2b:70:de:9e:
                    6e:f2:e0:40:96:f8:3a:d3:84:e7:9a:8a:5b:b2:7e:
                    54:0a:49:e2:80:03:ee:36:8e:4e:0c:00:18:b4:75:
                    bd:9b:14:e4:5d:f0:58:da:62:a9:17:44:11:e0:8a:
                    d6:d3:ae:98:23:a5:d9:ff:1b:ca:89:ed:c0:15:85:
                    5e:c3:f2:c6:4d:ec:08:55:88:a2:33:29:58:6d:f4:
                    7d:7a:94:cb:89:62:df:b1:4c:78:38:57:e3:a8:3d:
                    d5:60:31:b7:d2:45:0e:f9:3b:0f:93:11:41:a2:1e:
                    3d:dd:ea:86:c1:10:60:59:e6:ee:3f:87:28:dd:0f:
                    5c:84:46:d5:8b:78:1b:89:2c:8b:f4:d9:42:2f:94:
                    8d:22:34:67:20:c1:6f:ae:33:a1:ed:a5:06:ca:b7:
                    7e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9B:C3:5C:B6:C2:5B:E2:6D:2F:C3:A7:75:38:09:85:71:CC:D7:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/429b7a0a-fe87-3890-8ac4-5cb5975e8748.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:7000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:7e:f7:28:b2:87:11:93:03:69:fb:69:ab:fd:b6:82:e7:d0:
         e7:95:b1:a7:88:de:fc:b4:e8:e6:f9:62:05:6c:ae:0e:2c:bc:
         38:ba:f0:c6:06:ae:25:57:ff:8b:c9:6f:cc:fa:8e:b4:3a:2d:
         6b:0e:1e:72:4a:7b:a5:94:ed:01:e6:53:70:39:10:5b:c3:ab:
         59:53:63:14:2d:63:03:12:66:17:73:72:20:69:65:7c:0f:dc:
         7f:e1:59:5f:9d:27:3b:0f:44:e6:75:ea:66:91:be:02:23:cb:
         31:ed:be:5c:3b:2c:50:cc:03:8a:f9:c8:d2:10:0a:87:57:df:
         73:60:9d:5c:6a:38:aa:09:a8:b4:3b:7d:9a:ad:36:a1:1a:77:
         f6:8f:57:8b:e3:92:1e:37:13:07:26:48:58:1f:2f:20:78:7b:
         41:0b:3c:50:03:cc:0d:9c:17:e3:2f:b7:c0:7b:20:06:ea:db:
         36:84:86:5a:3a:09:37:2a:3c:24:df:3f:95:18:49:e0:2d:7a:
         ba:16:07:07:0d:e6:d0:cd:b3:c9:c7:d1:c7:48:8e:9c:b9:2a:
         0b:ab:be:53:37:ec:10:3d:72:0d:f7:a5:79:c7:cd:db:4f:65:
         fb:9b:07:cf:c2:8b:c7:4c:82:21:fd:77:0f:2d:b4:ce:cf:8c:
         98:5d:64:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 20:46:10 2025 by rpki-client