Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9051a569-4f38-3329-945f-e2fca1424e5e.roa
File:                     9051a569-4f38-3329-945f-e2fca1424e5e.roa (raw, json)
Hash identifier:          dvWXt1iJkvXA5+/78X59v7SmW/WwKwCKHNCUHQJss+A=
Subject key identifier:   AC:9C:FA:1E:2E:83:60:F3:71:99:35:5F:39:47:5B:8E:86:F2:47:B5
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B52A73C098937E22FB3061D40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9051a569-4f38-3329-945f-e2fca1424e5e.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     852
IP address blocks:        2607:fe88:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:3c:09:89:37:e2:2f:b3:06:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=2e8c985c-3c2b-41fb-9b94-e0fa836aca12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6c:29:02:06:f9:c4:5c:c1:d0:26:e3:d1:ae:
                    41:a1:5c:05:d7:7f:9c:63:24:cb:bf:17:7e:fb:41:
                    54:d4:f9:a1:45:14:d2:30:8b:ef:f0:b0:55:bb:1d:
                    a6:40:85:6b:9a:dc:68:70:c3:59:db:7c:29:a2:c3:
                    bf:f0:c9:42:43:93:02:13:bf:93:54:ba:07:1c:b9:
                    ad:f7:ab:09:39:94:04:4d:de:96:cc:ea:32:7a:a2:
                    b5:21:8c:8a:64:fc:bb:18:5a:af:2e:d9:53:1e:c0:
                    15:1b:32:8e:03:cb:b2:f7:67:05:00:bb:a1:e0:57:
                    8d:8e:b0:e7:4f:3d:06:10:79:ba:e2:9b:f8:e5:32:
                    60:29:df:d3:90:2b:b8:ba:2f:dd:d9:9e:30:2c:51:
                    a9:c6:21:2e:53:b4:7b:cb:06:34:4e:66:7a:8e:72:
                    00:db:64:f3:82:c3:43:78:be:73:ae:10:b3:01:1f:
                    43:ae:0c:6c:64:80:28:e7:7b:4a:25:dd:79:57:9c:
                    47:cf:c5:99:0c:fa:d1:16:84:57:b2:3a:84:22:31:
                    28:ad:98:2b:bf:3e:ad:cc:92:7a:8a:b0:ae:07:a9:
                    bb:a6:5b:ac:25:fc:c9:43:ee:aa:b1:62:de:4c:ec:
                    45:57:4a:17:a8:7f:81:83:2d:d6:4f:a7:a3:e9:88:
                    ea:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9C:FA:1E:2E:83:60:F3:71:99:35:5F:39:47:5B:8E:86:F2:47:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9051a569-4f38-3329-945f-e2fca1424e5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe88:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:01:2a:5f:f2:79:3e:ba:ae:23:14:d3:43:30:d8:3a:f0:b8:
         af:0b:6c:ed:94:b7:72:30:83:1c:04:30:67:b7:bc:c5:46:96:
         f3:19:af:fd:36:f0:cd:6a:e0:91:7c:73:32:0c:53:e5:bb:9e:
         e7:13:81:6b:91:db:e4:70:35:ca:0c:cc:85:23:c4:77:ad:d6:
         13:92:09:f0:28:e1:c7:da:93:6e:8c:8c:20:e8:ba:bf:49:48:
         b5:e4:c3:15:c3:d8:87:81:d4:b7:d8:07:3d:d1:19:7e:40:20:
         a0:33:7e:2d:76:cf:02:fb:2c:85:6f:e8:67:fb:48:69:71:e1:
         d8:a0:93:b4:c6:09:53:ed:73:6b:eb:b3:7d:3f:13:ef:9e:77:
         28:1d:b9:3a:42:e0:bd:9f:35:53:b6:5e:73:66:68:57:b9:37:
         ca:4a:df:67:10:f1:51:b4:1a:7c:93:7a:5e:db:fe:fe:f5:b4:
         ad:dc:f9:7c:77:0e:fb:f4:4b:82:a3:41:3f:2f:bb:c5:d2:26:
         40:e1:c4:59:cd:56:54:27:04:8d:e2:96:24:b8:74:c9:c1:dd:
         36:6c:92:64:79:30:0a:5a:0a:70:dc:3b:d9:37:ba:08:1f:bb:
         4e:32:80:11:93:f7:e1:5b:0a:95:69:6e:43:b5:20:14:88:51:
         45:0d:70:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:20:00 2025 by rpki-client