Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/429b7a0a-fe87-3890-8ac4-5cb5975e8748.roa
File:                     429b7a0a-fe87-3890-8ac4-5cb5975e8748.roa (raw, json)
Hash identifier:          KPw0hHY0UhIIBYMTOlozTvPps+wnwz/IN7sIehUQRdU=
Subject key identifier:   9E:AC:32:13:EF:C7:C5:AA:BB:57:8D:ED:3F:59:02:3C:3A:7B:17:4F
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285849A4BA4C85EFEB8C1AA8DB6740
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/429b7a0a-fe87-3890-8ac4-5cb5975e8748.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     2734
IP address blocks:        2605:6c00:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:4c:85:ef:eb:8c:1a:a8:db:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=2785d97d-c444-42e5-a991-e8fd6cffd9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fc:31:56:6a:b2:60:7c:ac:6e:14:4a:65:96:
                    2f:7c:68:2f:74:a4:ae:3e:a5:ff:0a:e9:a4:10:03:
                    66:77:63:41:f5:9a:54:bc:de:a8:85:fc:8c:e5:c2:
                    4e:1e:62:4b:e2:5f:f7:bc:4a:82:f2:76:57:23:a2:
                    e4:e1:18:aa:9b:16:69:fd:00:73:e0:91:31:08:89:
                    78:17:83:5a:4d:be:b1:ce:36:23:fd:80:3e:d6:8d:
                    f0:74:1a:ed:7e:4a:bb:cf:eb:ec:7e:c2:2a:57:32:
                    bd:84:47:d4:d1:05:e7:d7:98:f9:98:b2:5a:2b:d8:
                    c1:4a:5e:38:a6:b5:85:ae:97:ee:09:9f:72:d7:17:
                    69:70:43:20:b8:5a:7f:54:d3:4f:f9:ca:79:01:ab:
                    f5:dd:5b:5b:92:be:98:fe:d4:4c:c8:4f:6d:be:f7:
                    2c:78:88:45:1e:e0:a4:4a:38:10:8d:7d:54:82:65:
                    5b:18:e7:50:41:96:2a:7b:86:60:e0:bb:9b:31:49:
                    be:a1:80:ec:b0:70:67:74:f6:41:ec:bc:c5:d6:3d:
                    c8:22:ab:89:52:cc:66:6e:ec:49:47:c6:79:d0:9c:
                    90:1e:7f:8f:81:df:e4:cb:97:11:18:e0:55:eb:c6:
                    8c:85:5e:05:3f:c2:61:c2:b8:d3:7d:b9:3e:08:83:
                    b3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AC:32:13:EF:C7:C5:AA:BB:57:8D:ED:3F:59:02:3C:3A:7B:17:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/429b7a0a-fe87-3890-8ac4-5cb5975e8748.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:7000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b9:0d:b7:20:48:2b:e0:d3:39:87:78:f3:d1:de:8e:58:56:
         9a:c0:cc:7b:9e:7e:15:9f:30:3f:48:7c:fe:55:d6:89:24:a8:
         73:66:9d:8a:ba:16:2f:59:4e:5c:61:fd:96:23:aa:2d:0a:48:
         70:3c:32:bf:a1:8b:fb:87:d5:c5:e4:ea:7b:9a:04:c3:02:cd:
         f7:15:59:65:a2:8a:eb:c8:06:4c:70:68:25:a8:7d:83:d9:98:
         17:d9:5e:9c:4f:7d:7f:2d:af:54:92:bd:a3:5d:7b:ad:6b:cf:
         db:e7:40:70:78:64:5f:19:58:60:cb:76:a4:6b:54:11:b3:8c:
         19:10:38:31:56:97:4f:e4:0c:bc:ac:50:67:3d:dd:e6:a2:e0:
         38:b3:14:28:47:af:ab:f4:a5:d4:48:12:b5:73:75:79:b6:a9:
         30:fe:ea:ae:88:88:a0:24:0e:e7:8c:8d:93:e4:4d:71:e6:8b:
         bc:b8:c0:27:c6:fb:d1:ce:8c:73:fb:28:b4:bd:20:b2:bc:3b:
         ed:1a:0d:d2:c2:36:ff:ec:60:68:2f:d2:d3:fe:c0:77:46:de:
         d2:90:8a:75:5b:e2:75:5e:39:1f:11:81:d4:57:16:2c:f7:e3:
         b9:b0:78:a4:d5:f5:24:7f:2d:0e:49:1a:d5:21:9a:08:f7:50:
         0a:95:52:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:14:05 2025 by rpki-client