Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/c813c4e2-b287-3a77-9d41-a2aa6ae2dc05.roa
File:                     c813c4e2-b287-3a77-9d41-a2aa6ae2dc05.roa (raw, json)
Hash identifier:          tlRkad+mgck01Axu5wpS/6IYNmEaguUxGvW8LA1v72k=
Subject key identifier:   34:BC:54:FE:C4:EB:CB:78:40:67:76:2B:EE:4B:DC:D5:53:7D:5F:7C
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584B398716D2BEA772A00532CC40
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/c813c4e2-b287-3a77-9d41-a2aa6ae2dc05.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        2605:b040:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:16:d2:be:a7:72:a0:05:32:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=b4379339-3290-40ba-8378-b8908e37a9a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7d:05:56:ad:9f:74:90:e6:09:9a:a4:69:ba:
                    9c:16:36:2c:58:6a:e5:04:5a:35:0b:c9:bf:ed:fd:
                    c8:27:b3:3f:0f:3b:7b:65:51:7c:ba:42:10:c5:35:
                    5a:83:ce:ca:fa:62:83:7a:57:be:14:92:f9:2b:50:
                    9a:6a:0f:f1:12:eb:d0:3f:f7:6e:08:1c:dd:cf:68:
                    60:00:46:26:48:b0:e6:b0:67:d8:9f:b4:e3:45:16:
                    fe:c6:1e:33:a8:d9:dd:f7:1b:1b:1a:d1:28:47:58:
                    40:9f:4e:04:ee:5a:7f:b1:3d:0b:4c:eb:87:aa:91:
                    63:65:6a:7a:af:80:a2:de:15:9c:6c:55:bf:e2:b7:
                    f6:24:2a:1e:37:56:9f:fe:2e:ce:39:1d:f6:7c:c4:
                    71:d5:f7:a4:f7:84:16:9c:7f:4b:0a:65:0e:72:b5:
                    20:67:06:be:ae:c6:3d:8d:c9:43:9a:8a:2b:dc:3c:
                    7a:71:08:32:f0:a2:dc:4f:a3:92:25:45:a3:fd:a2:
                    fb:9e:4e:ce:e0:46:fc:c3:62:b5:da:ea:f7:45:99:
                    ef:3b:20:a1:2a:fb:3f:b8:23:c4:91:6a:c3:d5:06:
                    ba:02:cc:0f:ee:d5:69:54:b0:67:c0:15:ca:c7:d3:
                    77:c9:ec:78:43:7f:b8:91:49:88:7e:59:b3:02:e9:
                    ae:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BC:54:FE:C4:EB:CB:78:40:67:76:2B:EE:4B:DC:D5:53:7D:5F:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/c813c4e2-b287-3a77-9d41-a2aa6ae2dc05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b040:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:6a:0b:23:e2:d4:55:ab:5c:c1:f7:59:7d:6c:47:ec:2c:8c:
         5b:d3:0e:c4:6a:9c:c6:5a:b7:a8:06:86:ff:b4:35:43:cd:aa:
         1c:68:f7:6b:4e:d9:70:8d:fd:0a:38:14:4f:91:24:af:07:e2:
         17:ef:f3:2b:6f:dc:95:bf:49:53:a8:d4:fd:28:a8:e7:0e:f7:
         7e:85:77:e0:dc:eb:85:4b:ad:4e:22:dc:57:24:d0:4b:33:29:
         63:d5:ae:70:4c:85:60:2c:03:47:ce:da:66:de:88:35:63:98:
         6c:a2:86:e7:44:0f:1b:f8:36:56:10:55:6d:09:d1:d0:89:4b:
         0d:d7:38:96:7c:d7:af:15:a6:dc:66:1f:e1:12:6e:52:1a:95:
         97:92:c0:cd:9d:f7:1c:7c:64:fd:df:82:59:bb:c9:fb:ba:76:
         66:33:2f:66:4f:8f:9b:b9:16:b6:51:13:58:84:ee:92:b8:7e:
         df:bc:d2:1b:c3:75:61:3b:52:8b:a9:38:03:c6:8a:a3:f1:bc:
         5c:5d:0f:cc:d2:3d:38:d1:bc:5c:25:c0:ce:b4:dc:02:c4:bf:
         f8:05:74:fc:73:0b:4b:4a:88:14:65:89:4f:27:06:e3:1c:ec:
         cc:c8:7b:9f:bf:00:d2:5e:7e:b6:8c:2a:2e:00:d7:9b:62:37:
         85:ec:34:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:33:51 2025 by rpki-client