Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/6463243b-579f-3c18-97cf-37709202e4b6.roa
File:                     6463243b-579f-3c18-97cf-37709202e4b6.roa (raw, json)
Hash identifier:          qOipwQIYBRjnSvDeFkyO7Num7KWeDjO5Le8NqR5voDA=
Subject key identifier:   E2:DD:F4:05:A7:A6:17:08:E9:F1:64:EF:D2:0A:1F:52:6E:7B:64:6E
Certificate issuer:       /CN=e085fa70-312c-4786-b587-bdb5fc87c36e
Certificate serial:       010D0C9F4328584B95A7952CD7D6F9B0D1613FC0
Authority key identifier: FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/6463243b-579f-3c18-97cf-37709202e4b6.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     32098
IP address blocks:        2604:d600::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:95:2c:d7:d6:f9:b0:d1:61:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e085fa70-312c-4786-b587-bdb5fc87c36e
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=445a3063-b10e-4b90-a1bc-c68180ee2424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:82:23:58:26:9c:16:9b:c7:a5:1d:6c:fd:
                    bb:77:72:b1:4f:cc:25:1a:49:0a:c8:b0:1c:47:92:
                    de:7f:17:57:74:37:2e:ab:52:a4:db:1b:0e:86:d1:
                    7b:19:59:8c:cb:05:77:0c:89:78:af:72:4a:5a:34:
                    7e:ce:24:8a:b3:61:a2:1b:c9:59:6a:9c:6e:cc:c1:
                    5c:8b:41:82:5d:f0:59:f1:d9:93:71:b6:29:e7:45:
                    67:b7:9f:e2:f2:00:90:ae:88:89:41:43:f0:53:56:
                    94:73:bb:53:31:b4:4c:44:ea:1d:32:d8:73:1f:91:
                    1a:27:59:0e:bf:df:6c:1c:4a:34:82:f8:79:1a:66:
                    85:19:e3:a4:fc:07:c3:84:45:da:54:b7:41:cc:e3:
                    3f:27:f1:79:1e:4f:9b:d3:dc:a2:e7:a4:f6:af:1d:
                    25:ed:7b:93:71:91:74:18:d7:29:88:91:a6:a9:55:
                    b0:ce:e4:7d:09:00:d1:8d:60:b4:6d:3e:3c:80:3b:
                    86:d2:ae:f9:70:f5:74:19:11:ed:9a:eb:92:2e:cc:
                    16:a0:c8:38:4e:01:68:a7:be:34:25:aa:6c:8e:49:
                    f9:2e:d7:a8:fe:f3:ec:85:27:91:b6:07:6d:ae:3f:
                    ee:7b:85:46:5d:7d:de:f7:96:5d:a9:97:56:a1:18:
                    93:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DD:F4:05:A7:A6:17:08:E9:F1:64:EF:D2:0A:1F:52:6E:7B:64:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/6463243b-579f-3c18-97cf-37709202e4b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl

            X509v3 Authority Key Identifier:
                keyid:FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:d600::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:ef:ca:0e:69:5e:4f:f2:a9:c8:93:0c:7d:3a:36:ed:89:21:
         6a:1b:7c:6b:45:58:ec:0c:32:3b:b2:03:af:e9:8b:06:4f:59:
         83:fb:23:23:14:45:13:43:c0:10:52:6b:35:2a:72:67:d9:8d:
         0a:d7:0b:33:88:d8:4a:0b:c2:58:b6:b3:3b:dd:8b:9d:b5:9b:
         80:73:1b:9c:ff:66:e4:13:02:bd:95:06:71:0d:4f:c0:3d:22:
         0c:0c:da:7a:5a:f4:82:22:51:0d:6f:be:03:45:55:1e:81:af:
         67:6c:3a:3d:67:16:67:21:9e:c0:ba:a0:ac:44:05:82:fc:e1:
         0f:75:63:7f:fa:65:9f:49:b7:8a:96:e0:62:57:91:88:af:73:
         5e:2b:c4:3a:08:d1:aa:b5:9b:f9:39:08:b0:7e:52:e4:29:2b:
         40:4f:16:e9:44:d5:d1:04:09:66:4d:bf:b6:39:5b:97:f2:2f:
         58:b3:cc:a8:cf:d0:ec:b6:6b:79:67:33:39:b8:70:13:ff:ae:
         cc:fe:e2:fc:25:27:dc:f5:86:c5:76:5f:fb:1b:f0:12:f5:9e:
         23:7b:91:78:f2:44:78:8c:41:71:28:f6:b2:94:5d:c5:3e:f9:
         99:e5:a8:c4:c8:64:7e:a4:d2:2e:53:38:0a:8d:15:8e:5a:2d:
         3b:10:2d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:03:49 2025 by rpki-client