Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/d4c989a4-d6bb-3f47-896e-21fc5f286263.roa
File:                     d4c989a4-d6bb-3f47-896e-21fc5f286263.roa (raw, json)
Hash identifier:          nv3SEbxflYcfIhbLLHqu2ZUlxzSrhnkPjmhNxNxYV3Q=
Subject key identifier:   97:76:F8:47:EE:47:98:9C:3E:6F:F8:B3:CE:C3:13:E9:70:12:BC:85
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584B59A1CC97552085E6569E4680
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/d4c989a4-d6bb-3f47-896e-21fc5f286263.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2605:b040:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:cc:97:55:20:85:e6:56:9e:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=babf50bf-0b11-4fee-a330-1b50a644710a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:eb:3a:0b:05:40:d5:37:1f:67:b3:a0:9b:
                    8a:c3:99:fa:91:6e:1d:49:44:db:33:16:82:62:93:
                    97:26:2e:97:8f:f6:a6:c9:f5:18:c9:eb:85:4d:48:
                    9e:c8:03:08:7b:10:cf:bf:aa:cf:14:0b:91:81:ec:
                    24:a4:46:f1:83:9d:6c:32:32:d0:a3:ce:97:d5:cb:
                    9e:c5:34:13:9d:fc:f6:35:42:74:03:34:25:47:84:
                    b9:fe:c9:dc:3a:9e:95:f9:18:90:0d:6a:e0:83:55:
                    e7:e4:85:9c:1b:5f:03:de:91:02:05:e0:4e:ea:cb:
                    0d:c8:e6:eb:fd:f7:fe:9d:4c:af:db:fa:a6:4b:c6:
                    b4:a5:ec:93:86:f0:20:df:89:38:3e:89:6a:63:dc:
                    07:34:f5:c1:38:db:55:ab:57:aa:66:f8:da:96:1b:
                    b6:70:e2:52:31:b5:eb:b5:48:10:f1:f6:75:bb:ef:
                    80:2d:06:7c:a8:eb:e8:51:11:27:7e:bf:78:6d:ac:
                    0b:e8:0b:2a:e5:13:8e:05:d4:f8:e8:71:9e:fb:81:
                    2a:fd:1e:ff:c7:13:e8:5e:86:41:01:0b:87:2f:ce:
                    b9:14:1b:80:c1:8a:bd:df:35:62:45:02:91:f6:6e:
                    9e:54:93:ee:0e:55:7d:9b:e5:15:50:4a:d3:6a:97:
                    06:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:76:F8:47:EE:47:98:9C:3E:6F:F8:B3:CE:C3:13:E9:70:12:BC:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/d4c989a4-d6bb-3f47-896e-21fc5f286263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b040:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:89:9e:b6:6e:e9:a6:cc:1b:64:33:86:47:55:dd:de:4b:b9:
         57:04:c9:ef:c4:29:de:94:48:d0:49:cf:df:c6:94:95:24:0a:
         3b:5f:20:2a:0d:50:8d:a4:68:8a:c1:c3:91:96:3a:2c:26:5b:
         93:a3:30:b0:45:48:5b:c1:d2:93:4e:97:cc:ba:5d:1c:ec:9b:
         ee:b5:cc:64:97:c5:e3:de:e2:0e:8b:a8:a4:f4:23:6b:89:7f:
         3a:ec:e1:27:1f:54:ca:37:24:da:b8:7e:a6:e6:07:9a:7d:ce:
         c2:ab:3f:a6:12:03:5b:e0:78:6e:89:5f:cf:a7:51:7f:76:55:
         42:dd:13:2a:33:cc:ae:8e:60:70:31:8e:f2:8c:65:b6:de:f5:
         e5:0a:ab:71:36:e1:c1:de:0f:ab:76:58:b1:f0:95:e1:b2:c4:
         c8:96:cb:77:4f:09:fa:bc:6e:ec:8c:22:0c:16:bc:c5:d9:09:
         1b:04:b6:d4:b2:40:4a:5a:8f:8f:14:6e:08:c9:c1:b9:56:97:
         bd:bd:f4:7d:17:d0:1b:e7:b0:30:d6:71:e8:9a:5d:aa:26:f8:
         ed:89:32:f7:c0:79:6f:99:26:9b:05:06:1f:60:86:fe:2c:a8:
         25:09:3a:c6:27:1d:95:0f:b4:df:15:31:55:59:ca:ab:6d:a5:
         e2:61:88:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:24:14 2025 by rpki-client