Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e49b3a8d-a3cc-3d6d-a82f-e67e47521dae.roa
File:                     e49b3a8d-a3cc-3d6d-a82f-e67e47521dae.roa (raw, json)
Hash identifier:          OlvrreyJoM4kp0obmm58qWbtGLdppI6kxAj5tL8xQdw=
Subject key identifier:   60:9A:06:18:01:5C:93:DD:FB:19:C3:C2:1F:FA:C4:A3:B2:F9:99:76
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584ADECBC77D0CF8B15F82B33B80
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e49b3a8d-a3cc-3d6d-a82f-e67e47521dae.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     16839
IP address blocks:        2606:3600:5510::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:c7:7d:0c:f8:b1:5f:82:b3:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=c8947cd6-9eed-4989-88e7-7bf516f5a1d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e2:9d:6c:c2:40:f7:59:e2:c0:c6:2c:d1:ac:
                    0d:06:16:5d:54:5c:a6:75:a8:c0:41:b7:71:1e:8b:
                    5d:cb:82:6f:48:53:cd:f1:b1:81:11:73:7b:9d:bf:
                    82:ed:ce:03:c3:af:a5:d8:1b:18:78:cb:04:8c:9d:
                    40:94:32:f0:f9:5b:e7:7c:0f:27:c6:24:f5:78:49:
                    4a:bd:b9:94:8e:d9:45:80:9b:24:fa:ca:b8:b3:ff:
                    96:66:dc:a9:a1:16:b8:d0:88:2c:2c:78:43:4e:89:
                    9f:a9:ca:d9:3d:20:24:e9:97:90:d4:1c:7b:36:58:
                    0c:f7:d3:80:f0:54:04:21:3b:d9:22:85:7e:2e:46:
                    2f:6f:c2:91:2c:f4:7a:8c:bb:4b:e8:43:bd:94:cf:
                    42:83:16:53:0b:bf:8e:c8:63:55:f6:de:0b:c6:de:
                    d8:6f:5c:19:05:18:2f:17:e5:90:a0:31:fc:c8:bc:
                    36:43:3d:64:a4:dc:53:21:61:e6:10:fe:dd:e8:2c:
                    a7:60:0a:51:47:f1:68:f1:b4:ce:cc:8e:33:4b:ae:
                    64:d6:d2:dd:79:40:47:32:2c:c8:bc:7b:df:00:14:
                    10:d5:ed:54:13:f4:b0:c2:09:0a:6f:5e:72:d5:f2:
                    a4:50:06:96:ec:3c:3d:3e:d2:40:37:56:c6:78:39:
                    26:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9A:06:18:01:5C:93:DD:FB:19:C3:C2:1F:FA:C4:A3:B2:F9:99:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e49b3a8d-a3cc-3d6d-a82f-e67e47521dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:5510::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ad:77:44:5b:6b:65:d1:43:60:ab:98:9f:c3:e0:9a:fd:71:
         8b:81:6b:46:c2:86:56:62:e1:2e:3c:05:ca:1c:f8:9b:5d:91:
         d0:2a:c3:9d:57:39:e8:8a:c1:c6:96:90:33:d2:78:4c:4b:04:
         ed:e0:d0:86:58:83:07:4a:fe:f5:4d:ca:1e:d1:61:ad:b5:d6:
         24:01:52:54:44:78:b6:89:28:27:84:67:16:8b:3c:4f:eb:ef:
         b2:86:36:8e:e8:54:7f:8b:c5:0a:35:85:06:57:cb:55:83:2a:
         d9:72:6d:a4:9a:62:f2:2b:2a:66:47:40:6b:7e:8d:da:25:63:
         f3:33:f6:06:e3:e2:ca:d8:41:9e:bf:d9:2d:64:fc:0a:b9:9b:
         4b:5b:a7:f1:8a:c6:e3:9a:d6:1f:46:35:bf:ad:27:e3:37:99:
         97:04:b3:fb:43:f2:ce:99:44:ed:15:8b:8d:7d:84:a0:4b:60:
         08:d8:65:7b:db:df:93:2a:67:34:ee:b9:0e:c9:37:c6:49:c7:
         86:19:22:7a:4b:1c:fb:af:d7:58:7f:c0:7a:ce:9e:3a:14:69:
         8c:df:3a:ae:84:81:8c:e8:5d:fe:16:cf:94:54:8c:73:d4:3b:
         f3:31:91:54:0f:90:6f:bb:ac:34:26:07:97:8a:9d:29:fa:d4:
         7f:c0:23:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:52:07 2025 by rpki-client