Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/fdbdd7b0-38cf-362a-b537-168777848d4d.roa
File:                     fdbdd7b0-38cf-362a-b537-168777848d4d.roa (raw, json)
Hash identifier:          0e9aOkR7x7ij+Wc17iqOip+GL6tW+3wKx/hiS5St2Gc=
Subject key identifier:   56:5E:C7:17:1D:F7:EA:3D:6A:0E:D0:B1:C1:1B:20:33:73:EB:75:58
Certificate issuer:       /CN=6e005a51-3e55-4f51-b393-eb9918255f3f
Certificate serial:       010D0C9F4328584B821CC6076C638E81A2EA1E80
Authority key identifier: 7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/fdbdd7b0-38cf-362a-b537-168777848d4d.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     26968
IP address blocks:        2602:ff93:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:c6:07:6c:63:8e:81:a2:ea:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e005a51-3e55-4f51-b393-eb9918255f3f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=85d7dc96-bc16-4b85-8683-fe13dcfa3866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a5:ea:e9:0a:ff:5b:96:6a:03:64:ee:83:71:
                    9a:45:f7:dd:a8:d3:1c:97:43:89:ae:71:00:80:d4:
                    78:82:45:f6:14:8d:e0:b3:95:fb:c2:31:74:45:df:
                    e2:9b:36:32:7e:c7:1f:02:56:d9:ea:8f:4f:e5:31:
                    64:2f:e3:2d:12:b2:1f:08:77:8d:1c:be:ab:89:7a:
                    aa:a7:6c:07:bd:1c:ab:76:fb:fc:18:76:b9:1e:cd:
                    c1:ac:5d:9d:ec:9a:98:38:12:30:dd:10:6d:5c:3e:
                    c1:55:46:c9:3c:e1:1b:0d:a5:a4:99:36:e0:4c:5c:
                    0f:24:ec:7c:9d:f3:37:d2:ba:d5:55:d5:0b:9a:73:
                    95:55:20:d9:a7:73:be:4b:7e:f7:b1:dc:bb:d5:80:
                    b0:cf:b9:cb:50:c3:27:7d:31:e0:a2:f2:98:8f:1d:
                    15:f5:a8:d3:f5:b6:ed:52:d1:13:d7:09:e6:90:19:
                    c7:d2:54:3f:4d:d2:c4:75:23:d6:1b:15:81:8e:31:
                    63:5e:60:06:90:db:f8:98:88:79:7b:2c:04:51:e2:
                    45:ad:42:b1:d4:94:1f:01:8a:32:ae:ee:ef:5d:c5:
                    f7:f6:27:07:91:a3:1b:dc:fb:75:9f:63:94:f5:ec:
                    8b:14:37:56:34:bb:94:1c:d8:c1:5a:6a:f8:9a:10:
                    21:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5E:C7:17:1D:F7:EA:3D:6A:0E:D0:B1:C1:1B:20:33:73:EB:75:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/fdbdd7b0-38cf-362a-b537-168777848d4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f/6e005a51-3e55-4f51-b393-eb9918255f3f.crl

            X509v3 Authority Key Identifier:
                keyid:7F:A5:E1:54:6C:A5:D2:73:F1:13:35:41:34:9E:3D:AE:0F:EC:6B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e005a51-3e55-4f51-b393-eb9918255f3f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff93:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:1f:ca:83:56:17:fd:02:67:7d:5a:f3:81:2e:47:bd:a4:58:
         33:5c:fb:56:86:11:ea:d0:c7:15:24:ed:54:cf:98:8d:cd:05:
         4a:3e:7f:03:24:d4:8b:d4:e0:aa:6d:1a:7d:ee:de:ad:85:d8:
         5a:5a:29:4a:00:1b:da:15:94:53:f4:3b:42:2c:3f:06:64:22:
         2e:c7:01:4e:6e:a0:2a:1c:3b:9d:4c:57:48:f1:00:fc:0b:7d:
         55:3b:c5:c3:82:eb:7c:87:0d:c1:66:53:26:62:9a:e1:fc:48:
         84:4d:ff:a3:44:12:d4:8f:ef:ce:00:fe:ff:bf:82:98:5b:4e:
         73:53:e2:4b:91:6a:1c:d4:4c:e0:2c:45:1d:b0:4c:ed:92:fe:
         18:8d:8d:e4:f4:10:19:86:1b:03:9e:a2:7a:6e:33:4b:1d:b5:
         17:ed:93:2f:fe:89:9c:21:ab:1a:4c:89:51:3a:28:d2:1b:72:
         6f:13:a2:b4:ae:00:28:4c:62:8e:f9:0e:93:44:3a:32:15:66:
         4c:5e:ac:62:a8:d0:ba:b1:2e:ae:66:30:3b:0f:a6:a6:69:53:
         6e:f5:4a:a4:57:24:dc:09:39:53:e9:cb:cc:6b:7f:c6:d9:0a:
         d9:7c:8c:0c:c4:bf:12:32:17:b1:9b:68:bb:5e:2d:5e:f4:ba:
         ab:47:fa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:36:30 2025 by rpki-client