Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/289733c9-8d24-3a26-be24-969a85591062.roa
File:                     289733c9-8d24-3a26-be24-969a85591062.roa (raw, json)
Hash identifier:          OCfMOYfUeOwiypdIinDZmo6ac25cl63GatNxkUD1bdE=
Subject key identifier:   FB:93:D3:40:12:45:2D:7F:ED:5C:4B:9E:0C:22:7A:23:5B:B8:F0:D8
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F4328584A295567D2C9434D7A2F46F100
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/289733c9-8d24-3a26-be24-969a85591062.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     393885
IP address blocks:        2604:4a00:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:67:d2:c9:43:4d:7a:2f:46:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=4350a7aa-5b64-4c20-bef2-e09377afbc17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:47:4b:53:41:2a:62:0a:b6:07:8e:ec:80:cd:
                    81:69:e4:ee:d8:35:71:a7:20:23:1a:47:94:e8:e5:
                    f0:8d:6d:20:10:6f:3c:25:7f:9c:33:e9:1e:1f:39:
                    b4:73:b7:e6:3e:f3:0f:d4:6c:74:ce:2a:3e:36:b4:
                    f2:44:f8:36:60:b7:13:be:fb:7e:6b:e6:e3:a2:bf:
                    13:80:82:29:ee:d4:3b:e6:af:65:af:34:13:87:dc:
                    5a:d4:c9:94:f3:e4:bf:b7:07:22:e7:b5:c6:9a:1d:
                    d5:82:51:9a:d9:20:95:b2:0b:93:1b:24:47:aa:6d:
                    e6:2b:9a:ac:cb:4c:6a:3b:dd:33:ed:20:2a:37:b3:
                    5e:33:29:32:dc:e5:dd:1d:f6:eb:31:38:9f:1b:b7:
                    36:43:ea:fa:98:c3:43:03:de:32:0e:33:80:72:8b:
                    10:13:0f:e6:eb:35:79:b8:99:81:c3:e8:6f:96:3e:
                    39:0e:0b:77:df:93:1a:8e:4f:5a:6d:12:85:33:b5:
                    99:25:30:e0:93:a4:97:ef:c7:aa:48:0b:29:2d:ba:
                    85:d0:f4:62:26:d4:de:e2:cd:35:d5:61:56:e4:d4:
                    d2:30:fd:db:5f:ee:46:0d:52:f4:23:4e:ea:7f:5e:
                    83:e2:23:e8:c9:33:2f:ee:5c:18:35:be:e2:57:a3:
                    46:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:93:D3:40:12:45:2D:7F:ED:5C:4B:9E:0C:22:7A:23:5B:B8:F0:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/289733c9-8d24-3a26-be24-969a85591062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00:d000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:14:a8:6b:e4:c8:0b:e0:30:8e:39:6b:7e:93:01:a7:ff:1e:
         f1:fa:00:de:e6:2a:21:6d:be:53:39:35:e4:9d:7e:e7:9d:70:
         4e:1a:aa:67:67:29:00:82:f9:70:07:63:d4:6c:a3:0f:60:2c:
         77:e7:f3:d9:4c:0e:6e:92:7e:0b:8d:68:40:53:e0:09:4e:cd:
         8a:4d:cf:63:5c:b7:53:41:7d:28:73:aa:64:95:7b:ce:ae:30:
         24:fa:94:b0:3a:29:ce:63:b7:45:e1:a0:6d:ca:3b:cd:24:d8:
         38:c3:51:07:54:f0:7b:bd:c6:53:48:5a:60:de:5a:dc:96:3b:
         bf:c3:e2:14:d8:fe:7d:0d:36:ef:f2:66:80:b6:49:9c:2f:58:
         d2:dc:59:3a:af:29:48:46:fc:40:64:ab:19:dc:b5:d0:27:82:
         6f:ff:7b:3d:40:f1:58:c1:66:fc:d4:52:b5:53:21:32:a2:c5:
         09:04:a1:dc:0c:11:84:16:ee:b1:93:6d:45:a1:3a:c5:5f:71:
         00:fd:4a:60:25:e1:8c:69:f9:3b:a0:0e:78:e5:f9:70:49:5d:
         5d:d8:d5:66:75:df:84:e2:8c:4f:5e:ed:d7:6c:0b:dd:c5:06:
         ad:b6:7f:b3:8a:77:45:3b:71:75:81:01:89:05:dc:da:e2:1a:
         20:01:10:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:34:04 2025 by rpki-client