Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/868f6ddc-15a8-3ae1-a13c-51a4609f44db.roa
File:                     868f6ddc-15a8-3ae1-a13c-51a4609f44db.roa (raw, json)
Hash identifier:          1iAUhsxiPQJ5owblEJ8L7rkJLJW1P3eokyfrCS/dWbM=
Subject key identifier:   5A:D3:E1:EF:D1:D3:1C:E3:04:D0:DA:1E:32:DC:4A:CA:37:1D:78:C8
Certificate issuer:       /CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1
Certificate serial:       010D0C9F4328584AAB26597477FBD4699747E680
Authority key identifier: 07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/868f6ddc-15a8-3ae1-a13c-51a4609f44db.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     18451
IP address blocks:        2605:e200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:59:74:77:fb:d4:69:97:47:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=495abfce-0a4e-4a8d-8196-adb524061f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2a:16:e3:03:97:f7:2d:15:d5:0e:cb:f4:c5:
                    89:ad:82:8f:4d:94:a0:01:6d:0b:cf:b4:c2:fb:b5:
                    31:47:50:53:14:61:79:da:a9:02:98:48:a4:c7:bf:
                    d9:af:08:c8:5d:9d:1a:7a:6b:73:b1:32:58:00:8d:
                    3f:ee:4f:d4:e1:d5:2e:ba:6e:b6:93:4d:d7:d1:9b:
                    55:db:f7:46:73:4b:ea:c8:20:5c:32:e3:09:3b:cf:
                    bc:68:ce:48:3b:26:96:34:c8:f6:e5:ac:7d:8a:c6:
                    9e:b5:f2:80:d9:5b:e9:77:37:e4:4f:f3:2a:a1:3a:
                    de:07:d9:e4:e2:ad:32:81:68:a1:12:af:28:bd:f8:
                    f6:02:8b:a3:42:86:92:fc:17:3b:81:ed:c0:40:1d:
                    53:b0:75:87:c7:94:75:3c:73:4e:af:3b:af:4f:01:
                    cb:73:56:23:a2:5a:07:a6:79:9e:51:f2:6c:4a:8b:
                    55:28:ce:d8:7e:df:07:f4:93:a2:24:7f:f4:8d:54:
                    c4:e1:dc:fd:3d:71:78:bd:5c:fb:cc:a4:db:57:24:
                    bf:c3:77:36:ab:36:70:84:ef:58:f3:b8:01:eb:51:
                    17:76:a2:81:77:e5:f6:df:52:8e:9d:62:ea:58:92:
                    12:60:f8:27:59:4a:a6:49:89:5e:3e:d8:37:7e:99:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D3:E1:EF:D1:D3:1C:E3:04:D0:DA:1E:32:DC:4A:CA:37:1D:78:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/868f6ddc-15a8-3ae1-a13c-51a4609f44db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.crl

            X509v3 Authority Key Identifier:
                keyid:07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:57:3a:b8:c1:9f:f1:ff:3d:d9:21:20:6c:e3:99:88:53:1c:
         f2:50:61:29:db:b3:f7:cd:64:ad:3a:0f:11:e0:83:d1:b5:a1:
         87:99:c4:66:a6:b6:cb:9c:b8:fa:b7:f3:96:2f:65:b1:52:55:
         a4:95:91:f9:8b:79:d2:9e:65:08:a6:76:e1:be:e2:fd:cc:54:
         79:dc:f9:e6:96:27:05:e5:18:4f:93:c6:94:24:2f:24:b6:be:
         b5:b9:71:eb:f3:9f:8d:8d:fd:17:d3:96:f5:f2:7c:1f:0a:4d:
         b1:77:f2:93:d9:75:92:16:b1:fa:8a:8a:92:09:68:24:65:63:
         36:fd:36:56:c6:53:61:ff:50:5b:6c:b5:e2:db:18:73:09:9b:
         81:70:0e:cb:f2:95:ec:4d:c4:ff:63:96:ac:8c:f3:7c:74:d9:
         d5:13:f1:12:7e:bc:5c:a6:f8:6b:89:e3:ce:6e:70:36:9a:d3:
         2b:e7:b1:16:90:df:9d:3f:09:c9:8e:4a:d8:19:a7:b5:ea:6f:
         df:63:9d:7a:24:c6:33:29:f9:b6:8a:42:30:e3:56:9a:1c:94:
         e4:e4:58:41:b8:47:51:81:3a:aa:ff:c7:9a:7d:1a:16:ba:22:
         df:07:64:23:5f:11:46:8e:90:5e:19:d3:7f:f4:8c:9a:85:72:
         5c:f4:2d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:16 2025 by rpki-client