Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa
File:                     17bdc031-206a-3420-b709-d3ce9d5f5850.roa (raw, json)
Hash identifier:          73YslKgj6SqK9ixAqGk+kq5lZ8mkvFz3xd1Wak8opTg=
Subject key identifier:   7B:BE:63:51:26:5C:C2:9B:84:8D:6F:32:02:02:1F:B7:E6:9C:68:C7
Certificate issuer:       /CN=29c6a19e-a83c-43ad-8d10-68daeb160033
Certificate serial:       010D0C9F4328584AD23BA95B47E33FF885142E80
Authority key identifier: 45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397901
IP address blocks:        2602:fc56::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:a9:5b:47:e3:3f:f8:85:14:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c6a19e-a83c-43ad-8d10-68daeb160033
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=20afcde0-cf4f-465b-bb2a-1604dc633504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c2:4d:66:d3:04:fd:16:d4:88:96:c7:41:32:
                    5c:98:03:44:d1:bc:ef:88:35:bf:9b:bd:0b:51:4e:
                    ff:17:ae:ca:33:d9:76:9d:5b:0b:e7:c8:3d:64:ee:
                    d9:9b:c9:d1:71:5a:24:ec:10:e6:ea:66:fc:71:ec:
                    9f:e3:0a:ed:be:13:0d:0b:58:16:1b:80:89:0e:bb:
                    1d:c6:10:4f:96:5c:d3:91:fa:20:af:38:9b:ac:f2:
                    48:f4:b9:10:f3:67:40:0a:b8:e5:bd:35:11:78:35:
                    40:d1:43:5c:f3:5b:25:c7:30:19:69:d4:1e:06:27:
                    6d:98:a4:53:cd:cb:26:7d:14:29:df:23:49:8d:3f:
                    11:9f:67:44:b4:ad:19:2e:a0:d2:b0:fa:fc:45:a7:
                    76:c1:49:02:59:93:53:8d:ea:78:7f:ef:ce:d6:d7:
                    0e:69:6a:fe:f7:e1:5d:c5:f6:07:f9:fa:a5:43:5f:
                    fd:9c:3b:d9:b6:20:d9:76:6c:68:b3:b6:bd:e2:cc:
                    72:07:e3:33:49:dc:88:88:a4:b2:4a:f0:f5:bd:85:
                    21:a8:d0:69:2c:e8:d6:d6:8c:c3:3d:82:77:e6:78:
                    5c:c3:87:4a:ea:cd:27:e4:30:f4:fa:5a:3f:f4:ae:
                    1d:8d:d7:c4:f4:f8:ec:61:d2:a1:c8:5c:65:a0:dd:
                    4a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BE:63:51:26:5C:C2:9B:84:8D:6F:32:02:02:1F:B7:E6:9C:68:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/17bdc031-206a-3420-b709-d3ce9d5f5850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl

            X509v3 Authority Key Identifier:
                keyid:45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc56::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d8:6f:5a:10:87:58:16:1c:5b:1a:cf:3f:81:f6:15:8d:30:
         35:ff:b2:3f:c7:6f:ee:c6:87:84:8a:55:5b:f8:15:6c:a9:ae:
         52:06:92:43:c7:c8:e5:81:f3:fe:74:72:36:90:56:77:a1:74:
         ac:ab:b1:4a:36:35:95:a0:3a:2a:97:f4:96:fd:95:1c:81:08:
         df:f3:51:40:5c:90:75:e8:10:56:83:cd:e0:87:97:b9:e7:ef:
         40:15:97:1c:54:a9:78:6c:e7:2f:ee:71:46:21:57:53:b1:a5:
         10:5e:64:99:6f:49:bd:b3:9f:a5:74:46:c0:ef:bb:9e:07:54:
         cb:48:ab:f4:fa:83:44:af:1e:16:1c:24:d0:db:78:b6:93:bb:
         02:c9:6f:eb:f5:d4:4b:8c:76:7b:68:11:aa:e7:a7:f0:b6:54:
         19:94:5c:e6:3c:52:53:e6:fb:c6:de:cd:02:2d:75:81:18:d2:
         01:7d:c0:d1:74:45:52:fa:92:cb:e4:08:1b:fa:17:33:01:25:
         4d:6b:17:f3:33:9f:1a:b5:da:70:4b:da:1f:ea:a6:b0:70:49:
         0d:f3:46:29:e0:da:97:b3:60:aa:c0:25:3a:57:22:d6:a5:c8:
         4d:62:f7:46:a7:6f:ad:6c:4e:20:43:88:7d:7e:f6:ce:bf:32:
         f5:16:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:09 2025 by rpki-client