Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/ab573324-d776-336d-a8e6-ffb6eebac624.roa
File:                     ab573324-d776-336d-a8e6-ffb6eebac624.roa (raw, json)
Hash identifier:          L4xRK3mqBTOhu2LPIrTAEz0kjFRoUOn4YPm+QKFkGIY=
Subject key identifier:   2E:80:A4:E1:56:C7:F5:49:C3:19:35:FB:B0:39:21:3C:9B:8A:6D:1B
Certificate issuer:       /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
Certificate serial:       010D0C9F4328584B5571E522C3304BDAC959A000
Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/ab573324-d776-336d-a8e6-ffb6eebac624.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     21581
IP address blocks:        2606:7100:3100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:e5:22:c3:30:4b:da:c9:59:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=50d4811f-16f2-452f-ad27-6b6ec36bd630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f4:cd:c2:b7:5d:04:82:47:f2:1e:d2:56:b3:
                    49:ec:d3:b9:10:c7:a5:22:82:92:3c:40:25:fb:f1:
                    ca:21:88:50:58:cf:97:5c:6d:45:18:64:e0:1b:8e:
                    fd:f1:db:fd:64:bf:73:84:dc:89:67:17:03:6e:c9:
                    b1:4c:9f:28:1b:ea:e6:9a:7f:31:d3:ec:c9:eb:cb:
                    6b:db:30:f8:55:05:4a:a0:90:54:8c:e0:7b:77:61:
                    c7:5d:e1:78:10:2a:6f:61:3b:0e:39:5c:a1:e0:d7:
                    67:4c:51:2f:e8:10:0b:a1:a7:70:be:cc:90:59:20:
                    43:fa:d6:64:80:38:1d:e7:c8:f7:a0:6c:df:b2:e5:
                    e8:44:40:83:48:14:cc:89:f5:b1:e1:6f:9c:ac:e1:
                    3d:9b:ca:31:ba:c9:6f:fa:cb:9c:e0:84:31:38:17:
                    f5:29:4d:c6:53:07:2c:b5:64:3f:d8:be:95:3f:a9:
                    90:df:31:4c:53:ab:04:2e:97:1b:88:8d:4c:99:01:
                    ae:73:de:d2:28:35:31:0e:dc:87:8c:8a:13:25:c2:
                    92:6c:95:12:98:fc:80:ea:26:77:56:46:83:a3:5a:
                    86:9c:aa:73:68:12:5e:cc:e1:97:fb:61:2b:2b:bd:
                    11:55:fd:41:d8:1a:64:82:be:a2:6a:1c:12:70:36:
                    6c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:80:A4:E1:56:C7:F5:49:C3:19:35:FB:B0:39:21:3C:9B:8A:6D:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/ab573324-d776-336d-a8e6-ffb6eebac624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl

            X509v3 Authority Key Identifier:
                keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7100:3100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a9:9a:16:14:5a:cf:ef:69:95:4c:02:97:25:58:82:4d:54:
         b1:02:a0:3f:a9:c3:f5:ac:44:e1:b0:80:64:bb:24:59:af:6c:
         d2:4c:e9:81:86:15:d2:77:ef:e6:27:44:f1:2d:b8:5b:0e:e1:
         e8:0b:b7:ca:ef:42:20:dc:b9:91:3a:47:37:4f:5d:a1:f3:b3:
         68:e8:4e:fb:65:40:12:0e:bd:6b:ca:b4:1e:f4:16:8b:14:92:
         93:2a:36:c8:e4:37:b1:8d:5c:15:6b:3c:5e:cc:69:d5:c8:65:
         e9:13:e0:14:99:47:29:1f:29:38:5e:a3:a4:cc:8d:89:aa:0b:
         60:e4:a2:ca:7e:d1:69:82:28:c7:82:9c:ac:31:4c:9f:f5:d5:
         64:7e:ff:0b:41:6e:a7:54:6a:cd:14:5d:a7:2c:09:47:a8:69:
         43:1b:18:03:c5:98:f3:74:26:dd:a4:a9:09:a6:64:42:75:a2:
         a5:b8:1d:17:2c:fa:d9:23:57:09:0a:9d:77:cc:39:d8:6d:63:
         6f:9a:05:8f:f5:a0:25:af:0d:d6:0e:2a:40:2a:e4:a1:05:05:
         86:e8:bf:10:68:3c:de:39:6b:b7:24:a0:2c:c1:7d:3b:0c:80:
         0e:80:45:85:ed:91:cb:96:64:db:b2:db:a2:e9:5c:d2:f2:65:
         28:cc:0d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 16:12:59 2025 by rpki-client