Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/f5e2d1f0-6b5c-3f85-b264-42f4b792d76a.roa
File:                     f5e2d1f0-6b5c-3f85-b264-42f4b792d76a.roa (raw, json)
Hash identifier:          ogvrWZnKDOwFbH6nGD0qW00u0DgOK2TxoYdQGVnipeM=
Subject key identifier:   BD:1D:D6:43:1B:60:E9:C2:6E:16:CC:79:49:47:1C:D3:F0:B2:B7:17
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F4328584AFC1BEF3DEB90EF7580244B00
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/f5e2d1f0-6b5c-3f85-b264-42f4b792d76a.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     400214
IP address blocks:        2606:9c40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:ef:3d:eb:90:ef:75:80:24:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=af697f1b-7f4c-49e0-ad1a-ff02cda60283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:60:0a:d7:82:2b:41:c4:5a:73:79:05:5f:10:
                    aa:a5:4c:72:fe:b0:08:7d:9b:c7:5c:2d:a8:06:dc:
                    18:8f:fb:14:f2:09:c2:a0:49:91:3d:b1:f9:5d:f9:
                    33:6b:7b:40:ca:a5:f2:d3:16:b7:13:55:a3:14:6d:
                    7e:7d:3c:4d:00:10:37:ef:9e:fc:bb:ef:b2:06:6c:
                    b7:37:79:87:10:de:f8:74:7c:fd:b3:92:f0:35:15:
                    5b:f3:91:ca:5c:cf:10:27:c4:09:74:a6:80:27:7f:
                    e4:81:f9:5d:83:8c:8a:22:42:bf:1d:d5:be:8b:ad:
                    b9:3d:fc:76:16:7e:49:05:04:25:15:7f:35:c9:bd:
                    97:c7:b3:c6:fa:23:ee:c4:8e:50:0e:27:f2:48:0b:
                    09:5d:72:de:23:ac:55:51:e8:89:dc:54:9f:a6:c7:
                    aa:b4:71:6a:d0:12:9d:d0:c4:81:ea:92:3a:e8:19:
                    42:a4:e4:d0:4a:6b:dd:ae:14:0b:51:3a:24:1a:0c:
                    f8:4a:e7:4d:38:29:03:38:b8:fb:12:bd:e0:94:54:
                    79:df:4c:f7:b1:41:8a:61:da:f6:4f:08:cb:95:3f:
                    11:d6:f8:6e:39:b6:97:ca:cf:1a:d1:94:bb:4b:d9:
                    9e:17:6e:92:4f:6b:57:d8:37:5b:1b:5c:6f:70:06:
                    9b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1D:D6:43:1B:60:E9:C2:6E:16:CC:79:49:47:1C:D3:F0:B2:B7:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/f5e2d1f0-6b5c-3f85-b264-42f4b792d76a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:a9:c5:59:8c:e1:f8:fc:7f:53:48:15:bb:55:ce:75:c1:22:
         b1:f9:ad:8c:5b:4d:41:37:6d:e7:ed:55:53:36:10:76:af:23:
         a3:07:1e:37:4c:ef:f6:86:39:5b:71:90:d6:be:ea:0f:72:56:
         31:49:5a:20:19:6c:e5:6d:34:b9:e4:33:7e:35:d1:bf:c1:44:
         a7:92:52:3d:71:43:05:b0:1f:3a:34:6c:94:e0:9f:52:50:ce:
         61:ac:7e:99:4e:67:d2:80:6f:7c:88:fc:25:c4:91:0c:79:0d:
         43:63:c6:c7:58:1a:50:9a:73:09:70:66:e7:59:9c:9a:49:63:
         5a:68:75:fa:a6:b8:aa:a2:1e:59:41:73:21:d1:be:fb:46:04:
         1a:8c:3e:b6:28:05:fa:5d:3b:1b:36:65:10:1a:01:be:85:d0:
         60:99:d0:e7:5e:8b:2b:0b:92:11:f7:17:b9:24:e6:a5:7d:24:
         1a:6e:fa:4e:af:91:af:93:40:3e:32:c9:5a:43:1f:a1:18:87:
         87:cd:77:c9:2b:13:0e:db:ee:c7:e3:91:1f:f9:83:46:36:fb:
         56:26:ed:ea:f9:d5:7f:17:30:47:75:6c:7b:22:1a:b4:c4:31:
         f7:b7:ea:c3:31:76:8f:38:b7:06:bb:ed:07:3e:d3:b9:41:f5:
         11:b4:a3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 08:38:20 2025 by rpki-client