Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bca71c71-a455-31f7-afdd-eebaf458a9d3.roa
File:                     bca71c71-a455-31f7-afdd-eebaf458a9d3.roa (raw, json)
Hash identifier:          cOFbWA/jeeTVsYlO+dlKUQ7PoJKW4rzM+m6HY4Ctjn0=
Subject key identifier:   37:D6:CE:B9:14:C5:BF:04:14:04:09:C1:16:D1:BD:CA:13:EE:7F:49
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584B64CCBE568EA355D86EFA2C00
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bca71c71-a455-31f7-afdd-eebaf458a9d3.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     2734
IP address blocks:        2605:6c00:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:be:56:8e:a3:55:d8:6e:fa:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0f24a0f7-8d2b-4d4b-9111-beb920d6b1e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f9:ed:6d:82:88:61:4f:82:bd:14:2f:24:20:
                    21:7c:8b:9a:27:4c:c3:65:76:1a:fa:d0:7d:18:98:
                    63:a7:ff:1b:91:15:20:f0:dd:6b:c8:d1:02:50:35:
                    9f:64:33:d5:9b:71:ce:ba:1b:f6:ad:2a:eb:03:f5:
                    3e:6a:02:48:2c:84:2e:ee:d9:a9:5d:dd:28:6f:06:
                    ea:34:1d:6c:50:70:73:b7:50:b2:e3:9a:69:e5:f6:
                    74:96:07:6e:40:44:d1:91:c4:9a:fe:2c:e0:6f:b2:
                    8d:f1:d1:e5:81:19:71:b8:47:7c:a2:c2:c6:d3:32:
                    1d:d9:82:8d:b5:f1:5e:d7:e9:a9:3e:89:dc:a0:a4:
                    0a:e0:11:b7:61:e5:6d:69:f7:56:48:47:a2:aa:79:
                    3c:d8:2d:c4:ea:e4:3a:75:5b:ed:71:3f:82:90:f3:
                    7b:eb:ad:2e:19:a0:d8:c8:3d:92:7e:08:cb:ea:5f:
                    3a:ad:4d:fd:b9:f8:61:7f:df:d4:42:5d:2c:69:a6:
                    90:d7:5c:3d:bd:2e:de:2e:3d:8d:78:a3:39:d9:a5:
                    a8:38:92:0d:e0:d0:25:94:76:66:42:24:6f:c2:28:
                    ce:65:e5:5d:52:37:f8:f7:ac:86:d1:64:c8:5f:bb:
                    a7:b6:4d:68:38:5d:6c:8f:f2:47:4f:a1:f3:7b:2b:
                    59:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D6:CE:B9:14:C5:BF:04:14:04:09:C1:16:D1:BD:CA:13:EE:7F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bca71c71-a455-31f7-afdd-eebaf458a9d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b4:c2:3d:9d:f9:6a:c6:93:ef:99:5c:84:22:da:35:1b:34:
         13:72:13:f0:a5:0d:21:28:59:34:dc:52:44:e5:6a:b0:23:04:
         0e:2f:bd:4a:c3:7c:db:f9:7d:a7:fb:76:4e:5b:6b:87:23:05:
         47:19:09:e7:85:8c:20:9c:31:76:26:5a:09:61:19:3e:1a:ee:
         4d:b5:24:e2:bb:e6:7a:c5:fb:2c:20:e9:c8:43:d9:5b:c2:65:
         6f:bd:e7:49:a2:bc:6b:df:99:0c:c1:55:0d:d5:ca:f0:5f:3f:
         84:40:29:03:18:81:50:7d:2f:f5:0f:a3:ee:42:1f:4f:49:85:
         d3:d8:a6:56:43:9b:9b:9a:0b:c9:b8:60:1c:78:fb:ea:dd:7a:
         55:5f:f9:cf:52:61:e4:20:0c:ba:06:5e:e6:2b:2c:14:30:13:
         56:6b:d3:38:6d:e3:f5:89:89:35:84:e2:ce:59:92:00:08:29:
         fd:29:89:a8:b3:e6:c9:74:c8:66:b3:05:d2:ac:e4:68:5b:54:
         8e:58:90:9e:51:a2:3c:ad:20:59:22:48:d9:0d:ab:eb:d7:2d:
         55:b8:70:1c:12:cb:56:06:58:e6:93:c6:79:fc:cf:4d:8f:7d:
         5d:82:cc:d1:59:7b:f8:a7:fb:2f:18:2a:2a:b9:49:42:ab:2e:
         43:b1:86:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 20:41:14 2025 by rpki-client