Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/bb22190c-d0c9-3f85-9c06-25a71b41f7ac.roa
File:                     bb22190c-d0c9-3f85-9c06-25a71b41f7ac.roa (raw, json)
Hash identifier:          Wes75z6kro/N3WOtd6HvdTnnELGSlijn9Zo8zt/tsl4=
Subject key identifier:   0E:F8:B4:1C:D3:68:8E:FA:DE:8A:CB:2D:FE:C6:2F:2A:21:DB:DC:9B
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584AECC150F616877B0E87B8EE00
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/bb22190c-d0c9-3f85-9c06-25a71b41f7ac.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     397041
IP address blocks:        2604:f740:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:50:f6:16:87:7b:0e:87:b8:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=4b91aefc-4fb8-4080-b7fe-6975461caf50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c6:0d:df:9f:f2:01:6c:1f:3c:f7:cf:70:9b:
                    47:5c:33:ab:2f:f1:ec:9c:95:9d:23:84:f3:c7:33:
                    8a:dd:fa:0b:63:4a:46:f2:bd:47:00:f4:e7:5d:12:
                    88:3a:ad:f1:f0:55:84:13:1b:3a:36:29:59:60:c1:
                    ed:0b:e9:99:1a:94:ee:0a:8f:7d:82:f8:f0:31:e6:
                    27:73:90:ff:76:66:0b:a4:96:24:f4:95:7d:95:7b:
                    b0:7e:10:d3:1c:10:f4:02:12:31:5c:42:34:f7:08:
                    5b:4f:b1:5e:35:d1:2c:57:97:36:8b:e2:53:e2:a7:
                    f3:24:d3:70:91:4b:fe:b4:40:10:03:af:92:33:8b:
                    69:51:0f:a9:9d:27:ae:38:5a:6c:ab:e1:87:7c:09:
                    76:23:4c:8b:36:1d:a0:36:7d:f9:90:22:c3:20:e0:
                    ff:57:e5:31:09:bb:fb:94:67:fc:49:20:9a:77:2c:
                    aa:33:ff:9c:1c:64:5b:7b:34:33:98:0a:4f:17:bb:
                    ca:87:97:ec:e0:f9:0d:40:0b:14:4c:de:3b:d1:2f:
                    97:70:0c:9d:a8:02:52:a3:5d:ba:a8:bc:b2:88:f2:
                    e1:9e:1b:37:03:73:44:ad:bc:1a:f2:b8:e8:23:05:
                    7a:73:14:99:36:d6:ca:35:63:5f:ce:8a:2f:3a:b7:
                    34:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F8:B4:1C:D3:68:8E:FA:DE:8A:CB:2D:FE:C6:2F:2A:21:DB:DC:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/bb22190c-d0c9-3f85-9c06-25a71b41f7ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f740:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:e1:59:08:07:e9:78:ed:e6:77:98:f3:e2:94:09:ed:ab:64:
         93:b0:73:af:ad:18:af:2b:0d:6d:09:6e:5e:23:31:0d:5f:c8:
         82:be:e8:83:da:d2:65:5c:f2:5d:28:9d:27:d1:f2:b1:02:74:
         2e:e1:75:98:a0:c2:7e:50:cb:6a:3b:22:63:e3:f5:4e:9c:d6:
         9b:b3:e3:9f:07:e2:81:1a:b5:f4:e5:6c:e6:5c:bb:08:1c:e1:
         4d:b5:38:d1:99:ef:c3:44:3a:64:8d:f0:cc:35:69:ed:17:fb:
         29:dc:19:2c:e3:cb:06:b4:84:e4:56:84:eb:64:67:69:f3:56:
         3c:3b:cc:4d:f5:1b:fc:76:51:ab:7a:b4:9e:fe:7d:92:e4:11:
         d3:8b:13:80:4e:53:e9:9a:04:9f:76:15:85:f0:6d:23:19:95:
         ae:6e:53:58:bd:67:aa:5a:e5:df:ec:7d:0f:02:ee:cf:eb:2e:
         83:91:b2:1c:ba:a8:e6:8a:26:01:fb:f4:19:da:15:cf:ce:82:
         80:1b:b7:4b:d4:3c:ee:e4:48:15:63:01:c9:e1:41:3b:7b:bc:
         be:ef:51:83:4e:d2:14:62:a0:20:39:11:6b:bd:3f:f0:0d:1b:
         a4:10:49:36:01:fe:6a:6f:81:1c:57:6e:03:56:a3:ef:28:22:
         4b:62:40:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 14:00:15 2025 by rpki-client