Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/856571e3-0844-3aaf-b208-47df360ac0b7.roa
File:                     856571e3-0844-3aaf-b208-47df360ac0b7.roa (raw, json)
Hash identifier:          YHjqhDgj4yd7oNrZs5tN7z0u9MZpOvKAnjP1F0m3zxo=
Subject key identifier:   06:EA:98:22:AE:61:D1:04:22:2F:34:2A:75:67:8E:E1:85:6F:1C:42
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328584B477C67B6CD21D87D20D8F3F1
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/856571e3-0844-3aaf-b208-47df360ac0b7.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     54874
IP address blocks:        2605:f440::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:67:b6:cd:21:d8:7d:20:d8:f3:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=d931582d-1331-4e9f-aec0-3cbeb1de9bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3c:99:f2:b5:0f:fe:39:10:80:a9:b1:3f:a2:
                    ce:ab:2a:92:57:2c:08:1d:fc:a0:8b:1d:00:fb:13:
                    af:41:37:cf:54:97:0b:3b:4e:af:d3:84:f4:96:06:
                    be:6a:16:c6:c6:df:0e:58:f9:7d:e0:4e:54:5e:f7:
                    53:4e:5f:a9:61:b0:29:21:e1:a8:77:a5:f4:27:de:
                    f1:c3:52:72:e0:d8:45:b9:12:57:b0:c3:34:d4:1b:
                    ee:f4:7f:14:76:b5:5b:0a:00:4d:2e:5f:cf:b1:b0:
                    d4:dc:ec:77:77:1d:b8:b0:46:52:9a:9c:81:25:41:
                    5b:1c:0b:ef:60:d2:54:e3:73:25:58:a2:44:13:dc:
                    f4:07:e6:e5:ee:dc:c9:42:0d:59:4e:61:6a:ad:15:
                    7e:73:e0:1c:99:d5:5e:0c:da:a2:35:1f:b6:9d:6d:
                    e2:0f:83:71:1a:c1:bf:c7:68:24:27:44:07:06:4e:
                    a5:3f:81:6d:de:83:c6:6a:d5:62:fa:1d:c8:6a:c3:
                    f8:3a:e7:e7:f3:b5:53:70:23:04:16:37:b1:d8:26:
                    9e:5b:9b:0b:2b:ed:84:cf:01:18:0d:7c:07:bd:33:
                    05:7c:a2:2e:8b:86:34:ea:38:a1:8e:77:a0:28:1d:
                    3f:63:0b:96:46:b4:44:b1:c6:3c:c8:17:e8:f6:e6:
                    2c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EA:98:22:AE:61:D1:04:22:2F:34:2A:75:67:8E:E1:85:6F:1C:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/856571e3-0844-3aaf-b208-47df360ac0b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:23:7f:c2:75:45:d2:09:7b:84:47:62:c7:e0:ab:fd:4c:d2:
         94:e2:de:9b:01:4d:c1:6f:01:24:f9:76:54:07:02:88:6f:d3:
         d8:a7:67:b5:5a:d2:2e:09:ba:08:df:f4:ae:30:c7:4f:c7:43:
         e9:75:0e:60:5e:99:f7:90:21:f8:0b:af:7c:a0:61:fb:18:82:
         40:71:11:53:a0:1a:94:39:73:c5:0c:db:0d:ee:e5:95:bf:49:
         10:de:84:af:bb:09:2c:06:3f:0e:16:8e:df:0d:18:0f:8a:e6:
         a5:e3:31:59:7f:80:f4:82:d1:41:a6:20:2e:55:7c:e4:ef:7f:
         8d:d9:82:bb:40:fc:41:3c:d6:8d:4d:69:7d:5b:58:7a:70:3f:
         02:e4:e9:da:93:9e:22:62:98:0e:50:eb:c4:5e:b7:38:49:42:
         aa:ef:e9:55:ba:f8:bf:1b:aa:5d:7c:99:4b:8b:34:3e:ef:05:
         c5:5b:6c:d5:42:df:30:7c:6f:58:f6:d4:71:a2:a6:44:a7:15:
         a2:ee:4e:be:3a:a3:26:f1:da:6e:e7:34:51:60:3b:99:cd:74:
         08:f1:47:45:85:84:c3:a6:2b:19:1f:ae:d6:76:21:3d:6e:6d:
         0b:6c:ef:38:20:fa:93:c5:29:f1:2a:f1:ff:ed:06:f9:8f:76:
         39:e1:31:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:47:25 2025 by rpki-client