Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/571ae5a9-8a91-3483-9d02-ba6f8a797098.roa
File:                     571ae5a9-8a91-3483-9d02-ba6f8a797098.roa (raw, json)
Hash identifier:          clj1ZwrtOu8XUyYW+Jr1qQM8X4dSAWoiPQ7+W12ZXaI=
Subject key identifier:   09:37:C5:D6:E2:E7:FA:A4:E2:3E:2A:58:E9:F7:C3:32:CA:89:31:AF
Certificate issuer:       /CN=87edc032-d938-4504-bf4b-96c599e50195
Certificate serial:       010D0C9F4328584B821CD05F0DD8FCFF774C7E00
Authority key identifier: 1B:EE:D5:18:60:7D:3D:A9:C2:E8:2D:B7:0E:0E:9D:D0:0C:8D:61:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/571ae5a9-8a91-3483-9d02-ba6f8a797098.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     27005
IP address blocks:        2606:6d80::/32 maxlen: 44
                          2607:fbf0::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:d0:5f:0d:d8:fc:ff:77:4c:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87edc032-d938-4504-bf4b-96c599e50195
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=f6a14261-86a2-4b57-b4ad-1d1446476088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:79:f8:dd:6f:45:5d:a8:1c:0b:0f:31:5e:1b:
                    e3:45:97:97:68:f2:25:6a:4b:bc:27:20:15:fc:fc:
                    7d:d9:05:69:cb:c1:a0:5e:a4:0d:9b:d3:16:e2:2a:
                    f4:95:b6:eb:13:58:71:3d:0c:f4:54:77:7e:10:83:
                    f0:26:d1:13:a6:a6:06:e1:be:b1:ee:ed:03:27:04:
                    0c:15:72:b1:18:fb:e9:c5:09:df:a7:6a:dd:31:45:
                    e3:53:29:17:02:a2:d1:96:1a:61:5d:83:01:e5:46:
                    10:d9:55:b9:0f:0c:9c:17:ac:a3:23:e8:86:d1:2f:
                    fd:68:d3:d4:b2:52:1c:66:71:41:44:16:2b:7b:88:
                    cc:89:2a:7c:db:f2:2f:34:dc:e1:ed:f5:52:9f:68:
                    18:1c:08:85:50:72:54:03:ac:6d:e8:d8:10:7b:6e:
                    19:6d:ad:88:2e:44:50:c0:d6:0a:1b:30:a7:b8:57:
                    75:7f:32:89:e2:84:cc:67:4b:d3:24:2d:07:4b:ef:
                    83:25:b1:0b:cc:32:f6:41:2c:63:fc:ab:44:09:82:
                    41:12:79:13:18:fd:51:5a:c5:eb:e7:38:08:0b:69:
                    74:ef:e5:f2:2b:b5:cc:65:95:ca:5e:b1:1f:9f:64:
                    3f:ef:a6:49:de:af:dd:79:a5:a8:78:f4:45:f4:da:
                    0d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:37:C5:D6:E2:E7:FA:A4:E2:3E:2A:58:E9:F7:C3:32:CA:89:31:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/571ae5a9-8a91-3483-9d02-ba6f8a797098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.crl

            X509v3 Authority Key Identifier:
                keyid:1B:EE:D5:18:60:7D:3D:A9:C2:E8:2D:B7:0E:0E:9D:D0:0C:8D:61:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6d80::/32
                  2607:fbf0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:13:64:44:da:0c:c5:32:1c:e2:e9:bd:7f:1a:05:74:9f:43:
         de:0c:a2:93:3f:6f:c4:8f:41:1f:d7:87:9b:c2:f3:55:d6:15:
         66:c2:ae:2b:90:1e:df:75:82:8b:15:90:6f:59:bf:fb:76:7f:
         4b:a6:8e:09:75:b0:9e:d1:f5:d8:60:23:e9:2e:56:cd:80:61:
         06:2b:b2:03:22:c9:cd:e0:ed:57:78:b6:c5:18:67:cb:06:ad:
         1f:3d:a3:73:94:f0:6d:1b:22:e2:99:62:95:0d:c0:47:93:30:
         c8:7b:3b:e2:7d:8a:2a:d7:c7:f3:b3:c2:53:ae:65:47:12:68:
         f9:63:83:73:1a:bf:f0:b8:6d:fd:66:24:97:8f:5b:20:5e:4e:
         10:12:87:2a:23:90:0f:31:7e:1f:49:11:87:ed:b6:7c:23:d8:
         87:c6:5f:56:ca:92:ed:7e:0c:2c:38:0f:6b:d6:6f:59:65:ae:
         e6:e0:ba:9e:74:68:7f:67:39:9d:f0:c8:48:af:49:ce:a5:aa:
         bc:ee:d9:15:27:96:1f:05:a1:d0:96:61:87:62:e0:86:7f:5b:
         a7:cd:49:90:85:93:0b:d0:42:13:65:29:16:ef:b1:75:3b:26:
         63:37:39:d1:92:8d:91:52:54:9a:89:78:2a:15:62:26:d1:f3:
         0d:86:45:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:25:53 2025 by rpki-client