Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/4d2f6e2f-8a8b-3dda-84db-af6772dd30c6.roa
File:                     4d2f6e2f-8a8b-3dda-84db-af6772dd30c6.roa (raw, json)
Hash identifier:          qwSspvHnDAxzCXFg4lMWggNXP/AyFTPZ27kO3bBOEdQ=
Subject key identifier:   AE:31:11:8C:19:4B:06:0E:8B:A8:2F:8C:38:F8:28:A1:9A:0D:69:96
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584B66A33D622D3FFF57E9F36780
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/4d2f6e2f-8a8b-3dda-84db-af6772dd30c6.roa
Signing time:             Fri 03 Oct 2025 16:49:04 +0000
ROA not before:           Fri 03 Oct 2025 16:49:04 +0000
ROA not after:            Thu 01 Jan 2026 17:49:04 +0000
asID:                     209242
IP address blocks:        2606:2c40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:a3:3d:62:2d:3f:ff:57:e9:f3:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Oct  3 16:49:04 2025 GMT
            Not After : Jan  1 17:49:04 2026 GMT
        Subject: CN=19090ffe-a4d3-4a23-aab4-316bb7b4ee76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:ad:bd:ef:e6:4a:e7:03:cf:ae:0c:b8:9b:
                    06:c2:b5:69:b3:63:62:df:7b:7b:cf:3d:a9:d9:21:
                    36:d3:59:03:ec:bd:f9:b2:6e:ba:f2:6f:98:44:2e:
                    ac:fe:1e:91:e3:6e:5c:4e:70:b7:87:b5:55:76:13:
                    95:cb:b1:e8:35:74:eb:5b:2e:bf:82:5b:52:e6:c5:
                    f4:e7:db:b9:7d:48:a2:f2:c4:b9:60:af:e3:cf:8c:
                    f1:20:e1:3b:cd:b7:e6:5b:d1:2b:70:a3:74:10:92:
                    d2:5f:a8:20:7b:49:b7:8d:6a:8f:8e:3f:d3:a7:82:
                    9f:f5:eb:d7:50:e5:9d:a7:8e:78:bc:86:48:d4:d3:
                    a4:2c:40:1b:eb:27:18:40:97:0f:32:17:7c:f0:6a:
                    65:de:f7:6d:d3:67:03:03:70:11:65:c6:bd:69:eb:
                    8c:e0:b3:d1:d2:cd:b4:3a:de:fd:2d:f0:53:49:5c:
                    1f:dd:5d:d3:1b:cc:7b:01:c8:0a:98:4f:66:52:e2:
                    9d:8b:54:b4:13:6f:80:b1:95:fb:e0:ab:a9:cf:e1:
                    7e:26:b7:5f:5b:70:5e:ed:80:a0:7d:2b:cb:7c:8a:
                    c3:d7:3b:89:d3:5a:68:3d:24:3f:d4:17:6a:27:39:
                    47:43:ee:00:64:07:7b:64:b5:cd:2f:8e:e2:65:8f:
                    45:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:31:11:8C:19:4B:06:0E:8B:A8:2F:8C:38:F8:28:A1:9A:0D:69:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/4d2f6e2f-8a8b-3dda-84db-af6772dd30c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2c40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:aa:a2:72:6e:5f:b1:18:56:10:85:1b:bf:7c:f9:85:7a:ed:
         4e:7d:55:98:04:f9:fc:1a:50:a9:b9:e8:a7:98:bf:8c:27:e1:
         0c:a2:e5:3c:b1:af:fc:a6:a8:cf:46:b4:5a:db:6a:44:5a:68:
         d6:67:0a:64:1f:45:91:ce:a5:a4:0d:ff:50:84:aa:83:79:a9:
         84:fc:0c:52:99:37:fe:80:85:c8:46:ad:73:2c:d5:8c:d0:69:
         59:dc:9d:ec:cb:02:ca:da:4f:b5:7d:0d:f3:46:65:23:8f:8d:
         eb:c1:5d:7b:bd:32:0f:a5:8b:b4:85:7c:78:80:ad:a5:85:46:
         c7:52:b1:4a:3e:72:ee:d6:e7:e0:13:8b:3a:1d:94:63:cc:7d:
         a5:13:57:d8:a6:6d:33:bb:7f:32:da:f8:12:37:e0:f7:8a:5f:
         a8:82:be:44:d5:c0:d5:70:4b:72:35:f6:e0:b8:42:59:ee:b4:
         6b:61:ce:0d:a8:f0:87:98:13:b3:79:ba:1b:5e:d4:1c:33:bc:
         d9:41:c0:d1:a4:f5:f9:c7:30:4c:79:81:34:ef:80:98:05:82:
         a2:62:bf:1f:4e:69:f2:ac:9c:e7:d3:5a:60:c5:30:54:32:48:
         1a:fc:61:be:53:4c:2c:ce:4c:79:db:be:42:3e:94:cb:63:d9:
         00:5c:3f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:07:44 2025 by rpki-client