Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/69bc01f0-27eb-39e2-9169-1b190f7c2b9b.roa
File:                     69bc01f0-27eb-39e2-9169-1b190f7c2b9b.roa (raw, json)
Hash identifier:          pZbpnaxyYqL7Hd43DisPKmACc9v5GugwG12LjHftpuA=
Subject key identifier:   32:7F:59:DC:60:E3:A7:7C:1B:23:BE:65:35:7D:14:9F:A0:73:DF:04
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584B6D2C8E388383A638F17187C0
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/69bc01f0-27eb-39e2-9169-1b190f7c2b9b.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     18934
IP address blocks:        2605:9a40:6a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:8e:38:83:83:a6:38:f1:71:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=b8b5683b-2c7b-488a-9895-a999843b4145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3f:95:6c:23:58:65:d2:2c:48:56:0c:54:99:
                    a5:f3:91:ae:7b:e7:40:44:e1:09:94:59:36:69:94:
                    26:23:73:7e:22:e7:96:c8:3a:c8:ed:cc:3b:7f:69:
                    cc:fb:ae:eb:31:7e:a7:4c:f4:be:18:c3:b7:24:2d:
                    06:2a:e8:50:db:bc:e1:da:1e:e9:df:99:44:eb:7f:
                    ac:9e:0b:d7:c1:7c:da:59:cf:12:ac:76:93:dc:23:
                    a2:f5:e7:75:8a:96:7d:a9:da:ce:cb:2f:88:fb:08:
                    d0:54:92:45:1a:61:70:c2:9b:ff:c6:f1:27:ae:22:
                    21:c3:a4:43:02:9a:99:ed:6c:f7:3a:82:eb:fc:b7:
                    51:6f:91:a1:7b:cb:f5:07:b0:b1:aa:b1:cb:60:81:
                    90:6c:0d:49:c7:76:da:21:f6:cb:4f:6b:8f:88:1b:
                    ad:13:fb:38:50:b1:d7:f1:de:9b:23:8c:a1:c2:2a:
                    a2:47:20:93:c6:c5:e0:91:81:30:cb:4a:08:60:ec:
                    6b:28:79:bc:8d:27:8c:c9:dc:6d:3f:37:c9:e0:b0:
                    d0:24:cb:76:60:32:41:8a:6f:6f:38:15:f0:69:46:
                    6e:f4:67:fc:67:e1:9f:20:ba:14:97:b5:f7:2e:1d:
                    fa:43:4d:b1:92:85:be:e0:31:11:b1:30:2a:60:b7:
                    ff:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7F:59:DC:60:E3:A7:7C:1B:23:BE:65:35:7D:14:9F:A0:73:DF:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/69bc01f0-27eb-39e2-9169-1b190f7c2b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9a40:6a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:c8:db:e3:d4:c1:01:8d:52:9a:9d:0b:77:d0:5a:e6:5a:68:
         32:7a:cb:6e:5e:a4:e6:d6:d7:0d:1a:16:ef:8a:c3:ee:19:68:
         07:fe:45:76:52:7d:39:de:67:66:7e:22:89:ef:3e:a3:8f:1d:
         96:f8:55:c2:39:72:46:d6:3d:3a:51:ea:50:cf:b0:7a:d4:4b:
         78:72:16:c3:15:2e:bc:2d:56:52:fe:c2:63:00:0e:dc:ed:3c:
         1e:83:48:4b:bf:ab:ce:d6:33:26:0f:fa:d0:68:e3:37:a9:16:
         e3:fe:39:93:c8:8f:f7:23:ff:86:a4:ae:d7:4d:02:d8:32:57:
         3a:5c:76:e8:de:90:8d:39:f9:2d:a1:38:3f:05:0f:14:4a:df:
         e1:87:2a:41:8c:50:06:66:aa:91:6c:43:14:db:cb:a7:a7:a5:
         d7:bb:9a:c1:7c:b0:4a:4a:10:6a:e0:73:32:52:6c:33:10:8b:
         b6:39:9b:20:40:b1:1d:92:5e:21:08:f3:3e:96:f2:49:e2:53:
         c7:94:ac:9b:3a:b8:83:51:1e:bd:24:70:c4:e1:b3:a3:0e:b7:
         50:47:b3:66:87:24:93:0f:69:eb:59:59:3e:1c:ab:df:88:2a:
         d4:fe:05:9c:64:3a:96:25:20:f6:c7:53:92:c3:22:d0:ca:cb:
         3b:0b:5b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:06:48 2025 by rpki-client