Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/e1d01112-d085-3024-8a50-8c7bf08b10b3.roa
File:                     e1d01112-d085-3024-8a50-8c7bf08b10b3.roa (raw, json)
Hash identifier:          az9d1NOWZgLP9auSbu6jJyJRJ6iYR+rJlfF2hwnFcAk=
Subject key identifier:   AF:E8:29:A8:E4:C9:EF:30:9A:8C:50:5C:78:B3:06:55:84:31:3F:5E
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584AB650E5578AF636A4D62ACF00
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/e1d01112-d085-3024-8a50-8c7bf08b10b3.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     394497
IP address blocks:        2606:8e80:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e5:57:8a:f6:36:a4:d6:2a:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=fa804bf0-29b7-4334-b2d4-8853548c71ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:04:00:5b:65:8b:a2:78:01:c1:ae:a4:80:f7:
                    63:49:87:dc:76:34:db:db:00:d3:7c:94:c3:b7:d5:
                    6f:69:3d:cd:27:59:de:95:74:c5:93:0b:b7:99:c3:
                    d7:11:7b:29:82:ee:27:74:d0:e5:1a:e3:46:3a:f8:
                    3d:08:bc:87:b2:f8:cf:1a:d7:8b:df:ed:8f:12:15:
                    e7:c7:35:b5:b0:f2:93:a2:55:bf:1f:1c:de:4a:e3:
                    aa:3e:f8:f9:fd:4f:82:91:d2:21:f5:4a:e5:58:2e:
                    e0:f3:45:8d:8e:1b:48:88:7d:49:f9:64:6d:4b:ea:
                    d8:cc:26:35:63:26:eb:b7:03:0c:00:0e:c4:c3:87:
                    aa:82:74:92:89:0e:7c:bc:f9:5a:6f:ec:61:60:d2:
                    29:f2:16:1a:52:3b:ef:88:f2:ac:01:d2:e0:ff:d9:
                    7c:f4:0a:99:bc:50:45:98:cd:f0:ea:17:c2:5c:44:
                    37:9f:24:2b:9b:09:e6:a6:da:68:4e:8c:70:5c:05:
                    9a:cb:e5:7f:33:c4:1c:c3:ea:bc:94:a2:5c:77:f0:
                    7e:13:ff:9d:c3:70:19:29:fa:56:6f:1b:be:fa:b4:
                    ae:c2:3d:23:30:63:54:fc:61:56:36:29:ee:88:c6:
                    f5:40:97:79:77:68:97:2f:44:32:62:5c:f9:c8:c0:
                    5a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E8:29:A8:E4:C9:EF:30:9A:8C:50:5C:78:B3:06:55:84:31:3F:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/e1d01112-d085-3024-8a50-8c7bf08b10b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:3d:7d:24:cb:bf:92:a0:6b:14:0f:4a:89:ad:13:d4:ac:e3:
         2b:21:67:28:17:20:fa:9d:d0:cc:6e:9a:ff:77:55:f6:ba:aa:
         56:dd:58:57:df:55:99:5a:c6:c4:9b:88:33:82:40:94:9a:d8:
         a7:71:33:de:a4:43:a4:f2:ee:d2:86:ba:d0:42:63:f1:d7:3c:
         0d:e1:48:8f:7a:e4:8b:34:d8:de:cd:be:9c:44:bc:2d:41:2c:
         e2:bb:6c:93:e9:2c:30:be:cc:aa:d7:0c:c6:12:bd:e7:8b:8a:
         5e:5e:59:34:9d:d0:28:09:6c:73:93:5b:70:e9:6c:60:c5:75:
         5a:63:03:71:fb:3e:6d:4a:79:c9:3e:27:a3:f5:75:a4:47:3c:
         13:e0:6d:ad:70:f0:00:57:82:cd:d9:d0:2d:15:c6:2c:bd:24:
         e1:76:e9:fb:b6:83:9b:c2:a6:67:5e:20:66:ab:70:35:38:e9:
         37:cb:13:15:e5:ec:00:00:f6:06:40:d7:6f:0a:65:00:0e:8d:
         46:d0:eb:bc:c4:b3:06:29:17:12:36:f1:63:5d:e3:bd:e5:33:
         a6:77:24:5c:74:26:5e:22:8d:60:20:0a:79:f1:ca:84:2c:46:
         5b:f7:e7:3d:1b:87:52:14:ff:9b:3f:c1:ff:91:70:f9:eb:10:
         3b:94:9b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:29:36 2025 by rpki-client