Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/e891b0b5-f20a-3494-beac-398247827962.roa
File:                     e891b0b5-f20a-3494-beac-398247827962.roa (raw, json)
Hash identifier:          khI1hp84ts433YxfctYzdOC/rielziJBbZw2whRGn+4=
Subject key identifier:   35:16:AA:11:01:7D:93:27:99:5D:6F:AE:A2:52:D5:D7:22:30:80:75
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584B2066E1EF5BFC84FF54D43A80
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/e891b0b5-f20a-3494-beac-398247827962.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     27385
IP address blocks:        2602:fdaa:c6::/48 maxlen: 48
                          2602:fdaa:c7::/48 maxlen: 48
                          2602:fdaa:c8::/48 maxlen: 48
                          2602:fdaa:c9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:e1:ef:5b:fc:84:ff:54:d4:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=3cb655e1-1a52-4966-957f-03be1048f2ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f0:9a:1f:23:bb:35:c6:7c:47:7b:b0:75:26:
                    fd:30:a6:c3:7c:7a:73:5a:71:63:de:22:84:3a:76:
                    db:8b:63:17:75:2a:c6:ea:9e:d0:35:1e:11:25:64:
                    02:54:b4:93:bd:95:05:05:25:30:a9:c1:66:b3:2d:
                    09:11:c1:0a:c0:79:c6:7d:94:ab:5d:46:38:32:8e:
                    c3:e1:c2:45:5f:d6:d1:ec:0d:ff:b8:13:04:a0:d5:
                    67:21:e5:d6:09:e7:40:b7:54:09:d5:21:90:5d:a4:
                    14:3e:9e:21:a2:1e:a3:15:56:04:9c:a3:87:a0:71:
                    b9:ad:1a:9b:48:29:f0:08:e1:cb:3d:bb:cd:22:1d:
                    9d:69:a7:c2:a6:10:af:39:36:39:40:b4:dc:9f:b8:
                    03:f5:cd:df:03:5f:17:7a:d4:8a:f4:00:02:f2:9c:
                    c5:4a:a1:fa:3d:ec:64:87:f8:52:33:8f:a9:a2:19:
                    07:0b:60:3f:a5:53:13:98:40:5c:7a:6c:fd:34:c2:
                    35:fb:01:e9:0f:17:7a:ee:d8:c4:27:58:f5:80:6b:
                    c4:15:e2:bf:9e:83:f4:e5:e2:15:07:c7:d1:3e:de:
                    7f:4a:74:82:23:7b:56:00:cd:f5:60:15:a3:4d:4d:
                    27:c3:57:f0:c7:e5:20:8b:7a:f2:e1:b5:62:7b:fc:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:16:AA:11:01:7D:93:27:99:5D:6F:AE:A2:52:D5:D7:22:30:80:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/e891b0b5-f20a-3494-beac-398247827962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:c6::-2602:fdaa:c9:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:2f:eb:17:f9:ee:02:d5:fc:90:58:9d:30:01:7f:ed:73:5e:
         c8:41:06:4c:b9:5b:5f:d9:96:93:ca:ca:5b:d8:6d:ff:79:17:
         d5:8f:6f:bf:a8:3d:ad:f4:26:c4:73:db:d8:cb:25:db:11:e0:
         04:27:b1:49:de:28:65:2c:08:9f:2d:1b:ee:95:28:8e:d6:4f:
         c4:97:7a:66:82:ef:08:16:08:b0:34:29:3a:35:05:a9:42:4e:
         0f:4b:a0:1d:ee:2b:2d:d7:35:61:6b:c4:14:4c:22:4c:2e:60:
         c6:6f:0f:57:84:eb:79:f5:f5:a4:00:70:03:3d:96:e6:1a:61:
         c7:33:63:69:c9:94:58:dd:b4:4a:ab:72:69:70:2f:b5:b3:f8:
         cc:b1:aa:ce:05:7a:ed:b7:06:2e:86:51:e0:0c:0d:d2:5c:ff:
         0a:a6:c7:45:f8:f5:17:6b:a7:11:43:06:ac:ca:d5:5d:8e:73:
         90:e9:9b:77:67:8a:ad:b4:9e:80:2e:74:13:dc:27:2f:22:26:
         f0:90:ad:fb:93:01:b1:cb:74:e3:a1:80:71:ca:88:1a:a9:ac:
         8e:2b:8e:0f:29:fc:e9:d1:cb:14:e1:49:15:72:38:3e:78:da:
         46:9a:11:5c:b5:c5:c9:64:05:9d:56:b4:40:01:22:aa:0a:db:
         c2:c8:88:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:33:50 2025 by rpki-client