Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/75514c49-8cb2-3130-a8ec-908f24fd54e8.roa
File:                     75514c49-8cb2-3130-a8ec-908f24fd54e8.roa (raw, json)
Hash identifier:          vBG9QlXJyODhL4KbNvjiOhrAbJcPwwOaa2efjTd1Ht4=
Subject key identifier:   A4:7E:27:5C:82:0E:85:05:0D:CF:B8:A1:A3:94:E4:37:08:42:27:01
Certificate issuer:       /CN=1eba12ff-c221-4ab3-9aa6-d542d0812543
Certificate serial:       010D0C9F4328584B1F016A9B46CFFDA949DF4600
Authority key identifier: 3B:70:9B:73:AD:F2:99:6A:00:65:29:B1:43:4D:FC:F5:D2:40:52:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/75514c49-8cb2-3130-a8ec-908f24fd54e8.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     10973
IP address blocks:        2604:3700::/32 maxlen: 32
                          2604:3700::/48 maxlen: 48
                          2604:3700:1::/48 maxlen: 48
                          2604:3700:2::/48 maxlen: 48
                          2604:3700:3::/48 maxlen: 48
                          2604:3700:4::/48 maxlen: 48
                          2604:3700:1000::/36 maxlen: 36
                          2604:3700:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/1eba12ff-c221-4ab3-9aa6-d542d0812543.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/1eba12ff-c221-4ab3-9aa6-d542d0812543.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:6a:9b:46:cf:fd:a9:49:df:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eba12ff-c221-4ab3-9aa6-d542d0812543
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=dad45f7a-1fef-4369-9c18-fda532e1bf62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:ad:0e:53:82:80:5b:2d:14:87:28:bc:74:
                    00:56:7e:98:e2:df:80:e1:78:7a:5d:49:fa:17:ae:
                    8c:15:18:7a:ea:45:7e:14:f1:fe:e9:b6:c6:79:b1:
                    df:4d:d6:ad:bd:f7:e5:0d:06:cd:66:c8:20:34:b9:
                    15:64:80:78:db:a8:9f:0a:4c:4f:cb:e7:3b:ed:bc:
                    64:d3:88:b5:bc:52:38:c7:0b:45:94:1e:6f:dd:0a:
                    43:17:d7:c8:29:28:7e:67:ec:6f:12:fc:ee:c4:a8:
                    fe:6c:b1:30:fa:76:8e:e6:b4:2c:5b:bd:45:e6:c4:
                    9d:6a:d5:40:64:d2:63:40:f9:25:08:f2:89:96:aa:
                    74:9b:fe:27:13:48:81:0c:64:1b:56:1c:4e:dd:5f:
                    f0:41:c6:d9:42:f3:1f:e5:47:80:d0:0a:d7:6c:7d:
                    c3:be:02:c0:c1:b2:30:0a:4e:06:a0:59:86:25:60:
                    9f:72:e2:40:82:b4:09:f8:4c:d8:c4:f9:43:d0:6d:
                    e2:41:0d:43:0e:de:08:bc:a0:a4:db:09:0e:29:e7:
                    dd:cd:8f:5e:5a:d8:79:5c:f4:04:55:db:c8:00:ce:
                    e4:d4:5e:69:9f:80:70:8e:ec:19:8f:90:dd:be:67:
                    d2:d7:27:4e:d6:d5:4e:17:67:ed:e7:ef:80:78:d0:
                    a8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7E:27:5C:82:0E:85:05:0D:CF:B8:A1:A3:94:E4:37:08:42:27:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/75514c49-8cb2-3130-a8ec-908f24fd54e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543/1eba12ff-c221-4ab3-9aa6-d542d0812543.crl

            X509v3 Authority Key Identifier:
                keyid:3B:70:9B:73:AD:F2:99:6A:00:65:29:B1:43:4D:FC:F5:D2:40:52:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1eba12ff-c221-4ab3-9aa6-d542d0812543.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3700::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:6f:b5:6c:18:46:a8:f6:98:41:dd:ff:0b:89:4d:4c:4e:13:
         52:57:9a:4d:f5:15:54:6f:af:af:0c:fd:5b:7a:ef:cd:8c:5d:
         5f:e4:33:02:bf:5a:62:33:12:6f:07:58:21:a9:32:b6:fb:25:
         0b:54:39:a3:80:ff:1d:15:a5:b2:99:ed:ce:ee:c9:bd:9d:d6:
         52:a2:25:80:63:52:3b:7b:df:b5:fe:97:8b:ab:a6:a8:58:51:
         ab:af:64:6d:64:a0:66:ca:66:80:f5:3b:4f:e5:9b:70:41:23:
         2e:30:47:0b:cc:fe:5a:c6:9f:49:a3:c2:f1:56:22:d5:ee:47:
         f8:86:45:56:81:29:47:07:4c:e5:38:96:3f:55:fb:84:77:c2:
         97:3c:ec:68:81:23:6a:42:bc:80:8e:d3:d8:34:7d:69:70:92:
         7a:d1:9a:af:82:f2:de:08:a5:92:a2:d4:79:a3:9b:7d:4b:d7:
         2d:c0:c8:bd:c8:8f:94:67:59:c4:bf:11:c1:83:12:c9:9e:39:
         b0:68:8d:f4:2f:a4:3b:e6:e1:5f:2c:a5:96:2d:63:36:c4:62:
         70:b4:31:c6:03:5b:b0:29:e2:d8:48:19:a8:c9:3d:68:13:7b:
         e9:21:92:94:85:ee:d2:91:c4:b2:68:6f:3d:ae:e9:ca:c6:86:
         71:69:5b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:57:40 2025 by rpki-client