Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/26370e97-2f9b-3566-85fc-c9a033ebc52c.roa
File:                     26370e97-2f9b-3566-85fc-c9a033ebc52c.roa (raw, json)
Hash identifier:          Ry0XFyaHXNeThs8jiBoy0Xt1tTbJTdfDpSUf9E6JxbI=
Subject key identifier:   0B:5D:4C:DA:78:23:4E:36:06:9F:7E:52:FE:5E:5B:AC:56:F4:41:1E
Certificate issuer:       /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial:       010D0C9F4328584B0A1164C44E0086B5AE90A340
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/26370e97-2f9b-3566-85fc-c9a033ebc52c.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     19905
IP address blocks:        2600:2600::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:64:c4:4e:00:86:b5:ae:90:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=1d05d73f-05d1-459b-b86f-9d6fc727ab09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:92:8d:0f:7f:4b:29:9d:a3:7c:2e:fb:5f:
                    5b:71:f1:a2:f3:34:02:b7:c4:6f:02:c3:b8:6e:3f:
                    2c:46:ce:69:d6:be:e6:c5:33:bc:c7:58:99:e3:4a:
                    65:8b:ca:87:b2:d4:29:ce:a3:e6:2e:20:2e:e0:66:
                    b3:bb:26:e5:83:77:63:1d:89:b0:86:b5:9e:c1:2b:
                    b8:b9:8a:43:ad:bf:1b:80:fc:17:0c:cb:92:33:03:
                    9d:3b:3c:d5:3a:76:0a:14:87:68:e9:9f:74:0c:a9:
                    46:5f:8d:3f:a1:6e:13:5d:a3:65:83:1c:b1:89:b8:
                    eb:c5:89:3b:25:52:8a:5f:15:3b:75:b2:de:32:2a:
                    fe:f9:c2:a1:85:df:e8:da:fe:0b:85:22:13:28:ab:
                    a3:33:d0:ab:5a:0a:cd:1c:ec:7c:1f:47:f3:89:bc:
                    0e:7d:71:4e:75:f0:b1:2a:e5:21:06:b9:71:95:92:
                    c5:e1:8e:79:03:ef:6d:80:b9:07:7f:16:a7:b0:69:
                    e7:26:78:a9:4c:5c:40:13:47:dc:a1:ad:0d:6d:0c:
                    bf:3c:cb:1a:18:12:1b:68:df:4f:8c:1c:5c:1d:8a:
                    92:43:4b:cd:07:b5:ca:0f:4b:36:32:5e:00:a8:da:
                    da:02:88:49:fb:62:e8:74:16:f9:9c:7d:10:41:53:
                    b6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5D:4C:DA:78:23:4E:36:06:9F:7E:52:FE:5E:5B:AC:56:F4:41:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/26370e97-2f9b-3566-85fc-c9a033ebc52c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl

            X509v3 Authority Key Identifier:
                keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:2600::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:44:d6:47:60:27:f4:6f:d3:5f:05:9c:b4:22:d8:9e:b6:69:
         f0:93:1e:e9:74:c0:ef:69:e7:bc:59:a7:d6:00:a4:fb:a8:6a:
         79:65:2b:70:76:fa:ae:ff:24:84:dd:05:97:64:e4:82:75:2b:
         e4:d3:12:12:09:37:4f:59:fe:7d:63:3f:fd:a2:d1:8f:1d:5d:
         57:e7:65:25:9d:b3:a8:29:07:0a:6b:df:e0:38:7f:f6:d2:22:
         35:2e:d0:cb:d8:e0:98:b3:de:95:05:44:d5:b2:c9:27:e9:42:
         e1:5c:61:94:cd:a9:1b:b1:cc:c4:c1:c9:24:99:3e:c4:d9:1f:
         5e:20:5f:fd:67:ef:37:3c:90:2e:4b:13:20:89:48:b9:04:08:
         65:68:a1:52:2f:d8:0b:ee:81:8f:18:3d:f3:65:85:fa:b4:90:
         2b:ff:d2:1f:9a:67:a3:de:eb:26:3b:24:05:90:f8:c8:a4:f3:
         76:f1:51:8d:88:25:ba:11:dd:f0:20:fe:1a:75:76:f6:1e:37:
         bc:15:ef:02:15:98:50:7c:17:c5:e6:41:09:14:02:ad:84:db:
         13:dc:ea:42:ff:bc:96:bb:c4:0c:9d:93:87:e4:47:4b:9e:48:
         ed:6d:21:c4:be:a8:03:f3:e5:34:fd:29:73:30:44:24:49:91:
         0f:e8:c3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:59:05 2025 by rpki-client