Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06c47918-cb78-32d6-bbf3-e03bb8fba698.roa
File:                     06c47918-cb78-32d6-bbf3-e03bb8fba698.roa (raw, json)
Hash identifier:          zUbDn9e0C60wkiWGt08IoD5UJmrW4ZqM89FCdZhNVic=
Subject key identifier:   71:38:33:44:78:11:C5:F6:C7:87:19:F8:10:D2:8D:7C:FB:36:E6:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD063BAB4CD1243CEF9A60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06c47918-cb78-32d6-bbf3-e03bb8fba698.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     7016
IP address blocks:        2601:98a:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:06:3b:ab:4c:d1:24:3c:ef:9a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=9f7bb0d2-d013-4804-b0fe-c92f4ae97ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:64:98:23:e8:ea:41:9c:51:80:a3:16:0b:f3:
                    d5:b6:d0:63:54:77:a6:9b:62:95:c3:cb:39:78:34:
                    05:74:a3:16:a2:0c:16:83:21:05:1d:ec:e1:9d:46:
                    d3:4c:8a:9e:e6:5c:7e:bf:8b:8d:36:69:94:5c:9c:
                    07:19:f2:45:43:e5:62:46:80:3e:dd:5e:20:b1:f1:
                    f3:6f:81:3d:1f:a1:46:70:e2:67:e9:c2:05:15:69:
                    0f:bc:73:f6:48:b1:a6:12:e6:58:83:99:d5:f9:7e:
                    59:d0:84:d1:04:f0:35:9b:7f:f2:aa:4b:75:83:e9:
                    f5:98:37:db:a6:84:41:55:58:e3:19:2f:ff:75:05:
                    51:d7:07:b1:b2:08:08:91:f2:53:ac:ac:a0:a7:f2:
                    58:75:b9:6e:da:c0:3a:03:e6:16:7b:d9:e2:9e:37:
                    e7:1c:67:e5:cc:1e:64:ac:2c:27:e6:bd:a0:d5:8f:
                    17:84:cf:a1:96:ae:42:42:49:32:c3:ea:0e:6e:2c:
                    f4:d3:68:85:1f:10:76:5a:25:9f:6f:ad:65:04:29:
                    2b:d3:bf:7a:ad:e2:40:0e:30:c5:f1:1d:40:3d:c6:
                    45:83:dc:14:c1:f2:2d:e2:af:dd:73:35:f0:97:4b:
                    e0:3a:75:4a:11:58:f3:e3:7d:ed:6e:3d:1f:9c:9a:
                    95:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:38:33:44:78:11:C5:F6:C7:87:19:F8:10:D2:8D:7C:FB:36:E6:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06c47918-cb78-32d6-bbf3-e03bb8fba698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:98a:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:90:cf:45:75:d1:c3:11:7c:0d:22:2f:c5:e1:c3:d3:86:54:
         22:fd:15:32:6d:71:4f:48:8c:de:06:90:c2:6b:cf:31:d0:43:
         72:25:af:b7:e1:46:5c:2d:5f:86:64:d8:ed:39:48:5f:40:57:
         35:fb:f9:e0:14:2b:61:8d:9a:fb:73:72:b3:05:0e:9d:9a:bb:
         9b:3a:27:40:d1:c1:09:67:78:64:04:be:3d:f7:31:e5:d6:79:
         64:d8:ac:4a:0e:df:be:0a:dd:ba:50:64:43:e8:a7:da:0e:51:
         8b:02:8b:92:7a:e1:26:f8:cb:40:73:fd:ae:1c:af:ed:ad:15:
         bb:61:d1:a7:3e:1f:26:b0:4a:99:f0:e0:30:67:7b:bb:f8:cb:
         b0:e6:32:82:46:4a:43:84:de:8e:3b:24:c3:11:3d:8c:95:5d:
         a7:41:e0:47:a3:28:b9:5e:6d:64:12:9c:1d:ba:5d:1f:6f:ca:
         33:6c:9e:16:f5:fd:f7:3b:09:2f:60:72:d5:5a:7a:3c:09:1e:
         dd:ec:ed:46:eb:75:4e:87:67:02:1c:31:2c:3d:68:e0:3e:b3:
         e7:60:cb:c3:88:ae:03:a7:5d:bc:00:c0:fe:04:bd:10:10:61:
         e5:c2:56:67:66:3f:b9:cc:38:23:f2:e8:b5:71:b5:aa:58:41:
         f0:20:80:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:08:30 2025 by rpki-client