Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b729f1bb-ad8d-31e0-9602-d62296e43bf3.roa
File:                     b729f1bb-ad8d-31e0-9602-d62296e43bf3.roa (raw, json)
Hash identifier:          CLHFBP5BOqon+N8VTrJtp4wTHAUZzDFdTlwBBXxF+Gs=
Subject key identifier:   6F:1C:A6:5A:E9:83:28:F5:8A:39:DE:68:45:4A:F7:83:8A:1A:60:C8
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584A51D0752BB4DA58AE6CBE4500
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b729f1bb-ad8d-31e0-9602-d62296e43bf3.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     209181
IP address blocks:        2607:740:46::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:75:2b:b4:da:58:ae:6c:be:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=ee6f2b48-bb4b-4be1-8c5c-82f082df43f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ae:b6:83:f0:78:da:27:7c:75:9e:50:6e:ca:
                    13:b9:7e:48:a4:be:d8:c8:52:a9:31:f4:e5:e6:f1:
                    42:81:02:8b:90:43:c0:f2:2f:31:3e:87:ff:a3:90:
                    e8:9c:bd:95:59:b8:bd:db:57:9c:26:34:8a:f8:03:
                    d7:5c:11:b7:7f:31:1b:f9:7e:ea:0e:80:06:b1:c0:
                    12:15:1a:b8:a8:94:f6:0d:36:f0:99:24:0a:3f:55:
                    01:1c:6d:32:1d:9a:58:ec:03:5e:72:ee:27:19:1c:
                    20:54:81:27:7a:39:77:8f:64:b5:9f:68:be:3b:7b:
                    37:49:9f:f5:7e:c1:3a:bf:4d:a6:1f:c2:c8:d5:07:
                    d6:12:64:31:98:99:13:ba:9c:82:25:47:16:36:b9:
                    0a:5e:25:26:90:b3:a3:72:1a:50:95:bd:65:06:b5:
                    52:01:2c:76:2c:c2:20:99:fd:12:db:a9:53:3c:30:
                    1d:7b:1a:02:67:9e:e5:65:72:cf:e4:36:88:20:81:
                    26:0b:71:d7:20:ce:5e:6b:82:ee:7e:f1:2a:d7:84:
                    9f:32:de:ae:89:e4:59:86:e8:fe:58:42:e3:25:70:
                    fd:70:f2:11:d8:7d:73:57:ec:ee:93:b7:b5:78:0a:
                    d8:4d:0a:bf:1e:5d:6c:df:9c:02:4b:dd:a8:cc:53:
                    ac:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1C:A6:5A:E9:83:28:F5:8A:39:DE:68:45:4A:F7:83:8A:1A:60:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/b729f1bb-ad8d-31e0-9602-d62296e43bf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:46::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b2:c5:9e:bf:5f:90:00:a9:7c:38:f7:7c:77:f6:f1:b7:d0:
         d1:33:dc:c7:bd:6f:74:7f:bc:f3:a9:8a:f4:96:5a:df:6b:3d:
         05:83:28:6b:56:f1:a1:c4:09:60:df:15:8a:19:f9:cb:97:3b:
         11:4f:b5:64:ed:2e:20:e8:22:7c:f6:3e:ff:f2:98:84:3f:80:
         43:ac:c7:99:e9:8b:3f:75:9f:ce:91:30:d4:c9:ae:8b:e4:30:
         39:92:0e:be:e1:c6:88:eb:2f:a6:78:78:0e:74:04:74:01:c2:
         eb:ea:4f:27:e8:1b:c2:cc:2d:ba:0e:79:39:a7:88:03:88:cd:
         bc:a5:c8:23:34:91:9e:e4:97:dd:c4:81:05:72:29:eb:c5:d8:
         6b:2d:e0:61:b4:49:52:4a:e6:42:07:91:39:c8:3a:bd:3f:72:
         a0:cf:c0:58:35:d9:c4:6a:92:ce:b4:d6:f9:a8:8d:0b:8d:49:
         69:34:e3:cc:75:04:bc:03:ff:c1:37:f8:ee:f0:a1:44:52:6a:
         f0:ff:d2:74:2b:7e:d6:bf:21:60:95:88:f1:5b:d8:ad:5e:2f:
         11:d7:86:ed:89:24:36:55:1a:9c:9f:55:43:80:22:ff:0d:cc:
         39:e4:fd:83:7c:02:4c:e0:7a:e3:3f:93:e9:d8:34:2f:af:04:
         a8:2c:3c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:28:15 2025 by rpki-client