Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/b942c035-e349-3f7f-8401-b63ec58d3356.roa
File:                     b942c035-e349-3f7f-8401-b63ec58d3356.roa (raw, json)
Hash identifier:          JlDONJZiqPF1ARhtB39bed7JP1PqBf4cKDwVIvtJ6W4=
Subject key identifier:   08:E3:3B:E2:0A:1F:57:16:A5:26:45:8A:CF:D1:29:7E:25:23:E1:2A
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584ADA9BCAB71F2CD01052470E80
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/b942c035-e349-3f7f-8401-b63ec58d3356.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     63023
IP address blocks:        2607:a140:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:ca:b7:1f:2c:d0:10:52:47:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=cf65639b-a2b3-4dcf-950c-916c152d2fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e4:52:da:ca:d9:e0:04:86:1b:5d:be:aa:84:
                    ed:84:36:38:6f:98:c7:d6:4e:39:bc:35:31:d3:19:
                    c8:92:b0:41:ae:34:ea:fa:4a:ff:6e:b1:2e:bf:bc:
                    96:3c:5f:2f:b1:6a:02:8b:5a:d4:7d:6d:75:25:28:
                    63:a6:d7:c3:aa:55:26:b7:cc:dc:b2:db:d1:e9:32:
                    f5:5c:45:50:2d:4f:ca:49:2c:2b:1b:61:f3:10:c4:
                    18:17:a1:b7:b1:c2:a1:8e:fe:78:27:c6:29:12:67:
                    6c:1c:14:93:a3:54:8b:08:4e:3f:be:41:5b:f6:20:
                    f5:a2:4f:d7:4e:2a:36:93:58:1f:74:67:51:c7:69:
                    3d:34:61:f4:2a:de:e9:55:85:db:ce:b4:12:fa:5f:
                    55:a8:7f:bf:fa:ed:3e:24:26:4f:5a:00:ea:9e:21:
                    2b:48:22:0b:e6:57:0f:7c:49:96:12:4c:27:5e:35:
                    f5:97:94:96:9b:3b:80:a3:68:83:1f:94:7b:de:bd:
                    c7:42:f1:2e:bc:c9:e5:bd:f0:3e:ba:9f:01:76:6a:
                    0a:f1:ad:08:59:76:02:44:ce:a7:b0:13:95:36:16:
                    d0:52:c4:fd:7e:6d:9e:8e:ab:a1:ff:c0:e8:fd:68:
                    1d:56:5b:5e:b2:a6:90:da:20:dc:fc:fd:c2:61:30:
                    bc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E3:3B:E2:0A:1F:57:16:A5:26:45:8A:CF:D1:29:7E:25:23:E1:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/b942c035-e349-3f7f-8401-b63ec58d3356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:44:44:23:b1:ab:4f:09:6b:ff:ab:d8:0a:4b:59:96:d1:5d:
         31:36:7f:1e:59:1b:ec:2d:e1:99:21:35:bf:f8:9e:2e:cf:c4:
         41:ee:33:b0:06:2f:93:54:07:9c:6a:aa:31:d8:aa:4f:a4:53:
         36:37:c9:13:c5:1b:d9:ca:d7:67:b6:0c:af:92:a4:a2:76:59:
         57:20:3f:b5:6e:53:fb:26:d2:cc:31:7b:9d:88:f1:6e:83:5f:
         95:2b:e2:81:b8:0f:b7:98:55:07:77:7d:96:6f:d9:e8:0e:80:
         99:29:be:a1:7f:ee:6e:c2:ba:13:db:89:95:bf:42:3e:79:db:
         47:26:ce:31:d9:63:84:4a:fc:9c:5e:60:6c:d4:13:b8:93:5e:
         af:6f:29:d8:4a:f0:50:80:bd:31:fb:eb:66:1d:5f:ae:de:d9:
         f6:dd:86:b0:2d:3f:36:88:c9:c7:d7:90:94:0d:5a:97:b3:e0:
         16:ed:38:11:40:37:98:38:9c:cd:ef:83:a1:ec:88:13:7a:2b:
         96:0a:06:2e:54:5c:90:e1:e4:53:d2:81:11:82:a3:24:81:ba:
         e8:f3:0d:50:07:b1:8a:63:92:7d:91:f7:5e:9f:24:f0:4f:5b:
         51:11:8d:69:86:fe:a3:be:62:f5:b7:46:91:71:1f:ee:34:50:
         78:66:04:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:55:18 2025 by rpki-client