Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/fddcb5db-f286-3bdc-9fb1-ba1d92dc2b61.roa
File:                     fddcb5db-f286-3bdc-9fb1-ba1d92dc2b61.roa (raw, json)
Hash identifier:          Q1dpGAu8TX82Nx86lcBMIn3PuWfHKPnlIby9URVz3JI=
Subject key identifier:   20:12:92:31:BF:48:6C:05:C9:FE:95:82:24:C0:58:4F:65:DA:29:26
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584ABA80C942C7FCEB125AF9BC40
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/fddcb5db-f286-3bdc-9fb1-ba1d92dc2b61.roa
Signing time:             Sun 03 Aug 2025 01:00:32 +0000
ROA not before:           Sun 03 Aug 2025 01:00:32 +0000
ROA not after:            Sat 01 Nov 2025 01:00:32 +0000
asID:                     16509
IP address blocks:        2605:b040:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:80:c9:42:c7:fc:eb:12:5a:f9:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Aug  3 01:00:32 2025 GMT
            Not After : Nov  1 01:00:32 2025 GMT
        Subject: CN=3852ccd7-e21d-4f29-868c-1551a1dcece9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:db:bb:93:a8:37:07:cf:07:b4:42:67:7d:81:
                    cb:5e:94:4a:d9:eb:94:62:26:ac:f8:aa:32:fd:9f:
                    6c:37:21:68:c0:5d:68:8e:11:45:b5:35:7a:f7:c1:
                    8d:a8:0a:22:98:90:9e:26:98:e6:2e:27:4d:ec:a1:
                    fa:77:65:fb:e7:9a:7d:b0:e6:22:99:fc:51:02:f4:
                    f5:3e:52:38:17:1c:30:eb:3a:21:4a:d1:de:65:78:
                    44:f9:7b:46:2e:10:f6:fc:23:d8:8b:73:c4:5b:ab:
                    13:05:c4:04:a4:7e:7c:0f:01:c5:ca:a1:79:2b:43:
                    31:d3:91:82:62:1e:05:55:08:4c:3b:dd:4c:33:df:
                    5c:43:aa:7d:19:e4:c2:07:7f:ea:69:e5:01:ad:60:
                    64:95:7e:d1:98:a2:37:85:64:b8:6b:1c:1c:04:20:
                    14:94:97:5f:2d:4e:7e:c3:ed:be:28:73:11:40:b5:
                    d7:3c:c2:fe:f5:07:9b:32:76:e7:4c:e9:aa:91:ad:
                    61:64:79:e3:ee:4f:c6:59:31:03:8f:d8:cd:40:85:
                    39:06:71:b5:25:41:46:ee:24:94:78:8c:87:4b:82:
                    99:10:8e:1b:f8:fa:24:ce:ca:43:57:09:cc:55:15:
                    a4:de:af:3a:d9:c5:d6:69:89:02:73:2c:ab:3e:55:
                    9f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:12:92:31:BF:48:6C:05:C9:FE:95:82:24:C0:58:4F:65:DA:29:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/fddcb5db-f286-3bdc-9fb1-ba1d92dc2b61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b040:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f3:f2:e8:7b:29:fd:01:82:9f:fd:38:c4:f6:87:ae:7f:c7:
         71:c9:a2:55:6f:3f:e2:ce:7b:e4:82:c2:1b:b2:0c:a2:a2:85:
         55:61:07:e2:ba:3b:1a:64:c1:41:cb:8f:5a:ee:ce:09:3a:3f:
         d4:3f:85:e5:eb:3d:3f:cd:98:fe:bf:75:e2:e3:a4:d9:72:a0:
         55:ed:4a:bb:3d:07:c7:d5:36:fe:69:44:b3:1b:8f:37:84:85:
         6d:8c:32:95:2c:e0:3b:dc:69:d4:c6:3b:10:36:6f:e5:f7:a3:
         df:8b:f9:ed:ea:b6:db:35:9c:23:2e:9c:85:f6:f1:54:9a:0d:
         4b:02:43:00:67:30:4e:5d:04:e1:9a:50:5a:34:12:8f:ed:af:
         d8:ce:05:c1:b6:95:ea:be:57:31:47:c7:87:b6:f7:bc:ad:f7:
         85:70:3a:a6:69:dd:af:7b:b2:15:b7:31:00:51:d2:23:a0:1f:
         f8:d0:4d:af:75:4d:7c:7e:99:74:78:59:c7:15:d8:1f:cc:21:
         04:74:22:5a:0b:c5:f1:7a:7c:07:b4:30:9c:4f:82:e3:b3:34:
         30:dd:1e:86:87:b9:d3:44:19:7e:52:f3:e1:71:cd:33:9b:c0:
         10:c3:b4:f6:ea:42:bc:1c:51:40:04:7e:81:1a:f4:24:61:91:
         ff:06:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:04:30 2025 by rpki-client