Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/27366f43-e058-35c9-a01f-c58148ae8cf2.roa
File:                     27366f43-e058-35c9-a01f-c58148ae8cf2.roa (raw, json)
Hash identifier:          Ry7reI1Ssu1+YNbenAiJl5VpUDdqVmonrPTvy1/qs8U=
Subject key identifier:   86:7B:22:B9:7D:2A:02:86:64:F9:99:9F:24:FC:46:C9:B2:61:44:98
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584B6BC772B11243C4B59B0EE5C0
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/27366f43-e058-35c9-a01f-c58148ae8cf2.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     400087
IP address blocks:        2606:7fc0::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:72:b1:12:43:c4:b5:9b:0e:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=6a5895ca-44b4-4c9c-9540-98ed4cca18e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c6:a0:cf:63:12:b4:d7:0e:80:a0:8e:37:66:
                    6e:5b:79:1e:00:a6:58:91:99:68:8f:c7:19:08:cd:
                    01:9b:f5:4d:9a:b3:23:2c:6f:d8:ae:d1:a6:81:8b:
                    bd:31:cf:9d:f0:90:96:b0:2d:d6:49:a0:b8:c8:02:
                    df:b5:0d:79:ba:8e:b8:bf:9e:90:8a:dc:97:0d:d5:
                    07:c0:ab:46:4f:ad:06:b6:59:22:2b:97:06:28:c7:
                    0c:08:17:2f:b9:a6:5e:94:8e:86:8b:5f:77:4e:ea:
                    25:c9:41:15:bb:e6:1c:a1:7c:df:6a:6f:cc:9b:b3:
                    e2:69:45:fa:41:df:ca:dc:9d:49:9f:f3:9b:da:8c:
                    fb:b1:09:4d:31:0a:44:61:b6:fe:5b:d7:a2:5e:d7:
                    6a:01:95:0a:49:c8:2d:c2:3d:e3:04:02:7b:03:aa:
                    9a:0f:0b:03:7d:d3:6a:08:02:ca:36:9f:06:64:93:
                    76:b5:ef:77:d1:83:7a:66:b2:bf:77:84:66:c9:23:
                    a1:d7:ea:40:ee:b2:87:77:31:b6:c0:7c:da:5e:3e:
                    7c:95:4b:b4:83:fa:18:a7:1f:f8:18:0a:48:01:a0:
                    26:7c:d6:2f:20:77:e3:da:58:c5:7f:e3:50:2f:b6:
                    64:8d:f5:11:16:91:41:f4:4d:e2:1f:eb:4f:5a:a9:
                    7a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7B:22:B9:7D:2A:02:86:64:F9:99:9F:24:FC:46:C9:B2:61:44:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/27366f43-e058-35c9-a01f-c58148ae8cf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7fc0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:bd:67:10:ff:91:3b:47:c8:54:e8:63:a3:70:da:60:bc:2a:
         5a:ca:ae:55:fa:16:f9:39:4c:8c:ad:e2:4e:a9:93:d6:0b:23:
         f2:87:1f:fd:8e:3e:c9:57:f0:67:63:42:ea:df:f0:35:27:03:
         d7:d2:20:21:19:a6:9b:78:92:fd:63:67:62:87:8e:3b:c4:d1:
         95:74:3f:5a:78:76:f7:4d:ce:d8:5c:6e:e0:e0:24:2e:6f:8e:
         88:a8:d6:f8:10:94:f3:32:96:f8:af:5a:e2:1b:fe:81:c3:ee:
         d9:89:e5:7b:0b:e1:d6:0b:4d:5c:86:8f:47:88:d8:f0:9e:1a:
         f3:27:b2:4c:fa:15:08:18:7c:64:62:65:99:d7:c8:54:1f:84:
         6c:71:8e:68:56:17:01:01:ab:23:51:19:17:91:ca:85:ef:3b:
         d1:e4:9a:a5:c4:22:03:ab:17:1c:e6:07:71:94:40:88:e4:ee:
         09:e8:c4:f5:93:5f:f9:0a:35:d6:59:28:f6:b7:ad:a8:0d:93:
         3d:a8:f2:c6:29:6b:32:1a:9c:5a:8d:85:f8:8d:18:b3:f2:f4:
         39:1a:ea:39:7d:8e:7a:ae:bd:9e:be:36:90:79:60:b2:84:e6:
         31:1a:87:c8:8d:93:2f:a7:1d:0f:85:b3:17:28:e4:08:15:70:
         35:c7:cb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:52:16 2025 by rpki-client