Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6abb6798-8321-3fe3-a56c-c6c7cf15e968.roa
File:                     6abb6798-8321-3fe3-a56c-c6c7cf15e968.roa (raw, json)
Hash identifier:          sy6sdzUSONwyzG4+8mDeCBREi1lffvDW0T2N7sEQIDA=
Subject key identifier:   18:C5:F1:11:E9:A3:D6:3F:0C:08:FA:DD:9F:2A:B0:A2:9F:23:21:6F
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584B0B76C231F5BFAD212B784C80
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6abb6798-8321-3fe3-a56c-c6c7cf15e968.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     54858
IP address blocks:        2605:9080::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:c2:31:f5:bf:ad:21:2b:78:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=2420de0e-ceac-49e0-bc1d-d47cf877bb8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a5:80:be:95:af:47:fb:c8:5b:e9:0a:0b:b2:
                    18:c0:06:62:b8:53:78:7d:6f:f4:e7:e1:37:40:65:
                    89:07:16:7f:0b:f8:bf:58:89:37:7c:dd:fa:0a:7f:
                    35:30:4d:59:17:c0:55:1f:d6:66:f8:f1:77:f4:13:
                    98:e5:4f:a0:bf:4b:12:6c:2d:3f:45:52:0c:5b:f7:
                    4a:c0:e2:3c:3d:42:f0:55:dd:30:e9:13:9f:9a:30:
                    c1:8c:90:35:3f:2b:72:ef:0a:30:bc:d1:fa:e5:dd:
                    f0:6a:dd:5b:c5:66:a0:d6:78:0a:39:e2:7b:fd:9c:
                    86:3f:63:d1:e5:99:2d:af:ca:e3:42:70:30:6c:92:
                    74:16:6c:75:90:44:26:e2:f2:a1:98:c4:cf:bf:3f:
                    50:4c:98:eb:eb:79:81:f9:d2:dc:cc:b2:59:22:cc:
                    f0:09:d2:d2:0a:70:3a:f8:87:9f:c6:56:2f:ed:1f:
                    f0:4b:a9:6e:48:f2:bd:f2:46:67:01:ab:20:dc:cf:
                    11:93:42:37:a5:b3:91:1f:05:86:79:ab:89:8e:81:
                    ac:e0:e4:c7:1e:c8:53:69:df:ec:b1:66:5f:cf:06:
                    d5:e8:7f:51:2b:ac:7d:6d:2d:4f:56:fc:33:e3:e0:
                    20:23:9b:df:1e:0e:dd:24:4d:68:ec:37:ba:33:7c:
                    c9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C5:F1:11:E9:A3:D6:3F:0C:08:FA:DD:9F:2A:B0:A2:9F:23:21:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/6abb6798-8321-3fe3-a56c-c6c7cf15e968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9080::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d3:45:d6:66:55:7a:bb:d7:15:27:6f:21:74:87:bd:d1:47:
         52:cf:d4:1a:f0:47:ea:dc:65:ef:39:38:41:46:46:a9:c8:10:
         d8:fc:d0:7d:e7:ae:3e:57:8b:be:5d:3f:d5:f8:42:3a:cd:34:
         33:5d:35:50:bc:ac:4d:c3:af:10:41:3f:2e:5c:0b:80:ed:a8:
         d2:e6:73:46:ac:2d:cf:76:02:15:e1:65:09:f7:fc:c9:e6:6d:
         8b:7f:b0:57:0e:88:f8:bf:a9:e1:2d:1a:86:04:e9:fc:44:da:
         13:fc:83:45:ef:3a:45:6e:49:4d:3a:ec:22:f4:6c:35:93:b3:
         80:1b:d2:59:b7:88:c9:d0:62:e1:fe:b3:a6:c7:a4:bc:96:81:
         60:ec:95:36:ce:9b:90:32:b1:f7:8d:65:e1:97:7c:55:73:f7:
         84:40:eb:81:9b:1d:55:db:76:5f:5a:02:d9:a6:fc:93:6b:8f:
         ca:1d:1d:c8:39:c6:c0:3b:8c:7d:e2:74:f0:5c:b5:86:19:98:
         ee:39:a4:7a:70:db:c3:c8:63:d6:12:a1:5d:77:28:66:27:e6:
         17:18:89:94:1d:ee:bc:88:df:e4:8c:46:1b:b0:76:ab:dd:91:
         a6:94:e2:8f:ea:bf:79:4e:ac:d4:cc:a8:76:5e:b2:d7:53:8d:
         c5:92:0d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:31:22 2025 by rpki-client