Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e645c012-c626-34db-bc9b-1cc63aba011f.roa
File:                     e645c012-c626-34db-bc9b-1cc63aba011f.roa (raw, json)
Hash identifier:          nklgpDrZSdp2lA8lzGDQdcYKzPz92da+AVEgh1sYzAE=
Subject key identifier:   04:FF:8D:36:A2:FF:74:21:19:F1:99:F8:76:7A:AD:F0:3C:D5:08:F2
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F4328584B2E5C48B7A2BC9117CA70A380
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e645c012-c626-34db-bc9b-1cc63aba011f.roa
Signing time:             Sat 13 Sep 2025 13:00:41 +0000
ROA not before:           Sat 13 Sep 2025 13:00:41 +0000
ROA not after:            Fri 12 Dec 2025 14:00:41 +0000
asID:                     16532
IP address blocks:        2605:2a00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:5c:48:b7:a2:bc:91:17:ca:70:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Sep 13 13:00:41 2025 GMT
            Not After : Dec 12 14:00:41 2025 GMT
        Subject: CN=e6cb604d-2215-4da0-901a-7a337f6e2653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:39:f8:9b:a5:09:0a:d8:3b:d9:13:e7:a0:d8:
                    91:26:ec:bb:76:bb:d0:b7:e7:34:12:04:79:5b:e1:
                    f8:74:0c:5e:2d:8e:10:d3:e6:bd:8e:d4:9b:13:9f:
                    8a:d7:f0:f9:ca:d4:2c:45:85:28:cf:c0:b5:53:6f:
                    20:e5:23:61:96:c3:d5:59:2f:f3:38:a9:f3:8a:40:
                    fe:bf:42:9a:39:ce:dd:d4:cc:d2:75:15:b6:9f:7a:
                    01:79:a7:15:b1:0c:d7:98:85:c3:98:bf:03:9c:dc:
                    9f:70:98:76:da:b9:36:9f:fe:d6:9c:ea:63:19:ac:
                    5d:06:bf:c8:c4:e7:5d:d8:a1:7d:3a:9a:43:ae:37:
                    72:c5:10:36:ef:cb:74:b0:0f:3f:2a:c0:5a:7a:19:
                    64:95:1b:bf:ca:30:f7:2f:8e:c9:2d:a6:af:9b:af:
                    61:bc:e2:ad:2d:a7:98:40:56:c0:d3:53:bb:96:88:
                    7b:b8:2f:cc:0c:27:ab:34:47:3b:92:5f:f6:01:c3:
                    9e:ac:0c:13:8b:12:f3:9d:d3:1c:6f:ab:dc:7f:6d:
                    7f:9d:8d:00:f2:23:2a:4b:f4:51:cc:9d:5b:e8:2d:
                    08:17:ae:21:a0:ad:1f:05:c5:51:f9:ba:bd:31:64:
                    d8:3e:0b:c5:36:c4:32:7a:29:d4:eb:0b:c9:83:55:
                    30:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FF:8D:36:A2:FF:74:21:19:F1:99:F8:76:7A:AD:F0:3C:D5:08:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e645c012-c626-34db-bc9b-1cc63aba011f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2a00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:42:03:8c:3d:a6:a5:ea:06:6a:66:17:ec:9f:ae:95:57:78:
         0a:bb:46:f0:5d:1d:de:e2:bc:7f:9d:ce:76:db:11:4a:71:18:
         fe:47:8d:4c:8b:cf:2a:a6:5d:7a:56:fa:45:32:51:60:20:4f:
         8d:d3:ff:91:3d:0b:8b:b6:3c:1c:58:19:2a:aa:18:53:17:a2:
         c2:db:66:a3:3b:43:a0:9e:c7:fc:7b:90:11:b2:cb:1d:15:f2:
         42:b2:75:b2:1b:fe:8a:23:c3:b0:12:b0:12:e2:b4:0a:22:bd:
         05:4d:73:5c:1e:2d:27:9a:e9:95:57:d4:ac:e0:7e:4b:a7:c4:
         01:8b:5e:a5:f0:9d:b9:fd:92:5b:ea:fe:79:e0:e2:e9:de:80:
         93:a1:8f:a2:6e:1a:68:87:90:a9:3f:35:41:2d:41:fc:53:47:
         c7:a8:8e:80:10:7a:7a:d5:83:9f:ea:2a:bd:26:4a:4d:3c:b5:
         37:4d:08:f9:3f:59:03:bf:a3:97:e1:d9:52:e1:83:ec:1c:28:
         05:c0:be:83:bb:1d:19:9d:5b:09:cc:6e:0e:f5:1e:5a:cc:06:
         df:f4:58:01:b4:bb:b4:2c:80:cf:fe:25:9a:cc:01:dc:6a:77:
         6d:02:7c:b1:d8:7b:6b:82:91:68:3a:95:68:73:77:e8:90:67:
         26:cd:01:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:25:39 2025 by rpki-client