Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cb70c6f3-202f-31e1-80fa-d0f7976ab09b.roa
File:                     cb70c6f3-202f-31e1-80fa-d0f7976ab09b.roa (raw, json)
Hash identifier:          rGVWFEeCg+d7FXqb2DeAHj3Mmzc5hmqta71i2l72ndI=
Subject key identifier:   28:D9:52:31:64:8E:4F:2E:9C:F2:BC:F0:39:EF:B0:8F:DC:3F:06:6D
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584B25FC3C6840F33E3DCCC44080
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cb70c6f3-202f-31e1-80fa-d0f7976ab09b.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        2606:f4c0:4000::/36 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:3c:68:40:f3:3e:3d:cc:c4:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=72ef9bd9-dd43-4203-8036-2327c2075d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:08:87:e7:32:a1:a0:c9:2c:a8:82:19:1e:b6:
                    15:79:c8:5a:70:ea:1e:50:bd:25:77:58:0d:a4:04:
                    10:95:de:da:78:48:2a:70:86:d1:ee:91:83:2a:f1:
                    be:9e:53:79:43:25:6f:e3:f3:fe:1f:82:7d:82:16:
                    00:2a:31:43:6c:76:5a:4e:77:dc:64:11:c1:c2:a2:
                    d3:47:af:8e:5f:bf:62:22:f9:fc:fb:88:e8:ed:46:
                    84:61:95:13:32:2b:79:14:99:d2:08:33:79:cd:56:
                    97:87:51:c6:80:57:80:9a:91:40:7a:6d:79:cb:b8:
                    cc:e3:e2:2a:27:c4:bb:72:ad:ee:44:fc:9c:c8:00:
                    73:7f:b5:74:50:12:fa:39:6c:45:22:5f:94:0d:db:
                    fa:62:2c:e8:e4:f3:fc:41:f3:22:75:7a:40:0b:6d:
                    a4:21:8d:94:64:ab:df:35:81:05:90:37:7f:59:96:
                    9e:96:20:ca:36:78:b6:11:0d:fe:90:50:f1:7e:4a:
                    4b:63:3f:ac:4a:2a:40:87:b3:73:be:5b:20:4e:7f:
                    bf:ad:42:5b:99:b4:47:11:3d:74:83:50:0d:32:3f:
                    0e:ca:97:cd:dc:f7:c2:06:48:a3:7c:93:76:48:b6:
                    42:6b:dd:a3:39:f9:60:57:69:59:4d:c3:21:88:3f:
                    c2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D9:52:31:64:8E:4F:2E:9C:F2:BC:F0:39:EF:B0:8F:DC:3F:06:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cb70c6f3-202f-31e1-80fa-d0f7976ab09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f4c0:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:7d:89:c3:54:98:fa:43:2f:02:f0:8e:44:c5:a0:0b:22:1e:
         1e:8f:b4:7a:d5:44:7d:49:bd:f5:53:89:50:2f:1a:9b:2e:56:
         54:0d:90:db:08:14:a0:17:bd:c2:35:88:0e:2e:27:cb:29:73:
         ea:bb:db:85:fc:8f:33:43:fc:80:e2:1f:a9:d6:93:8b:8e:92:
         47:8e:51:94:bf:81:8b:4f:62:16:d2:b9:c2:ca:ad:39:58:3f:
         e9:4b:92:ed:96:59:c6:c8:bb:87:01:7d:32:7b:8d:05:cc:7f:
         f5:fe:d3:ee:37:a7:47:a5:80:16:4d:7b:a5:76:cc:b4:25:4f:
         6d:00:e8:8a:a3:c6:be:78:45:cf:f1:43:7b:f7:61:f4:80:5d:
         8a:c0:1d:7e:1c:f0:85:6e:3d:12:f5:d9:34:03:c5:f3:d5:b6:
         c6:ba:85:84:ed:a6:9c:db:90:27:c2:c7:7c:6c:e8:d2:68:59:
         54:6a:8b:11:99:c1:10:29:99:dc:97:46:c8:c4:ec:2b:ff:6a:
         d1:a1:d5:ea:b0:2d:e1:7b:b6:b9:11:7a:e8:db:c5:06:07:e2:
         09:eb:78:7c:dc:b2:70:53:79:04:e3:e4:ce:44:47:7e:a8:a4:
         92:ee:7e:67:d5:e5:95:fd:36:1c:91:f7:60:91:bc:29:3e:d0:
         24:24:94:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:35:55 2025 by rpki-client