Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/6a4b8ec7-3ba0-35d8-9b5f-88ad07235add.roa
File:                     6a4b8ec7-3ba0-35d8-9b5f-88ad07235add.roa (raw, json)
Hash identifier:          jvFMZlfMr0sNX6KlyLvrZEP4BiMyZH4UzzyzvMb5s4s=
Subject key identifier:   62:D1:F1:93:92:5E:55:BE:16:C6:73:6A:7B:00:A4:5B:6C:C9:99:CD
Certificate issuer:       /CN=55e7b8e0-0df5-4481-84e4-83619b05f966
Certificate serial:       010D0C9F4328584ADECBAC974607C0A753569A20
Authority key identifier: 61:AA:90:72:0A:BC:38:A3:EE:E2:A2:55:8A:C1:C0:63:76:26:67:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/6a4b8ec7-3ba0-35d8-9b5f-88ad07235add.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        2606:ec0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/55e7b8e0-0df5-4481-84e4-83619b05f966.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/55e7b8e0-0df5-4481-84e4-83619b05f966.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:ac:97:46:07:c0:a7:53:56:9a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e7b8e0-0df5-4481-84e4-83619b05f966
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=165151b8-2a9f-4f62-af02-641cbe7f26c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:de:eb:7d:85:11:f5:45:7f:49:54:e4:be:21:
                    51:a2:2f:f0:c2:db:de:59:f1:e8:26:a1:d1:55:f8:
                    08:57:20:56:25:8d:c6:a4:7f:ef:7b:b0:ac:31:fb:
                    73:9b:a6:1f:13:52:1d:50:97:4d:f0:dc:9f:20:64:
                    50:45:ff:db:cd:be:8c:fa:0a:08:43:24:a9:b1:89:
                    d5:d4:44:4a:8a:9c:17:50:8b:ec:c2:2c:de:5b:90:
                    ba:5b:35:17:25:14:fb:de:12:c0:5a:71:f8:9d:29:
                    0f:d5:c9:55:c1:38:7c:c0:fd:ec:6a:f8:43:6a:a4:
                    73:d8:7f:9f:21:b3:b9:ae:ba:f2:86:f3:73:3b:9c:
                    1d:6d:ac:c2:f2:74:46:58:36:b7:9e:7f:57:70:ae:
                    28:db:75:f4:2a:f6:aa:57:c8:b1:93:64:4d:6e:da:
                    a8:95:17:b4:10:4c:fa:cc:55:fc:6f:be:78:76:d9:
                    d5:f8:37:04:51:43:a4:ac:63:00:2c:a2:2b:42:46:
                    04:2a:5c:3b:53:af:15:2d:75:d6:e9:74:ad:c1:4f:
                    c6:e7:88:6d:ad:12:5e:4e:68:a0:dc:cd:f8:36:4f:
                    5a:55:1c:aa:ef:fe:e3:6b:30:d9:8a:29:5b:6e:62:
                    0d:9e:7a:0a:a4:c1:90:1a:44:b3:1a:6e:99:a5:d2:
                    77:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D1:F1:93:92:5E:55:BE:16:C6:73:6A:7B:00:A4:5B:6C:C9:99:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/6a4b8ec7-3ba0-35d8-9b5f-88ad07235add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/55e7b8e0-0df5-4481-84e4-83619b05f966.crl

            X509v3 Authority Key Identifier:
                keyid:61:AA:90:72:0A:BC:38:A3:EE:E2:A2:55:8A:C1:C0:63:76:26:67:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ec0:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f6:e9:79:85:66:a8:8b:2e:9e:85:68:30:53:02:de:7a:3a:
         33:ca:60:4d:36:1e:8d:6a:2e:a7:38:4c:c0:16:db:4b:4b:34:
         80:b8:fb:88:76:4f:23:6b:86:6f:95:62:84:47:32:6c:f8:dd:
         91:61:a2:58:78:91:2d:48:39:d0:90:dc:c4:90:d6:f0:9e:94:
         5a:bf:76:df:34:b6:c1:ba:b3:bc:15:23:6a:e6:27:30:4a:87:
         1a:3d:6e:02:d5:bb:62:3b:c1:aa:86:2d:81:93:1d:aa:2a:e6:
         92:fe:13:29:b2:4f:dc:e8:fc:69:d7:9b:73:0d:d3:f1:2e:13:
         10:7b:9a:d2:a5:1b:4b:db:d3:d9:2d:dd:6b:13:fa:9f:26:4b:
         72:0a:04:55:7e:6a:77:86:87:16:9b:b2:7b:8d:69:28:90:55:
         a9:3e:5d:ca:56:52:6f:bf:36:01:2f:cf:1c:33:29:7f:a0:af:
         23:91:97:a5:39:8a:f9:e9:65:0b:af:51:be:ee:be:ec:24:d5:
         d8:7d:b0:12:8a:7c:ac:c8:0e:19:b4:93:c3:7b:63:7b:bd:2b:
         b9:f9:d7:4d:25:2a:8f:47:e8:1a:60:73:a7:f9:2c:6d:f4:e3:
         cf:a0:74:2d:82:bd:df:04:56:7b:eb:e0:4d:27:46:57:28:cd:
         7e:74:2a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:50:02 2025 by rpki-client