Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa
File:                     2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa (raw, json)
Hash identifier:          D2CpYQCH6t3NHoBHysJfJwlrkUI9dZ1+FoeRUkLjY14=
Subject key identifier:   AE:FA:0E:ED:A3:C9:BF:E0:6B:EA:11:49:4A:82:BA:3F:27:FE:EF:CF
Certificate issuer:       /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
Certificate serial:       010D0C9F4328584B7DECA7877DA8F55265120800
Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     36549
IP address blocks:        2606:b200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a7:87:7d:a8:f5:52:65:12:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=46030b0e-0342-45ba-8439-64979afc7c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:3c:db:be:09:80:4e:19:18:19:13:2d:83:
                    71:f0:28:69:68:0d:77:ec:c2:78:6f:24:56:dc:48:
                    05:6e:60:0b:e6:70:e3:ed:57:ce:3a:7c:ca:fa:f2:
                    62:df:b3:27:0f:63:18:06:33:d3:92:6e:ba:56:5c:
                    88:2c:36:cd:c1:48:ff:97:05:07:64:db:79:1f:7b:
                    22:1d:dc:10:72:90:a5:93:43:8d:e3:da:23:68:7e:
                    ff:87:75:fb:2f:4e:48:6f:66:91:ed:49:72:2b:b2:
                    92:02:15:41:b3:dd:20:d8:05:fa:4d:99:29:00:39:
                    55:86:c4:3c:0f:0a:00:83:5c:a9:06:92:28:71:32:
                    74:b1:1b:66:b5:aa:13:36:a9:3b:51:a6:e9:d3:d5:
                    e9:5b:4e:d0:f2:87:97:1e:80:3d:cb:b4:24:e1:19:
                    ae:bd:90:c5:e0:31:62:2b:f1:18:be:40:9c:c5:4e:
                    d8:14:1a:b7:a1:8f:df:98:6d:82:d9:bc:89:1a:60:
                    f5:af:93:1c:26:c9:b1:97:6d:06:4e:f2:03:78:12:
                    8a:c2:61:a6:3b:6d:9c:d4:d7:7f:57:64:f7:f3:3d:
                    66:52:4b:3d:b0:96:86:d7:dd:1b:5d:35:32:e3:11:
                    91:5a:a3:1b:d8:0c:22:b3:de:7e:a3:f3:27:52:a9:
                    30:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FA:0E:ED:A3:C9:BF:E0:6B:EA:11:49:4A:82:BA:3F:27:FE:EF:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/2be83e4c-7a12-332c-a9df-49e3f5fcb1af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl

            X509v3 Authority Key Identifier:
                keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e2:bd:36:4d:29:4a:78:87:68:fc:80:5f:1c:46:e1:ce:9d:
         2e:92:60:3c:3d:a0:20:58:11:3f:f4:61:6e:0d:41:7d:bd:82:
         58:7b:36:e4:8f:53:93:49:e7:0a:ff:99:fa:2c:b2:66:c0:5f:
         fc:f6:d0:72:10:0d:d4:2f:b2:17:70:33:b5:0c:85:0e:36:41:
         19:9c:a5:d1:a2:ac:cd:75:af:d7:a4:a6:ad:bf:f7:1d:25:03:
         01:e7:a7:71:4b:7c:72:ff:b4:d2:7e:cc:2a:a6:7f:1b:05:6e:
         3f:62:89:83:d1:d4:9b:41:4b:63:08:73:83:d8:2b:75:bf:33:
         05:52:4f:26:6b:90:a8:8f:36:73:e8:7a:99:48:31:2c:01:93:
         3d:25:5c:60:56:f1:86:3b:53:4d:4c:28:2e:67:cd:d3:9c:3a:
         a6:8c:e8:7f:4f:9e:79:79:54:f6:80:13:73:9a:b5:08:50:ff:
         df:51:41:eb:95:8c:b1:39:28:df:22:9c:31:4e:71:aa:f2:ab:
         f6:31:f7:20:a9:16:01:a9:5d:b0:40:26:dd:fd:46:36:23:61:
         d9:dc:3f:ea:72:fa:9f:0b:e9:88:b7:4d:e8:e6:9c:2b:ba:17:
         0d:68:52:3b:65:fb:d7:64:0b:46:42:7a:98:bc:b7:3f:b3:24:
         66:ed:fd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:52:07 2025 by rpki-client