Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/0a7cb37b-abdd-3cec-b31c-135bb742418f.roa
File:                     0a7cb37b-abdd-3cec-b31c-135bb742418f.roa (raw, json)
Hash identifier:          r1bIUtRNhucNgoojglJHAsUnb7qoToOpglsBz5RRCrw=
Subject key identifier:   38:79:BB:CE:51:EE:21:21:5D:F5:F5:A4:9A:13:35:FA:E8:C5:5E:82
Certificate issuer:       /CN=4279ddf8-3e66-45cf-8955-452fbe652c0c
Certificate serial:       010D0C9F4328584B1C36C5BFDED390D4D4F63B00
Authority key identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/0a7cb37b-abdd-3cec-b31c-135bb742418f.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     27425
IP address blocks:        2606:2600::/28 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:c5:bf:de:d3:90:d4:d4:f6:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=0a664edf-715d-4f57-9497-b56b29f3c7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:34:bc:c6:f0:d7:be:3d:79:e1:f4:fe:be:
                    c8:7f:00:77:17:6a:6d:b5:25:85:91:49:68:cc:6f:
                    36:26:f1:7a:cf:06:80:52:e9:4d:0c:d5:80:03:f9:
                    d9:44:76:53:79:23:63:62:95:89:47:5e:7e:78:50:
                    c6:6c:e6:2d:dc:a7:a3:73:15:08:bb:c5:9d:31:45:
                    34:26:ee:0e:9b:35:bf:1e:6e:39:1c:ab:aa:07:06:
                    ce:d5:ec:52:8c:d3:61:4d:d3:f6:32:f0:7e:c9:18:
                    c0:32:c6:a6:82:db:40:e1:13:2e:a0:50:14:cb:ca:
                    7c:91:78:2d:1e:79:32:8b:0a:e2:37:3a:f0:6e:a1:
                    f4:77:fd:f0:42:3c:14:4a:95:a3:59:9b:45:93:67:
                    60:7b:b7:2c:79:22:75:c1:9b:29:c1:00:b7:ca:0f:
                    a0:ce:6b:1d:d4:2f:11:0e:61:78:91:cf:33:ce:32:
                    6c:1d:6e:93:1f:32:cf:03:e5:7a:18:65:04:45:c7:
                    2b:05:e1:47:5a:e9:df:cf:d2:14:f5:e9:17:95:7d:
                    61:66:3f:97:c1:ff:a0:33:48:c1:09:4d:28:dd:39:
                    bb:4c:da:9c:10:2e:d1:3e:76:96:e2:e2:1d:fd:aa:
                    3c:d8:21:2f:62:3c:79:a9:43:de:e1:2d:ce:32:43:
                    53:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:79:BB:CE:51:EE:21:21:5D:F5:F5:A4:9A:13:35:FA:E8:C5:5E:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/0a7cb37b-abdd-3cec-b31c-135bb742418f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl

            X509v3 Authority Key Identifier:
                keyid:CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2600::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:e6:84:5d:e7:bf:f1:eb:06:bf:2e:01:10:48:04:fd:5e:0c:
         90:8a:cf:ac:c6:db:25:df:e3:77:1f:f6:3c:0c:2e:34:47:92:
         3b:53:86:df:2f:2d:88:85:00:31:99:cd:e9:82:b7:c8:ad:cd:
         ef:a6:8e:fa:97:0a:73:f4:7e:b0:d4:10:7d:ea:2a:d2:a8:7a:
         82:e8:a9:c2:16:a8:20:2c:1b:03:97:10:78:51:43:ee:f3:19:
         4f:c9:17:49:f1:36:00:d1:a8:7b:cd:4e:10:9b:f4:2f:5c:56:
         a1:63:a7:3f:24:f7:51:00:c3:4d:44:79:97:19:10:ed:23:f3:
         37:67:ff:36:f0:d0:c2:63:61:fd:b7:47:f6:5b:ff:f1:0a:f9:
         47:a7:a3:58:6d:96:13:b5:a9:bf:23:96:5c:e9:06:4c:8f:cb:
         1e:d5:6e:68:20:a7:79:97:14:fc:c4:22:24:5d:2d:22:9b:5f:
         b6:81:88:35:1d:8f:28:f5:c0:82:14:bf:f7:a2:20:60:62:72:
         7f:2a:dc:10:0c:93:08:41:28:51:4c:4f:bd:3b:06:7c:8a:aa:
         79:cb:4f:d2:06:77:6d:5d:0a:c2:34:42:e4:26:b1:22:50:06:
         80:56:d4:fd:2c:15:1c:38:9d:40:47:d0:89:2f:e0:67:52:ab:
         ad:59:d9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:31:41 2025 by rpki-client