Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be/250b9a99-ea52-37eb-9585-49aeb904d3d7.roa
File:                     250b9a99-ea52-37eb-9585-49aeb904d3d7.roa (raw, json)
Hash identifier:          H8lILSSLjb3JsxN2Kcs5THBZ9jiF5fvplFDAZMYjC44=
Subject key identifier:   9F:8B:A4:9C:53:95:23:A7:9E:95:08:CA:AC:02:25:58:CD:36:78:FC
Certificate issuer:       /CN=79f0b59e-adb9-491e-9362-7f64268c02be
Certificate serial:       010D0C9F4328584B758C9AB348824C33D28CE100
Authority key identifier: 3C:9F:73:A4:01:5A:9F:AA:DA:BC:75:F5:D0:E0:63:0A:9B:08:68:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be/250b9a99-ea52-37eb-9585-49aeb904d3d7.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     393249
IP address blocks:        2607:5940::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be/79f0b59e-adb9-491e-9362-7f64268c02be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be/79f0b59e-adb9-491e-9362-7f64268c02be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:9a:b3:48:82:4c:33:d2:8c:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79f0b59e-adb9-491e-9362-7f64268c02be
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=c6f44ef2-e3b7-4264-87f5-070c77fe9ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5d:90:ba:ee:00:95:98:a2:1c:5f:a5:0d:ff:
                    c1:4a:0d:44:e8:87:89:e6:64:9f:ee:af:53:10:cf:
                    2a:f0:c1:f5:16:6d:02:39:9f:d7:44:35:a3:f2:e3:
                    9b:62:7a:8c:98:4a:2d:69:6b:c1:b6:39:a0:b3:f1:
                    a3:3a:81:5b:2e:9d:56:25:a9:36:23:91:80:18:ea:
                    62:eb:f4:30:f2:58:4b:6a:fa:74:f8:74:a9:f2:3c:
                    53:9a:59:a5:99:a6:c7:4b:15:f7:94:5e:a8:9d:48:
                    c7:a6:3b:e4:42:14:26:65:fa:7e:b3:a5:61:1f:17:
                    c2:16:bf:bf:87:29:d3:9a:41:5a:87:7e:c6:bb:99:
                    10:29:bf:61:2d:55:17:34:ad:74:46:2d:8a:c6:c4:
                    73:11:dd:c7:85:51:38:e3:55:bb:95:ad:45:93:ff:
                    d8:8a:24:58:79:fe:c6:8c:ce:76:33:52:d5:06:db:
                    20:78:2f:c3:b8:19:a9:6a:4b:40:98:9b:7d:0f:6e:
                    e2:89:ac:c9:4f:9a:95:1b:07:83:24:00:e8:05:06:
                    b8:45:1b:86:41:22:8c:09:1d:27:56:75:f4:a1:16:
                    5a:56:ee:a8:25:db:6a:bf:bb:5a:20:8b:48:ec:dd:
                    ba:bd:fb:2b:2a:c8:9c:84:4e:4a:98:67:11:49:7c:
                    7a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8B:A4:9C:53:95:23:A7:9E:95:08:CA:AC:02:25:58:CD:36:78:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be/250b9a99-ea52-37eb-9585-49aeb904d3d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be/79f0b59e-adb9-491e-9362-7f64268c02be.crl

            X509v3 Authority Key Identifier:
                keyid:3C:9F:73:A4:01:5A:9F:AA:DA:BC:75:F5:D0:E0:63:0A:9B:08:68:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:bc:22:01:bb:7f:0c:75:6a:fc:0f:ad:ea:1c:36:ed:d6:48:
         e2:a2:97:49:06:d3:2c:51:d8:3d:7f:2b:86:ff:f7:86:76:e2:
         46:a1:26:b8:d5:aa:c6:8c:65:37:7e:0d:16:a6:72:b6:2b:ce:
         c6:99:88:f5:b5:08:e2:0f:e6:64:07:1b:8c:dd:77:a3:c2:aa:
         38:12:c6:b2:54:9c:83:63:f9:d0:5f:c2:b0:9e:32:35:6a:d5:
         e3:e3:24:90:1f:cb:22:f0:7a:53:2d:91:de:bf:ee:73:11:c5:
         48:0a:43:4b:64:54:a3:22:6a:05:70:aa:23:c8:4f:55:d5:e2:
         b1:e4:c6:b8:cb:e2:70:4e:99:c6:82:ab:40:34:35:a9:00:7e:
         ce:a1:8b:6f:6c:9a:c2:15:00:f6:3a:48:61:21:1d:18:a6:19:
         fd:ef:9a:03:75:9a:81:db:d0:df:f3:04:85:bc:4e:46:67:3d:
         2c:e8:f3:a0:d2:d8:35:46:6f:42:37:73:02:e4:c3:57:60:1c:
         81:50:8a:91:cd:a9:8d:0f:ab:33:d7:1f:8a:a8:5c:b4:53:15:
         05:93:62:47:d1:9d:77:92:81:2e:ba:8b:46:e5:6a:2f:13:ca:
         c8:9a:ee:58:b1:62:08:21:5f:68:e0:13:65:65:27:9f:ec:7a:
         1a:3c:25:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 16:23:16 2025 by rpki-client