Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b573f29f-c08e-304d-92b2-cd55eb7addda.roa
File:                     b573f29f-c08e-304d-92b2-cd55eb7addda.roa (raw, json)
Hash identifier:          PWe3rq9sNFTGiaCXAiRn0xppoQmPEsyiq4Qksm6TrkE=
Subject key identifier:   C4:CD:C1:1C:F7:18:BD:F9:11:B2:FA:4C:1A:30:71:F3:9F:E9:F0:A8
Certificate issuer:       /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
Certificate serial:       010D0C9F4328584AE031211099C075A07A324700
Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b573f29f-c08e-304d-92b2-cd55eb7addda.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     40244
IP address blocks:        2604:7c00:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:21:10:99:c0:75:a0:7a:32:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=5ac8b380-e6a7-43df-84e2-5f682be4ccd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c8:3e:b3:6b:dc:86:3b:ab:c5:bc:3e:44:5e:
                    96:a9:f9:49:09:59:ac:e4:17:60:0e:7e:c9:11:f7:
                    c6:ff:87:28:54:49:42:21:45:48:ff:09:e3:39:e0:
                    72:34:5a:cc:6d:44:0e:af:02:a9:50:83:7d:cd:a8:
                    eb:e5:39:24:f5:f2:3f:13:7f:3b:7d:1c:c0:a0:a8:
                    91:35:ce:a1:80:2c:53:a0:22:34:fc:fd:c6:b9:7c:
                    ec:21:22:6b:db:78:b6:73:4c:aa:74:33:bc:be:de:
                    65:22:e3:74:0f:33:ef:b7:38:2c:9c:e0:ca:fa:f2:
                    2d:ad:ae:20:eb:d5:8f:95:ab:76:fb:4a:0d:b1:7f:
                    54:bf:d7:93:4d:e8:2b:cf:77:5d:75:9c:2b:db:22:
                    a0:40:99:b4:31:3a:95:27:3d:b2:10:82:4d:a1:ba:
                    74:1c:1c:d3:b8:2b:e1:62:14:6e:11:ed:41:e9:8e:
                    c2:d5:9b:19:53:0c:29:72:ca:4f:72:ac:45:49:78:
                    2d:57:63:f3:a4:6e:c6:59:0c:9b:c8:43:64:fc:87:
                    38:07:97:84:55:c0:45:6a:03:25:a0:71:52:01:d6:
                    5f:93:72:f2:70:31:91:98:73:70:1a:e9:83:b4:fe:
                    df:c2:97:0a:78:ee:b8:fa:e5:1d:bd:c8:42:84:aa:
                    e3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CD:C1:1C:F7:18:BD:F9:11:B2:FA:4C:1A:30:71:F3:9F:E9:F0:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b573f29f-c08e-304d-92b2-cd55eb7addda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7c00:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:71:89:d0:75:7d:3f:7a:e9:21:bd:22:1b:f0:6f:7d:c0:04:
         d3:e8:32:22:33:cc:4c:8b:1c:10:a3:7c:19:d8:ff:de:a1:0a:
         22:a0:51:06:96:36:13:4a:a4:53:37:56:68:e9:a6:4e:b8:34:
         e8:ca:6a:5e:e0:a7:eb:b2:40:45:d1:57:93:d7:af:0c:3e:27:
         d6:9a:d4:8e:17:65:6d:d9:e8:6d:dd:e1:24:48:d3:a9:0f:0b:
         e3:94:d6:27:57:b6:ba:53:b0:b6:c7:e3:ec:85:bf:80:3c:55:
         4a:c9:20:1f:b9:be:31:90:a3:87:ff:73:3b:41:7d:fd:aa:fe:
         77:6b:0e:58:b9:78:26:ac:84:f8:1d:9c:e9:69:ca:02:46:9d:
         e5:81:70:d4:be:97:eb:88:86:d9:f9:02:2c:47:21:2d:a1:bd:
         5f:71:81:d0:c3:ed:c2:be:4f:d0:44:c1:94:b8:a8:e7:de:b8:
         8a:9c:53:49:6c:7f:05:b9:50:f8:29:47:77:c9:67:ae:3e:d5:
         8b:89:5f:61:d7:80:5a:60:76:1a:4b:1b:59:ad:25:96:c8:76:
         4a:dd:13:5f:c1:f2:b9:10:42:64:c7:01:48:9c:07:26:31:93:
         e2:e0:44:41:32:5b:1f:3c:fd:27:6a:3e:35:50:73:f4:29:00:
         f4:9a:49:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:53:35 2025 by rpki-client