Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/f036e01b-a0c6-3ec8-9c90-69b99202db6e.roa
File:                     f036e01b-a0c6-3ec8-9c90-69b99202db6e.roa (raw, json)
Hash identifier:          7Zsi8vkOFt1C21W8Uze6RsuCyD5Q8EfUP819VixBPZM=
Subject key identifier:   5B:0C:25:D4:0E:3A:2E:52:F6:CF:26:66:43:2E:A9:A6:E9:DC:BF:6D
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584B63674E747FF548FD26B1B680
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/f036e01b-a0c6-3ec8-9c90-69b99202db6e.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     268624
IP address blocks:        2600:3500:c24::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:4e:74:7f:f5:48:fd:26:b1:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=c6ab2dee-5e9e-4cbe-823a-b3cc21e32c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:3d:6e:ca:11:8b:77:9a:06:d9:6a:39:f9:
                    3b:e2:e0:4e:e3:41:39:ef:98:6e:56:a9:ca:b5:cb:
                    67:62:9a:07:b5:2e:71:75:4e:44:e5:98:53:65:f7:
                    57:d0:08:ee:83:a2:a6:c3:76:62:af:aa:a0:2c:a5:
                    91:d6:fc:fc:b5:c4:d1:6a:b9:45:2b:cf:b5:8f:30:
                    06:59:7c:5a:a3:a1:43:48:93:2d:cb:c4:42:49:78:
                    d3:ba:35:f1:7d:25:62:fe:bb:00:ef:6a:c8:d0:61:
                    ab:f3:d4:ed:a7:e5:3b:33:b5:df:b0:1f:c0:0c:c4:
                    be:11:17:ac:af:40:88:33:f7:20:2b:7a:65:63:ba:
                    41:59:2b:39:9d:88:f5:eb:60:ce:ca:4d:a2:34:73:
                    77:0f:a4:92:51:27:84:9b:4b:ae:44:f3:12:5d:a8:
                    bb:f2:e8:cf:c1:94:3b:b2:63:45:51:6c:42:e9:32:
                    39:94:06:a0:7a:86:76:0b:df:ed:14:18:a5:4f:86:
                    0c:54:c6:2a:85:d0:2d:0e:2b:98:02:26:4c:8e:9b:
                    df:b9:5a:95:11:21:2d:5e:22:0e:47:8f:be:66:07:
                    8d:89:f8:ba:ef:8c:66:95:cf:6b:71:39:ae:59:7c:
                    36:2e:a4:08:43:38:b9:27:92:73:99:61:76:b8:4c:
                    cf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0C:25:D4:0E:3A:2E:52:F6:CF:26:66:43:2E:A9:A6:E9:DC:BF:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/f036e01b-a0c6-3ec8-9c90-69b99202db6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3500:c24::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:48:3b:f7:b1:cb:e5:a0:62:94:66:33:09:e9:bd:35:c8:69:
         7a:f3:e7:31:45:91:c9:11:c1:26:9c:01:c2:dd:99:3a:89:05:
         2d:c1:28:c3:bf:88:59:d7:cb:f8:fa:26:b9:47:3a:ce:19:82:
         60:f7:15:1d:a7:7e:65:fa:39:70:eb:52:ba:55:9d:9c:58:8a:
         c7:d5:1f:00:03:7d:2f:95:91:4e:15:05:f2:ba:e4:22:14:58:
         e1:3e:58:40:86:da:45:09:29:8b:e3:d8:b2:98:65:42:2a:33:
         2c:46:ce:df:a7:5b:84:3f:ef:ae:9e:ef:55:c4:31:7c:49:2d:
         98:97:b4:6b:d7:63:2c:38:83:e8:8c:37:ff:6d:00:83:f2:a8:
         4f:07:97:47:43:fb:0b:ae:3d:44:60:1b:76:f9:92:2c:67:27:
         73:65:47:6a:22:08:2f:a5:bf:cc:55:f4:9b:4a:80:28:c2:2f:
         41:16:a0:3c:e1:96:3e:2d:1d:40:5f:ba:02:d4:c8:05:21:33:
         3b:47:14:30:3d:5d:14:3e:8a:f3:e9:46:06:97:d5:00:1c:b0:
         31:bc:05:70:74:bc:2c:04:b6:0c:3b:90:5a:0f:f9:65:f6:ec:
         9d:94:2d:15:4e:f1:2a:0f:14:2e:89:43:9a:03:5d:ea:2b:1c:
         78:aa:1a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 12 00:27:43 2025 by rpki-client