Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e732970c-5f85-3c04-aa0d-413895fa0d9f.roa
File:                     e732970c-5f85-3c04-aa0d-413895fa0d9f.roa (raw, json)
Hash identifier:          TizBvU8f8f6AfIdAAM2V+JAYVmZlZ2uN2wobC8zr7hg=
Subject key identifier:   21:C5:22:18:2F:D4:2A:75:0B:F1:DF:B8:76:CE:A2:33:3F:7A:E6:E2
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584B821CCD94909A68B7DEB74B80
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e732970c-5f85-3c04-aa0d-413895fa0d9f.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     0
IP address blocks:        2001:504:13:4::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:cd:94:90:9a:68:b7:de:b7:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=aa964d17-c178-4809-a57d-9ecedeccfd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:63:39:cb:c8:76:39:bb:5e:a2:b0:f1:82:
                    58:2f:26:90:5b:b5:3e:09:64:4b:e2:18:c6:7f:21:
                    c9:e6:cc:41:13:cc:73:6e:b0:c0:9a:2c:70:a3:c6:
                    88:a0:21:be:cc:90:0e:7b:42:c7:12:1b:b4:4d:69:
                    62:06:55:fd:33:f7:55:3a:33:6d:c2:fd:04:2c:da:
                    ab:df:95:c8:29:a5:48:8d:19:bb:16:d8:b3:84:61:
                    ef:72:4d:0f:e5:f2:f0:d8:c4:ae:8a:9b:cf:34:df:
                    4b:f1:4e:7a:10:f2:bb:53:90:65:ab:1d:17:f5:e2:
                    69:4d:df:15:d5:d8:31:8c:64:d1:95:5d:b3:00:b7:
                    9b:68:8e:a2:cd:dc:d3:ec:1e:40:04:41:01:2e:5f:
                    f7:75:44:61:62:9d:4a:9e:9f:1a:ed:87:8b:13:ef:
                    13:ad:70:3e:b4:7e:18:d6:28:ae:68:20:37:fe:48:
                    4e:2b:5f:c1:89:58:f2:cb:6a:15:fe:d9:bf:ae:29:
                    60:d2:75:cc:54:3e:66:f9:6e:86:52:49:95:9d:95:
                    49:b0:b8:9b:d3:6d:8d:fd:80:2f:5f:ec:e6:7f:7f:
                    de:02:f8:d6:09:be:33:1c:d8:78:08:b7:71:0c:a6:
                    f1:79:e6:63:14:37:34:ba:11:82:ee:4b:10:d5:8b:
                    4b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C5:22:18:2F:D4:2A:75:0B:F1:DF:B8:76:CE:A2:33:3F:7A:E6:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e732970c-5f85-3c04-aa0d-413895fa0d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:13:4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:fd:75:11:6b:9d:20:f4:74:dd:49:3d:7f:e2:f5:32:96:3f:
         65:88:f2:82:7e:b5:12:f2:1e:32:c1:72:23:db:f0:e1:7d:6e:
         25:17:0e:bc:b6:2e:a7:da:95:77:4b:d1:04:8f:4e:78:e5:7c:
         6d:43:7a:fc:b6:6e:8d:78:d2:c6:12:b8:81:ed:64:9d:f5:cd:
         56:ae:41:ef:19:3d:bd:f2:53:a8:e0:d0:c2:7f:09:10:c9:f1:
         38:29:93:68:56:17:ae:ad:a0:77:20:51:0a:64:42:12:48:38:
         23:05:b9:22:14:3d:e8:94:ab:13:72:a4:7e:c9:d9:f9:c8:77:
         a1:8f:fb:d9:53:72:ee:cc:25:13:a8:7a:20:3a:08:ea:a4:b9:
         24:16:a3:d7:d4:ea:c9:20:7b:c6:ca:b9:85:ab:26:99:2f:a9:
         04:99:38:36:19:b9:93:c1:13:52:d7:5e:7b:77:36:c5:0b:86:
         a3:87:30:1b:be:b6:4c:66:6c:8b:be:7b:a6:b9:1b:86:88:3f:
         dc:bd:aa:1a:d6:64:87:a6:2a:9f:fb:ac:c7:ed:a9:4e:6f:f4:
         ab:ae:e1:12:55:96:66:51:8c:17:ad:49:31:4a:7b:dd:78:5a:
         02:2b:45:b3:4b:c1:9e:6d:19:3e:bd:93:53:cc:e3:06:c0:11:
         81:15:05:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 20:42:18 2025 by rpki-client