Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa
File:                     c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa (raw, json)
Hash identifier:          grjgA6gTfnD5131N0ADb8+IxF+jJUf+mzaF+Mwc6uyg=
Subject key identifier:   E2:81:6B:96:10:01:D3:0A:C1:5C:B1:9D:89:D8:16:0F:7E:09:0A:04
Certificate issuer:       /CN=435c5779-0e0b-4ca5-9213-6edddad9bc55
Certificate serial:       010D0C9F4328584B48E1BF2AA2B7D760C4B38E40
Authority key identifier: DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     54665
IP address blocks:        2604:4a80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:bf:2a:a2:b7:d7:60:c4:b3:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435c5779-0e0b-4ca5-9213-6edddad9bc55
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=c26cf093-8108-4e2c-8f19-8362096d754a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:19:6e:4d:42:1f:2f:45:6b:1a:9a:e3:6e:50:
                    04:1a:0a:f7:a2:67:b2:47:09:4c:03:36:c2:cb:b0:
                    df:f8:22:55:54:5e:ac:b5:02:6a:b3:8e:e8:29:36:
                    74:41:38:39:74:7d:f2:94:f9:e9:7f:7c:cd:9d:66:
                    45:ff:16:ee:ff:19:60:26:71:4b:bc:ce:04:ca:2c:
                    79:84:aa:f5:47:4d:bc:8b:aa:36:e8:0e:23:d5:d2:
                    32:ab:f5:f2:ee:74:d6:11:bd:08:31:d7:59:a2:e3:
                    85:b0:26:d4:21:c9:2c:78:17:a7:80:eb:5b:c0:14:
                    24:6b:60:4e:29:9c:93:c1:59:ab:0a:32:85:4f:e4:
                    7c:ad:cf:fe:df:84:db:c5:85:4f:0d:9d:28:ce:67:
                    93:36:34:d5:cd:84:da:d5:07:48:f8:86:93:6d:01:
                    06:bf:2c:64:4b:1b:a2:41:9d:72:0c:3a:9f:1d:ab:
                    c8:fd:e0:46:e5:2f:e0:9b:74:01:4d:dc:ca:7b:be:
                    50:7f:26:7c:b9:25:a9:88:a0:45:fa:b2:91:c2:2c:
                    fc:eb:cc:e9:73:d5:14:b3:13:04:50:9c:03:eb:3e:
                    53:86:f8:e8:3f:7b:69:a7:6c:5e:9a:d9:31:f3:cc:
                    e0:85:a1:77:75:1b:0e:80:a0:b4:76:3f:7f:37:da:
                    d4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:81:6B:96:10:01:D3:0A:C1:5C:B1:9D:89:D8:16:0F:7E:09:0A:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl

            X509v3 Authority Key Identifier:
                keyid:DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f9:35:30:42:c7:14:0f:ef:19:f3:17:1e:b4:bf:78:c2:bd:
         b0:82:f1:f2:6d:63:dc:c8:e1:ec:f1:69:8a:23:3b:56:c9:c2:
         6c:4b:ff:34:32:51:3f:96:c0:f4:fd:19:3c:16:d2:7f:2f:ac:
         f4:65:2c:95:d3:07:57:2f:e3:e6:b6:a5:63:3e:4d:2e:ba:75:
         b4:a8:5c:af:48:59:e5:e6:48:51:f8:ad:6d:63:31:d9:5c:22:
         d7:20:a2:68:35:03:a4:cd:8c:10:ad:7d:25:1a:7e:85:c9:fb:
         5c:29:60:ae:18:a1:8d:86:76:36:ef:c4:6d:9b:36:70:ca:49:
         ec:ef:c8:b9:d3:ce:75:e3:4f:b8:34:43:c8:2c:ab:58:91:e6:
         77:93:68:65:9a:64:2d:1c:3b:48:a2:9a:a9:e9:bb:2b:10:29:
         ef:cc:2a:79:d1:bc:c0:96:78:66:01:91:52:eb:50:4f:69:80:
         b7:fc:d3:ed:41:59:8a:1a:c5:e7:6f:b2:76:1b:55:62:01:c2:
         77:e9:73:38:6b:40:d9:df:bc:35:97:a6:f8:69:97:ce:16:9f:
         36:8c:ac:7b:d3:f2:14:e4:98:4f:08:2c:9e:1c:d1:e0:a7:f7:
         80:90:97:74:38:69:82:d9:a7:42:15:d1:24:2e:07:3a:31:bc:
         60:1a:09:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:21:45 2025 by rpki-client