Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/558e8bb8-270d-3bec-8e35-a7411e2bc32f.roa
File:                     558e8bb8-270d-3bec-8e35-a7411e2bc32f.roa (raw, json)
Hash identifier:          w5fX1A/qugJhm3+ElGrLYA6G6uWsS9RQTcnQoZmqX/Q=
Subject key identifier:   4D:F2:ED:1E:20:59:64:61:11:AB:51:79:6E:8F:FE:56:B9:0D:1A:E7
Certificate issuer:       /CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
Certificate serial:       010D0C9F4328584BA2378DEF1E1D0809D0581A00
Authority key identifier: 63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/558e8bb8-270d-3bec-8e35-a7411e2bc32f.roa
Signing time:             Sat 25 Oct 2025 01:00:31 +0000
ROA not before:           Sat 25 Oct 2025 01:00:31 +0000
ROA not after:            Fri 23 Jan 2026 02:00:31 +0000
asID:                     5400
IP address blocks:        2606:f100:d600::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a2:37:8d:ef:1e:1d:08:09:d0:58:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
        Validity
            Not Before: Oct 25 01:00:31 2025 GMT
            Not After : Jan 23 02:00:31 2026 GMT
        Subject: CN=faac9ea4-d1d2-44ac-8216-4e034554ba2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bc:2f:2f:ef:2d:af:79:81:09:4f:1c:fa:4d:
                    9d:60:ab:0b:15:4f:11:00:25:8e:a6:5c:2c:74:35:
                    49:fa:f1:1a:75:fa:96:b8:23:66:f8:48:1a:c4:0a:
                    da:26:86:ce:ae:b8:92:c3:0f:50:0c:3a:e0:25:41:
                    4c:f1:ef:13:2d:bf:e1:3f:f8:94:1b:d6:96:f0:57:
                    89:ee:bf:49:37:c4:2a:ba:16:1a:4a:58:44:5a:5d:
                    77:a5:10:7b:40:f0:e5:f8:29:e2:cb:d9:ac:1a:d4:
                    7c:2d:77:0e:78:22:8a:79:dc:f6:db:36:0f:ed:d3:
                    21:e0:6a:24:fb:f6:15:55:48:30:f9:80:b5:90:43:
                    c7:fb:5c:28:96:9b:8f:ab:b7:9d:3a:33:d3:7c:31:
                    84:50:a2:0a:61:c1:d9:a3:fc:6e:0e:d9:c9:c3:65:
                    eb:1b:24:96:d0:5f:fa:8d:2b:1f:d4:30:b1:ae:ec:
                    19:40:64:60:80:8b:b3:42:46:b4:3d:64:ec:05:22:
                    da:15:9e:51:a0:ca:c9:c8:95:93:20:2c:6d:c1:70:
                    13:95:4d:0c:62:19:2f:09:d0:f1:9d:ff:3a:0a:fc:
                    59:72:de:bb:f9:85:80:ef:16:ec:1d:cc:47:f3:8b:
                    bb:9b:30:46:89:70:c8:2a:2c:a9:bb:8a:09:1d:3f:
                    a5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F2:ED:1E:20:59:64:61:11:AB:51:79:6E:8F:FE:56:B9:0D:1A:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/558e8bb8-270d-3bec-8e35-a7411e2bc32f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl

            X509v3 Authority Key Identifier:
                keyid:63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f100:d600::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:2b:13:82:e6:2b:3f:aa:e0:60:28:67:56:c3:b1:c1:68:d8:
         8d:a5:e1:64:9a:be:96:a5:b7:f8:94:55:81:f7:78:09:34:76:
         cb:75:b6:c4:f6:3c:77:b8:05:28:61:98:83:8a:12:33:e4:fa:
         e1:73:f3:39:d5:09:46:a1:67:31:05:cd:c0:c3:df:42:6f:bf:
         3c:b3:2e:50:4e:22:d6:54:14:2d:f9:64:7b:2a:70:d0:de:10:
         53:07:dc:00:ba:0a:4c:0d:2e:e8:f3:87:e5:14:6c:a8:be:3f:
         a2:d1:c0:63:e6:80:b8:ce:62:21:e1:b7:02:60:96:c6:c2:63:
         0d:33:70:14:88:c4:85:c7:d2:6a:62:3e:ea:cf:98:48:95:95:
         3e:e5:bf:9a:95:74:da:d5:a4:3c:96:b6:46:81:b0:a7:b0:3d:
         8b:c6:0d:f4:db:9b:9d:d9:66:1e:da:68:44:e9:f3:1b:1e:1b:
         17:4f:cd:c0:74:b9:6d:43:ee:e1:ab:79:f0:42:32:10:51:4e:
         74:a1:3c:57:fb:6b:a7:6c:66:85:a7:69:d6:dc:ec:9a:5b:ef:
         7b:7a:04:87:ef:1f:30:b2:7e:62:78:62:4c:1f:a7:47:34:14:
         f7:63:02:06:2b:69:ef:72:eb:dd:d0:95:b0:05:19:00:15:6d:
         4b:be:5c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:34:47 2025 by rpki-client