Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/952bc161-991d-39ce-9362-1f60a57f0877.roa
File:                     952bc161-991d-39ce-9362-1f60a57f0877.roa (raw, json)
Hash identifier:          JUbLpfteZDaKJyqvWMuaUR+tE+9Psw7XjYQobJ5+hQU=
Subject key identifier:   C2:9F:77:46:41:DF:C5:26:AC:B5:45:F4:17:AF:C6:24:2F:BC:09:F4
Certificate issuer:       /CN=69e9bd0e-daed-4b94-96a5-e28b698e9d37
Certificate serial:       010D0C9F4328584AADF109C97A6068D1E0B41480
Authority key identifier: 06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/952bc161-991d-39ce-9362-1f60a57f0877.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     11525
IP address blocks:        2606:5d00::/28 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:09:c9:7a:60:68:d1:e0:b4:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e9bd0e-daed-4b94-96a5-e28b698e9d37
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=ec6eaeb7-3513-45b5-8282-0aa5c5ecb9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8e:c5:d9:50:78:4e:22:bc:2b:de:1b:2a:ef:
                    b9:be:ef:21:3f:91:a7:88:05:9a:eb:06:a3:18:07:
                    58:c5:6a:9d:22:44:e4:eb:ec:a7:30:35:dc:18:ae:
                    da:f8:29:3a:20:1e:3b:55:1c:37:b7:28:60:10:d9:
                    77:a6:da:7d:65:31:4c:53:b0:4d:37:32:d1:4f:50:
                    05:2e:37:a8:a2:1e:f9:a0:91:6c:ab:76:9a:1a:7e:
                    bd:4f:1e:77:ac:89:a5:27:76:f1:d1:ad:2f:31:ba:
                    74:4a:c2:bf:40:72:d4:ab:7a:2d:18:fc:35:9b:c0:
                    ab:ac:33:9e:c1:f4:4b:6c:44:0a:71:e5:5b:c0:c9:
                    5e:94:63:16:af:d5:19:ca:97:69:70:c5:82:cf:6b:
                    83:76:bb:cc:f4:74:a8:e4:b3:9a:53:45:2e:d7:b5:
                    b1:c0:fb:40:d9:98:3c:53:2a:93:5c:52:86:96:39:
                    04:c9:22:83:ed:ee:91:69:95:15:9e:47:c4:4a:11:
                    a8:9e:77:91:80:78:a2:de:51:27:f9:08:66:6e:ef:
                    26:be:f6:a8:c3:db:d6:1b:45:b5:30:2a:d5:5e:d2:
                    22:22:01:97:0b:fc:21:4d:84:dd:8f:b0:75:63:e1:
                    80:b7:dd:99:fc:df:5d:ac:7b:7e:bb:e0:a5:34:37:
                    b5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9F:77:46:41:DF:C5:26:AC:B5:45:F4:17:AF:C6:24:2F:BC:09:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/952bc161-991d-39ce-9362-1f60a57f0877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.crl

            X509v3 Authority Key Identifier:
                keyid:06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5d00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:71:08:92:16:0c:bd:55:cd:d0:b8:f9:74:0d:93:77:45:7d:
         74:04:5b:e4:d9:92:f2:64:6f:3b:44:4a:c9:c8:11:d0:e8:77:
         c2:55:63:5d:f4:1a:a6:81:70:c6:01:36:22:26:b7:27:b9:86:
         2e:e0:2b:17:19:a6:2b:5c:06:f4:67:0a:b4:16:50:25:ba:ea:
         75:29:c7:fd:f4:04:ea:24:f5:28:6e:b2:85:1b:b5:6b:ce:f1:
         79:e4:c6:25:c6:78:f5:80:dc:e8:db:37:7f:9a:46:12:ca:c6:
         ac:93:16:21:fa:ec:44:6a:2d:fe:8c:f7:94:92:40:63:3c:00:
         5c:6b:43:9a:4a:e7:30:fb:f8:d1:f7:d0:da:a4:1a:27:e1:25:
         e4:1b:8a:66:de:b9:1e:0d:92:0e:a9:0e:31:b4:b7:15:f1:61:
         b9:44:a0:a0:0d:eb:6f:a7:72:55:bb:12:ec:99:54:86:a5:f0:
         a5:7f:28:ab:c7:6d:13:f9:1e:eb:7c:84:e1:ef:76:db:cf:f5:
         55:90:06:15:f8:3c:69:35:b8:9d:42:32:5d:21:c5:aa:70:f0:
         71:5b:4f:e4:26:57:6c:0c:14:ad:cf:b9:92:12:04:35:9f:a3:
         81:fa:6e:93:db:b5:8d:62:91:06:80:4c:10:09:d3:97:bc:86:
         7a:05:7a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:34:57 2025 by rpki-client