Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/02594986-dc57-3549-a504-89e7acff2c20.roa
File:                     02594986-dc57-3549-a504-89e7acff2c20.roa (raw, json)
Hash identifier:          31GtBVkoS/pFkDGNUf8Dms/3hHXBZwrE4RDgRKhjYdo=
Subject key identifier:   D8:7E:F3:E8:53:F4:38:2C:43:0A:AE:84:AD:31:85:2A:68:FF:2A:4C
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F4328584B6201EF3538A557F0E7625C80
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/02594986-dc57-3549-a504-89e7acff2c20.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     396986
IP address blocks:        2605:340::/48 maxlen: 48
                          2605:340:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:ef:35:38:a5:57:f0:e7:62:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=c32eb282-a187-4103-81d7-8c1be3b07d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:74:b6:85:25:ee:d0:06:2f:bf:06:e0:e0:ce:
                    c4:54:34:06:48:b7:a8:d9:0d:d3:87:e9:09:69:11:
                    62:cc:a6:eb:7b:9e:29:da:58:e7:c1:17:a1:5c:58:
                    d3:f0:5a:77:57:86:fe:90:31:9c:cf:74:bb:da:1f:
                    bc:98:d4:43:0e:ff:38:4c:77:b5:e2:a1:3c:33:a9:
                    42:0f:c1:f0:b6:08:98:2f:b7:da:70:1c:3f:41:b8:
                    09:b2:cd:2e:23:83:b4:c1:58:15:f7:f3:e2:0e:3c:
                    e3:bb:07:db:af:08:0e:b7:86:f5:fc:4d:77:a8:63:
                    06:7c:ed:85:d5:48:53:5c:c3:3c:d1:a2:43:01:75:
                    27:c8:5e:49:f9:d2:bb:d2:ba:cc:9d:51:ec:c8:85:
                    4b:0d:3b:69:63:dc:0f:69:c7:51:6e:9c:1d:77:7e:
                    a9:60:99:4b:7b:3c:c2:40:e9:8d:05:51:58:a2:fc:
                    db:49:8b:91:ee:36:c6:a0:46:67:3d:35:74:37:09:
                    10:c9:94:69:ab:f6:d7:85:bc:bb:ea:9a:4d:8d:4d:
                    3e:c5:2f:bb:f0:6f:e7:3e:98:ff:6e:71:21:8d:71:
                    63:47:72:40:a7:db:80:15:9c:81:59:c5:03:9f:f7:
                    e7:4e:0e:6c:17:44:ac:28:9a:0f:5d:92:92:23:9a:
                    00:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7E:F3:E8:53:F4:38:2C:43:0A:AE:84:AD:31:85:2A:68:FF:2A:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/02594986-dc57-3549-a504-89e7acff2c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:340::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:34:b0:52:4d:0d:ff:fe:ec:c9:3f:76:4d:15:5f:ea:81:30:
         53:72:6d:52:b2:75:cd:ef:37:4a:38:55:bf:53:0d:2d:de:98:
         07:98:14:97:e0:b2:67:51:53:2c:2e:e3:95:94:31:e0:2e:1a:
         03:d8:65:56:30:af:72:57:36:27:c5:10:51:4d:fb:35:5b:f6:
         88:11:00:7c:38:b6:7e:1b:50:7b:d7:6f:b8:9f:fe:31:55:54:
         9a:b9:b6:9d:1e:ad:d2:d0:3d:dd:ce:5d:30:8e:cd:8d:05:ec:
         74:44:c7:d8:5a:91:64:bc:91:46:11:b5:4e:06:b2:b8:71:f4:
         7a:a0:9d:d9:31:a5:08:a4:4d:ed:f9:1d:00:d1:72:ec:21:55:
         1c:bc:7d:b1:c5:98:1c:48:64:a1:47:50:cb:dc:c6:ae:1d:ec:
         c1:a8:93:e0:e5:8d:e7:66:6e:10:98:76:52:5d:ae:09:01:7a:
         4c:fc:43:94:da:1f:f7:ca:35:ff:45:99:ab:00:24:ac:06:a4:
         cf:f9:2d:b3:fb:eb:81:ea:39:c5:8a:20:f1:b8:80:f4:78:bf:
         03:35:f0:8e:33:ec:3b:69:04:15:f8:49:ad:11:2c:5d:c0:59:
         73:08:eb:ec:3d:b7:0b:18:85:c5:04:1b:a7:28:47:16:33:b0:
         a9:48:8b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:10 2025 by rpki-client