Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/a17a91df-764d-3274-b083-cf6f640c2e29.roa
File:                     a17a91df-764d-3274-b083-cf6f640c2e29.roa (raw, json)
Hash identifier:          LvITVc7zMFq9ej7OhbfEObQE1QWRDJhmAiubhr14eSM=
Subject key identifier:   10:9E:D0:D4:2E:03:A1:22:F1:3A:E7:F4:0F:5B:04:43:FF:AB:DC:FD
Certificate issuer:       /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
Certificate serial:       010D0C9F4328584B5571E50F378FB870374D66C0
Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/a17a91df-764d-3274-b083-cf6f640c2e29.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     21581
IP address blocks:        2606:7100:1cab::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:e5:0f:37:8f:b8:70:37:4d:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=e26a1ba6-e248-4ce2-8199-2661e97af2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a6:0b:6e:32:74:80:2e:10:82:b8:27:40:1a:
                    52:7f:28:5c:c6:bf:3d:d1:8a:1e:01:5c:6a:06:ca:
                    72:54:f9:04:3a:f5:c0:88:21:64:fe:da:7e:66:f0:
                    ca:65:83:bb:14:63:c6:ed:88:50:9a:84:48:15:a8:
                    14:23:29:0d:27:1b:ba:4d:9a:46:f8:1f:c3:c5:87:
                    43:c1:65:d8:5e:03:fb:cc:db:95:89:36:b9:8b:15:
                    e9:14:df:b2:c2:01:17:b6:52:ad:32:2b:30:25:28:
                    13:ce:60:eb:dc:21:bc:62:96:66:b6:2d:65:7d:23:
                    79:ca:97:4f:74:63:53:e9:33:4f:cb:66:36:d2:b0:
                    7c:2e:5c:a0:a0:d1:36:e7:c2:01:48:7c:02:92:a8:
                    b2:0b:23:46:48:9f:ce:cf:bc:42:62:ab:3e:df:db:
                    58:60:33:1e:c9:90:eb:8a:65:47:3b:8f:4a:10:4d:
                    b1:3d:84:d1:61:a3:ff:9b:cf:ed:db:34:5c:83:70:
                    b6:4d:91:d5:b9:7e:79:ca:79:30:c4:a1:3a:ba:97:
                    6f:26:88:4d:0f:93:5e:90:1a:d1:08:ab:9f:5f:2d:
                    a6:89:c6:67:46:45:ed:08:b2:75:70:5f:97:30:38:
                    15:bc:bc:16:a8:a8:f3:06:4f:a8:a3:c1:79:e5:3d:
                    0f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9E:D0:D4:2E:03:A1:22:F1:3A:E7:F4:0F:5B:04:43:FF:AB:DC:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/a17a91df-764d-3274-b083-cf6f640c2e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl

            X509v3 Authority Key Identifier:
                keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7100:1cab::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:83:cb:9b:3c:dd:33:ff:90:d0:7e:08:8a:7c:d2:cd:4c:f5:
         c2:65:01:a1:87:89:98:99:b1:fc:b6:42:c3:eb:3b:71:65:7c:
         01:2b:02:dd:70:7b:e8:56:99:d4:b2:eb:c4:f9:af:74:11:2b:
         be:90:98:24:39:9d:18:24:cd:2d:97:e2:d7:4f:5a:18:79:ea:
         77:4b:d5:97:89:7b:97:9f:bd:09:5f:7e:37:63:93:10:61:ec:
         ce:56:ba:70:d0:eb:e3:d4:9b:05:16:58:34:dc:9b:d7:1b:c3:
         8a:b7:2a:23:02:3f:60:65:0a:79:f0:34:51:fa:43:d3:e5:63:
         46:82:72:fc:e6:bb:cc:de:8d:1c:67:de:2e:83:66:5c:c1:77:
         86:d5:f5:07:9d:12:67:e2:23:13:e9:25:c6:54:38:c6:00:82:
         62:4e:0e:76:14:ff:45:03:93:58:5a:f1:1f:f7:00:88:bb:40:
         a6:dc:e9:74:87:74:c1:7f:a6:4c:1b:12:ea:8a:da:f8:10:99:
         61:37:96:2a:70:f0:08:3d:9c:32:b2:aa:de:3e:88:04:65:91:
         2a:fe:11:e3:a0:1f:47:38:d9:6a:42:4e:bb:30:3d:a6:1c:0e:
         bd:71:cf:46:32:6c:17:c9:7b:1d:e3:28:ee:01:ea:57:f7:c0:
         87:83:37:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 16:11:32 2025 by rpki-client