Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/04060585-1bc1-378b-876c-7416a134b05d.roa
File:                     04060585-1bc1-378b-876c-7416a134b05d.roa (raw, json)
Hash identifier:          ozAKnT6+GKUY5IFmlBBWGdRrx0jnoQ5kBSHoqpI7KYU=
Subject key identifier:   B8:70:25:E8:54:6E:1C:8C:FA:F5:87:0E:5F:B5:51:29:3E:42:03:4D
Certificate issuer:       /CN=66610284-035b-4928-833d-55f67bcdadc1
Certificate serial:       010D0C9F4328584AFEE6A0454231A849F1C604C0
Authority key identifier: 32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/04060585-1bc1-378b-876c-7416a134b05d.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     400587
IP address blocks:        2602:fb95::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a0:45:42:31:a8:49:f1:c6:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66610284-035b-4928-833d-55f67bcdadc1
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=b66c3979-f1c5-4ac1-a1bd-721f04381cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d6:80:f4:5e:7e:1d:d5:e7:e5:53:5d:f4:8e:
                    c8:ae:14:17:17:90:ae:69:0d:d9:37:31:ef:96:83:
                    02:05:99:b1:10:a4:79:b6:38:35:51:dd:ae:94:af:
                    b9:36:3d:1d:c9:3b:24:f0:f2:14:b8:d6:d3:df:da:
                    f9:0a:14:dd:66:59:af:c1:cd:fc:ca:19:9e:94:4d:
                    a0:a2:78:8b:83:02:0a:95:c5:54:67:bf:c0:15:ea:
                    9c:c0:af:fe:54:8a:13:ea:8d:8a:c7:3c:06:67:cc:
                    9f:93:4a:73:e2:2f:6d:b2:9e:7a:23:6e:68:42:2c:
                    e6:60:8b:82:44:2a:c8:f3:69:a6:15:f1:b8:9d:48:
                    ae:c7:e5:d9:70:9d:98:50:88:6c:c4:4d:86:51:86:
                    f6:b0:18:32:34:c3:bf:73:b2:e1:53:b9:e6:f9:60:
                    f4:ca:3d:01:de:c6:a0:55:0c:8c:28:b6:f4:b6:f7:
                    97:36:a8:4d:5b:46:81:d2:93:0f:4e:8d:30:26:7e:
                    03:7f:62:20:b2:40:19:81:b7:0f:f2:91:62:a6:73:
                    a1:a4:3a:0c:e7:21:e8:0e:73:52:21:1f:c3:42:cd:
                    ef:d7:5d:2f:9c:17:07:ed:ad:d5:9c:e6:2f:39:ed:
                    f2:5f:b1:a5:3e:14:2a:4f:b8:7d:e5:de:fc:47:52:
                    c1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:70:25:E8:54:6E:1C:8C:FA:F5:87:0E:5F:B5:51:29:3E:42:03:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/04060585-1bc1-378b-876c-7416a134b05d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl

            X509v3 Authority Key Identifier:
                keyid:32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb95::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:0b:29:77:f2:ec:f5:bd:28:42:4c:e6:9a:07:c3:30:58:a8:
         c9:5c:9f:86:e5:ac:4d:04:72:37:06:ee:f4:f2:ac:b2:bb:b7:
         fd:b7:f4:90:ba:51:90:07:19:5d:61:16:f4:65:c9:bf:3b:d7:
         51:be:6d:d7:29:1a:b1:d3:2c:db:71:c6:b2:b4:37:f2:5e:be:
         58:81:fb:5b:68:7f:de:34:03:27:97:0b:f5:77:e1:68:a8:ac:
         f7:07:4b:c1:f6:f2:82:9b:8c:5c:f3:c7:71:32:9e:50:e3:ed:
         03:ce:bf:24:96:08:4b:ba:93:11:f5:6a:d2:34:c7:82:3a:be:
         ed:32:26:8f:ea:82:66:93:91:ca:20:a0:98:f3:29:ee:34:01:
         c3:c1:ae:98:36:50:89:62:36:b7:04:fb:4c:38:03:71:15:ae:
         9a:da:1b:4e:7a:94:74:9a:59:07:b1:de:0c:bf:8a:6b:1b:21:
         c5:29:40:98:bd:d9:68:9e:d4:67:2c:43:3c:5c:e3:e7:b3:58:
         e3:6b:66:02:e3:ea:b5:d6:d2:b5:ab:1e:2b:47:3d:e6:45:c3:
         d1:71:04:4f:a3:78:12:24:bf:bc:24:36:55:5a:4b:db:b0:42:
         3a:ba:bd:39:11:ce:d8:63:43:a8:f4:00:e4:e2:de:09:36:0d:
         4f:b8:52:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 00:41:51 2025 by rpki-client