Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/6ceddbe0-a59e-3c94-9e96-08f0396c815b.roa
File:                     6ceddbe0-a59e-3c94-9e96-08f0396c815b.roa (raw, json)
Hash identifier:          kiz/km5q6umDHvcdUuwyqfXRo0DqMocAX8wM6EKwOh8=
Subject key identifier:   A6:00:93:3D:76:52:32:C0:87:80:9F:DC:3F:E7:92:0E:C2:51:1F:04
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F4328584B4FDC7A2932334B1D4A563AC8
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/6ceddbe0-a59e-3c94-9e96-08f0396c815b.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     49
IP address blocks:        2610:20:6f96::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:7a:29:32:33:4b:1d:4a:56:3a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=361ddf13-458f-43c5-aeee-ae3b26635693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:51:84:d1:1a:10:48:b3:3a:c3:e7:a9:eb:7a:
                    d9:8f:7d:c4:fe:44:b4:89:3c:f1:01:0f:4f:12:7e:
                    b1:3f:be:6f:0b:07:bb:6b:31:fe:04:0a:37:33:a8:
                    ec:76:d0:11:53:52:93:b0:04:17:0e:4a:51:61:5a:
                    9c:fb:c4:71:97:a8:7d:13:ff:54:eb:3c:71:53:43:
                    02:42:09:36:f8:5e:cc:62:7d:47:f5:29:26:e1:07:
                    64:81:75:29:a1:67:ac:8d:da:90:81:43:20:f7:2d:
                    7c:69:a6:43:c4:57:ff:01:96:2b:c6:39:01:9d:49:
                    dd:89:d3:91:bc:a3:8c:29:4c:8d:ee:83:e2:39:72:
                    51:87:5a:73:a8:c4:0a:29:00:a9:f7:f3:70:02:04:
                    5b:fc:5d:5b:ec:90:e1:e9:29:38:29:67:a7:71:f5:
                    c3:6e:d9:41:f7:9d:59:a9:85:9b:5f:64:46:dd:a1:
                    ae:93:b3:5b:09:86:f0:7f:0c:8c:a9:bb:03:dd:f2:
                    c1:f8:b8:56:ef:18:31:da:44:f1:81:c9:78:c0:f3:
                    33:41:ed:73:13:d1:a5:81:23:f1:8c:82:2d:ff:e5:
                    ee:26:25:50:17:7e:47:a6:a4:48:c0:cb:cc:2e:ac:
                    1a:2d:3e:81:c6:63:c6:eb:61:f9:88:5a:ea:e9:82:
                    1a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:00:93:3D:76:52:32:C0:87:80:9F:DC:3F:E7:92:0E:C2:51:1F:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/6ceddbe0-a59e-3c94-9e96-08f0396c815b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6f96::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:34:ef:0c:52:c5:43:2a:c1:e3:2b:34:84:6e:f6:d4:c4:08:
         70:c9:7f:21:e1:8e:de:7a:94:d3:d4:60:be:b2:74:af:7f:61:
         4a:10:9e:49:9b:5f:37:27:3a:17:a6:54:0c:25:46:f4:79:7f:
         b7:a8:b3:ed:70:f7:d0:ac:f4:79:8e:1c:f7:72:d3:b0:23:01:
         6c:df:1f:ae:f6:45:d5:89:0c:03:0e:ac:9e:06:0a:60:63:8b:
         73:0f:63:90:bd:ff:10:0a:74:03:1f:02:9b:87:e6:e1:bb:be:
         08:0b:1b:ca:57:92:08:0c:9c:06:e8:5a:2a:2c:89:cb:d6:1f:
         ac:a8:39:39:c3:02:d1:65:be:eb:d7:3b:fc:58:62:f1:ce:07:
         05:67:b0:14:c3:1b:8a:1a:1e:c2:b2:8a:45:03:cd:6a:a2:2b:
         60:91:3e:3d:07:b0:db:f7:81:67:f6:dd:58:4b:e7:53:77:64:
         61:a4:64:09:5e:7d:20:3b:cb:3a:8d:93:e5:6a:ee:45:a8:3e:
         c7:8d:4a:9d:89:56:7d:86:8c:07:50:3a:d6:7f:f9:7f:4a:5a:
         7a:2d:4f:b0:a5:a7:12:82:81:43:eb:48:b0:4a:30:46:2a:0e:
         c5:78:eb:6d:58:31:58:73:3d:22:9f:6c:37:c4:20:32:6f:3e:
         64:9e:b0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:55:30 2025 by rpki-client