Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/88d56266-9046-397a-a1c5-e059316a713e.roa
File:                     88d56266-9046-397a-a1c5-e059316a713e.roa (raw, json)
Hash identifier:          lTqSJKd9vQyFlxDIAvR8d7NarQTawJaKl1J9kuvL/cE=
Subject key identifier:   F6:17:0F:B2:35:99:14:D6:F0:A3:60:F1:89:E8:36:1E:07:9E:DA:71
Certificate issuer:       /CN=329c727b-a867-426a-ad3d-167aed3107dd
Certificate serial:       010D0C9F4328584A11C7E9EC8564351B77EA1500
Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/88d56266-9046-397a-a1c5-e059316a713e.roa
Signing time:             Tue 03 Jun 2025 14:32:18 +0000
ROA not before:           Tue 03 Jun 2025 14:32:18 +0000
ROA not after:            Mon 01 Sep 2025 14:32:18 +0000
asID:                     6327
IP address blocks:        2001:4e8::/32 maxlen: 48
                          2604:3d00::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:c7:e9:ec:85:64:35:1b:77:ea:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd
        Validity
            Not Before: Jun  3 14:32:18 2025 GMT
            Not After : Sep  1 14:32:18 2025 GMT
        Subject: CN=3acc3be6-0259-415d-a833-c49c6bb250ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1d:c8:15:d1:b1:0f:c7:8e:6e:a7:be:51:b2:
                    0b:04:05:95:f3:9f:58:8d:be:c1:7a:40:ca:d7:e7:
                    d5:93:43:12:81:10:d5:31:c6:a5:81:6c:a2:e2:22:
                    e1:b8:38:15:a5:3b:51:c8:01:44:1c:4a:5b:b6:4f:
                    72:2c:fb:a0:da:0b:e0:88:a2:dd:de:dc:23:8b:b4:
                    b4:e9:b2:91:30:f7:51:0c:f2:5f:f0:f9:f5:1d:33:
                    b6:e7:be:9f:8d:4d:79:a7:6f:42:11:c4:27:56:f6:
                    21:d8:33:22:a8:d4:27:f9:b7:a1:e0:d2:e2:dc:20:
                    39:0b:08:03:f6:23:46:b9:19:3d:90:83:a9:1e:50:
                    69:88:2e:98:40:9f:00:44:b4:3f:74:ab:f3:87:21:
                    80:38:44:3c:0f:a5:d9:73:fb:ed:00:ea:f4:40:fc:
                    92:d7:12:eb:6c:eb:07:18:3a:2b:82:64:58:05:c2:
                    b5:8a:ea:27:9a:3d:1e:19:21:1d:18:0b:e5:df:93:
                    e6:8f:f0:85:e0:18:69:9c:7c:c2:88:91:1c:b9:c8:
                    97:12:cf:4c:6d:bb:3d:d9:2d:a8:e3:ee:7a:52:2b:
                    35:1b:43:18:c6:3f:f8:d2:69:f0:a3:e8:fb:66:3d:
                    75:62:f7:2f:39:d9:bf:b3:48:2a:b3:25:56:3d:40:
                    43:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:17:0F:B2:35:99:14:D6:F0:A3:60:F1:89:E8:36:1E:07:9E:DA:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/88d56266-9046-397a-a1c5-e059316a713e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl

            X509v3 Authority Key Identifier:
                keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4e8::/32
                  2604:3d00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:1a:e7:4e:60:b5:a2:97:73:22:b1:13:08:d1:a6:c8:14:4e:
         13:0a:5f:9d:b1:c3:7e:35:fc:7a:85:11:4d:03:4c:2c:b7:f7:
         35:0b:f3:e2:9f:f2:da:ca:fb:3f:88:14:1b:ab:d9:b9:ea:e6:
         da:22:dd:e4:11:21:ae:c0:ea:82:fa:d2:04:b2:94:a6:ef:0b:
         34:f7:c7:1e:51:f1:e2:7e:4b:67:30:0c:33:f0:ab:7e:ae:1b:
         c4:e5:e8:41:0d:8e:2c:6a:c1:0e:06:e2:c7:44:3b:a1:86:36:
         4e:3e:0f:30:79:3d:78:ec:6f:a1:bf:c8:c2:4d:cb:64:4c:a7:
         16:27:40:8b:c1:5d:9d:21:d2:91:67:12:7b:d8:49:a1:9b:5d:
         ec:88:80:17:81:70:73:d9:da:de:91:e3:0e:f8:ce:2a:d5:60:
         a1:94:00:62:f9:b6:1f:71:e4:0e:22:22:7a:95:f7:a3:c6:32:
         90:f1:6c:9d:bb:aa:b1:58:f8:4f:6f:1e:f9:6c:37:2a:e0:31:
         44:8f:e7:eb:e8:10:24:36:29:66:78:9e:90:9e:9b:06:a6:84:
         cd:bb:09:23:f7:74:30:ec:66:63:f9:d6:de:69:d7:70:c6:6a:
         a9:1e:e4:0d:3f:5e:07:92:49:08:3c:37:3b:bc:6d:90:5b:8b:
         15:e7:80:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:06:08 2025 by rpki-client