Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa
File:                     06117935-952b-3adf-88ac-10a942733ca0.roa (raw, json)
Hash identifier:          QyzK8FaLfjouqJuWwq6DLIeiWVIIVJ5fIaIRAZIq4Y8=
Subject key identifier:   F0:46:30:B0:9A:D3:36:A4:1D:6B:80:7A:6C:05:C5:70:88:6A:90:0B
Certificate issuer:       /CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
Certificate serial:       010D0C9F4328584B48E1B75D02E6E24D26978000
Authority key identifier: 96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     36850
IP address blocks:        2606:f640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:b7:5d:02:e6:e2:4d:26:97:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=3f413ecd-17fd-4790-be0d-216d6d44fd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:d2:72:7d:be:59:38:75:28:21:04:b3:3a:
                    d1:92:6f:b3:a7:94:7e:e0:ca:db:16:e0:7d:af:a4:
                    dd:4b:73:5e:9b:1c:15:72:88:3b:02:e5:f4:48:c2:
                    37:ec:9f:43:1d:95:8d:5e:1e:8a:c5:cb:c9:98:34:
                    4a:1b:c6:5d:16:67:47:42:29:4c:2a:2a:ec:90:da:
                    cc:95:5a:10:43:99:00:9a:64:39:c1:f7:67:37:f6:
                    6d:73:e2:53:84:52:7b:e0:de:d1:ff:b3:35:58:52:
                    33:c8:e7:19:51:fd:5b:b3:a7:a0:3b:85:e1:e6:4e:
                    39:bf:61:ba:58:60:c6:24:bb:66:a8:a3:c6:32:3c:
                    a4:3a:19:1c:62:c4:2e:26:7a:6b:72:f9:a7:cb:4a:
                    7a:06:9a:24:0d:ac:8c:0d:ba:47:c3:47:96:ea:69:
                    36:ab:bc:60:99:5c:dd:d3:b8:77:50:67:f7:13:04:
                    6e:85:c8:c5:66:e8:07:41:01:d0:b9:9b:cc:6e:cf:
                    1e:60:61:e4:75:47:b8:f3:2c:2c:ea:69:7d:6f:be:
                    a5:09:ee:fa:0d:c9:7c:05:8e:7a:eb:f0:51:04:a0:
                    07:d7:55:9c:fd:bc:7a:fd:82:a5:e0:0c:b7:0e:42:
                    d2:17:40:f1:e0:1d:3c:e4:fc:53:06:91:cd:9a:f4:
                    ff:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:46:30:B0:9A:D3:36:A4:1D:6B:80:7A:6C:05:C5:70:88:6A:90:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl

            X509v3 Authority Key Identifier:
                keyid:96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:91:5d:23:b4:99:77:52:aa:aa:24:68:62:79:f3:cc:ad:ea:
         0d:61:89:a8:e9:d5:d5:b7:a4:41:6d:cd:5e:46:b8:09:3e:a9:
         a7:69:0d:b1:fa:bc:10:63:2e:5d:93:1a:59:2b:99:10:22:88:
         2b:f2:07:f2:4d:79:ca:bd:1f:b6:80:a0:16:6c:14:39:b8:8f:
         da:b5:82:22:4c:31:63:76:db:63:e3:78:da:4c:a7:74:f9:f2:
         09:7a:7d:4b:8d:bd:be:ef:c6:3b:8b:ce:6b:6f:d8:04:9e:ac:
         c0:8b:63:19:eb:40:60:c9:19:72:8d:3d:9f:57:8b:07:6f:ca:
         63:03:0d:52:cb:c5:77:69:d5:6e:9f:b0:bc:31:85:58:ae:0d:
         ec:ff:0f:23:d5:97:52:3e:c2:ee:49:e1:e1:d1:96:f1:0a:fb:
         aa:fd:39:78:f5:fb:9f:94:be:c0:6e:0a:b9:07:d1:24:dc:7b:
         16:27:bf:81:ca:7a:78:13:40:16:77:72:56:13:c6:f1:76:f3:
         70:c3:14:2d:73:25:65:c6:85:3e:b8:e2:16:42:aa:83:f7:43:
         ef:c1:46:39:61:dd:ef:99:f2:22:e8:e4:1d:59:b8:15:46:03:
         1a:d2:68:2f:90:e3:22:96:21:ad:69:75:31:ae:ac:4e:fc:c9:
         d0:ba:d8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:01:00 2025 by rpki-client