Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/e92c13f2-6a0e-3db5-90f8-95f2f5a6f71f.roa
File:                     e92c13f2-6a0e-3db5-90f8-95f2f5a6f71f.roa (raw, json)
Hash identifier:          hM8z+S67JEJsVb7V7RwLl+xMLF439IlK16X1cQhOq0Q=
Subject key identifier:   59:87:E8:B2:3E:C1:63:14:36:49:E8:00:AB:9C:70:06:64:2F:32:5F
Certificate issuer:       /CN=6288979e-3de3-4c2b-9663-274b980094e8
Certificate serial:       010D0C9F4328584B2B9198F9575D9E505A085380
Authority key identifier: EE:A6:80:69:BA:9F:74:19:EC:3D:57:C3:E7:9D:92:7F:4F:C3:32:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/e92c13f2-6a0e-3db5-90f8-95f2f5a6f71f.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     401593
IP address blocks:        2606:dac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/6288979e-3de3-4c2b-9663-274b980094e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/6288979e-3de3-4c2b-9663-274b980094e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:98:f9:57:5d:9e:50:5a:08:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6288979e-3de3-4c2b-9663-274b980094e8
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=b288a83b-9195-4d2b-b9bc-b72273d9c0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:04:4f:aa:c5:bf:cf:bd:eb:f7:38:b7:63:8f:
                    d0:c3:0c:f4:c3:4f:76:a4:21:14:4b:3a:99:7d:aa:
                    8b:24:83:f5:28:3d:aa:06:5f:62:59:5a:b9:e7:cd:
                    88:f9:c9:4f:5e:1b:3b:19:15:8f:65:9e:ef:d9:ab:
                    24:cb:2d:fe:54:02:be:90:f9:a8:b9:cb:8b:c4:d5:
                    b2:02:22:21:c4:c0:85:6c:95:c0:2e:ae:76:8a:bf:
                    a4:e6:da:fe:4a:5b:0c:ef:c2:dd:77:98:d3:f4:31:
                    8b:8b:ad:80:f2:aa:87:73:78:3f:d7:55:7d:b6:4e:
                    bd:8b:28:f7:5a:fe:8b:d2:ae:c6:7a:bc:a0:61:25:
                    01:a8:26:ea:11:2d:e2:36:58:9f:9f:56:20:6b:d6:
                    81:43:3b:a6:c7:a4:51:7c:4a:f7:03:24:df:23:d8:
                    8f:4c:10:5c:60:6c:26:1f:04:70:0d:1b:b4:fc:75:
                    cc:d0:a4:d2:ce:5e:be:00:c3:c6:13:58:e5:b4:f0:
                    c6:b2:09:c2:f6:fb:4f:56:ff:ce:f9:27:9b:b9:c8:
                    00:6b:cc:ca:c0:ab:0f:a8:fb:3e:4d:48:9d:94:06:
                    18:81:f4:1a:7a:e9:7b:d9:f1:73:6b:8a:92:ab:f5:
                    2b:1b:d0:9f:8e:48:d7:26:5b:e9:8d:ef:5b:25:ef:
                    5d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:87:E8:B2:3E:C1:63:14:36:49:E8:00:AB:9C:70:06:64:2F:32:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/e92c13f2-6a0e-3db5-90f8-95f2f5a6f71f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/6288979e-3de3-4c2b-9663-274b980094e8.crl

            X509v3 Authority Key Identifier:
                keyid:EE:A6:80:69:BA:9F:74:19:EC:3D:57:C3:E7:9D:92:7F:4F:C3:32:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:dac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:6d:0a:e0:b6:4a:d4:fb:81:7f:8a:1d:f6:93:b8:bd:aa:ad:
         3b:26:4b:2b:50:b2:58:8c:61:6b:c5:3d:a6:76:da:3d:e2:a1:
         1b:22:92:d8:79:b8:5e:fd:ef:48:a5:6e:5a:60:23:75:2d:f3:
         ac:dc:ce:dd:93:c3:dc:75:34:42:52:06:39:13:9c:65:ea:92:
         28:86:8e:4d:c8:27:dd:83:33:07:e8:b9:d5:0a:d2:6e:a0:ec:
         fc:bf:bd:81:51:f3:9b:96:30:ed:6e:bc:a4:e9:32:74:21:16:
         1a:5c:84:3f:35:4f:de:77:64:63:ae:79:a8:ba:48:f7:4b:a0:
         fb:fe:9a:3d:84:18:f5:93:da:f0:1f:1b:8e:b0:df:f8:73:ab:
         ef:b0:27:d2:6e:1e:7a:93:13:28:a1:f8:c9:66:12:8b:25:b2:
         92:a0:e1:8d:0b:14:c1:3a:32:b1:ab:38:90:42:80:c4:16:c6:
         d1:b5:59:fb:a1:d2:dd:aa:01:47:b0:da:7b:e1:78:57:6b:0f:
         68:0e:18:12:81:0f:6e:ee:6f:35:96:ab:5a:da:ed:da:29:48:
         41:11:eb:58:0f:9f:d1:9e:1f:36:fb:7a:f1:07:5d:68:13:8c:
         1a:50:c7:1b:f7:ae:4e:59:00:43:df:48:6c:4e:21:96:80:43:
         80:3c:75:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:28:50 2025 by rpki-client