Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/ade09a67-a4d4-3357-bace-f900f84f7e62.roa
File:                     ade09a67-a4d4-3357-bace-f900f84f7e62.roa (raw, json)
Hash identifier:          U9T8qToDZyUV7NwJGl7lmzaS5RFFRcu5q3pYM/WNakY=
Subject key identifier:   81:4C:08:F0:5F:E3:2B:12:B1:8A:31:AE:FB:A4:FB:11:D9:5D:77:39
Certificate issuer:       /CN=e9e262d0-3a64-402e-81e7-5b0829596494
Certificate serial:       010D0C9F4328584A374AC4625EE9D052141F7600
Authority key identifier: D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/ade09a67-a4d4-3357-bace-f900f84f7e62.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     959
IP address blocks:        2606:6240:959::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:c4:62:5e:e9:d0:52:14:1f:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e262d0-3a64-402e-81e7-5b0829596494
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=fc59187a-fe76-4ca0-b044-16e3103ab22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dd:74:8e:70:cf:e1:7b:1c:3e:62:ce:27:8e:
                    a3:f8:fa:0b:cb:b9:f0:00:6a:f7:82:3d:f4:43:38:
                    63:15:89:e7:f7:87:3f:c4:aa:1f:d5:ac:54:f7:36:
                    7d:b4:0f:e9:98:cc:b8:00:6e:b9:b9:f8:c1:ef:09:
                    32:9d:95:94:e3:8b:64:ad:8a:7a:96:dd:1d:3d:42:
                    2e:40:0c:1f:14:f6:f1:f7:14:a1:08:f4:9a:6c:25:
                    54:ca:ff:e3:61:8b:b8:84:ee:49:d6:71:72:02:e3:
                    b0:3e:11:fc:92:01:06:f1:c0:11:3a:2a:fb:02:88:
                    6a:e0:b1:5f:24:a3:f1:68:93:6e:c9:c3:de:b5:24:
                    66:e5:af:57:58:61:35:c1:53:01:61:da:0d:c7:34:
                    a3:1f:f9:72:cc:a4:a0:03:58:1c:77:1e:7f:48:04:
                    35:81:93:b7:83:63:8f:0e:66:8f:87:29:28:84:30:
                    29:b4:d5:fc:e7:da:5e:f4:04:03:e1:b1:f9:48:f9:
                    f3:a2:05:4d:39:a0:aa:15:a9:b5:3f:c1:00:55:8b:
                    fb:42:58:e2:79:cd:5e:6a:ed:ad:02:5d:c1:d4:02:
                    10:74:fd:88:99:7e:c3:48:43:bb:b2:b1:dd:e9:b5:
                    9c:6f:9f:95:73:99:7e:af:8d:fa:a8:9c:74:ea:e4:
                    0f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4C:08:F0:5F:E3:2B:12:B1:8A:31:AE:FB:A4:FB:11:D9:5D:77:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/ade09a67-a4d4-3357-bace-f900f84f7e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6240:959::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:84:b6:e0:58:86:7a:ad:2b:cb:10:19:53:4f:9a:29:f5:28:
         24:a5:9a:83:7f:85:c4:18:6c:4d:35:a8:a3:5c:9e:38:5c:cc:
         4b:5a:65:0c:6d:b1:74:e4:f4:69:23:60:af:8e:98:8d:71:8d:
         2d:f5:40:9b:cb:d4:36:ad:25:02:cf:de:b2:8e:79:e2:45:1e:
         bd:b8:5c:43:fb:1d:06:df:de:c6:68:00:26:62:bb:cb:1f:ff:
         ee:e5:94:dd:73:44:30:f4:20:4c:db:b6:ca:ba:89:e8:e5:bb:
         f9:68:0e:eb:6f:69:8f:25:d7:92:6b:d8:4f:e5:8c:4f:2b:5c:
         ed:c6:de:36:63:d1:e8:a0:0b:d7:ce:f8:93:c5:d5:89:50:16:
         93:3d:3d:6a:cf:e0:a1:8e:e9:82:28:d0:10:a3:2a:61:fc:32:
         a1:69:5a:ad:6a:b2:b9:2a:ac:8b:9b:eb:a8:12:65:95:38:24:
         77:86:4c:4f:84:bd:7c:26:6c:86:db:1f:64:36:8f:c7:ea:0b:
         39:ec:7d:e2:eb:20:f5:13:c3:2c:c4:41:73:a7:41:c0:44:75:
         f3:94:92:74:8d:53:f9:78:91:54:6e:ef:e1:48:96:45:0f:44:
         4e:a3:77:e0:60:c0:11:e2:80:c2:ae:df:d0:88:69:ff:20:84:
         cf:0a:3a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:05:47 2025 by rpki-client