Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/27366f43-e058-35c9-a01f-c58148ae8cf2.roa
File:                     27366f43-e058-35c9-a01f-c58148ae8cf2.roa (raw, json)
Hash identifier:          UXvHSVuaAgL/NGgTHDWY87iqoZfi2tVlTDJJsUyIflg=
Subject key identifier:   2C:C6:52:E5:59:49:2D:ED:92:EA:67:51:E8:96:E4:9C:CD:36:00:6E
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584A8B0B74E9670B399CCD8DBC60
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/27366f43-e058-35c9-a01f-c58148ae8cf2.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     400087
IP address blocks:        2606:7fc0::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:74:e9:67:0b:39:9c:cd:8d:bc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=b5dde001-1be0-4631-bc01-e4f649754676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:38:9f:2e:a7:15:5d:68:ae:36:9f:41:fc:a2:
                    73:5c:79:ce:94:46:38:0d:69:ce:9a:95:bc:68:a6:
                    dc:52:26:f8:48:eb:4e:e4:32:a6:9b:36:f2:35:ef:
                    1a:3d:a2:56:19:fc:0f:a5:2e:3e:ed:78:f8:3b:02:
                    eb:ce:e4:b6:01:2e:9b:db:3e:55:44:65:fc:89:f1:
                    88:08:a6:34:64:9f:e8:bb:f9:59:92:40:ff:5d:5c:
                    7f:69:a8:ab:d2:68:08:15:46:d3:7e:37:23:c6:04:
                    bf:3e:e4:d4:13:2d:4b:4c:55:82:52:01:37:02:ed:
                    0d:ca:a7:33:ef:21:9c:c1:6f:f2:d1:08:6c:c4:ed:
                    8e:60:f9:a2:58:f6:07:e9:ab:0a:1f:1e:63:0f:19:
                    3d:b9:ca:1d:eb:a3:d7:d3:fb:ad:e9:16:63:83:78:
                    44:a2:54:09:67:8f:9f:93:e0:5c:24:a1:94:59:63:
                    33:9c:fe:6d:30:a7:92:65:c9:fd:89:6b:9a:49:a9:
                    1c:7b:c5:bc:e1:2d:b1:a5:54:e4:55:9a:31:57:0a:
                    3e:bc:05:8b:30:da:70:37:44:66:a1:30:a0:8a:58:
                    ac:ad:c1:0b:c7:66:30:1d:8e:5e:12:9e:27:dd:ff:
                    39:e0:35:6a:65:ea:af:f5:47:1e:ba:84:61:eb:61:
                    9e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C6:52:E5:59:49:2D:ED:92:EA:67:51:E8:96:E4:9C:CD:36:00:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/27366f43-e058-35c9-a01f-c58148ae8cf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7fc0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:5c:33:05:78:bb:41:d4:68:80:7b:5b:0b:e5:a1:27:32:8b:
         03:fb:ef:28:7c:a3:32:9e:ee:6f:30:63:82:76:c8:54:e0:49:
         24:23:d1:c5:a2:1a:6e:2b:61:8a:75:ab:f2:d3:83:0e:af:19:
         cf:ab:43:de:b0:8f:4d:fc:91:6c:4a:ae:73:8a:6b:3e:df:e3:
         cf:68:6a:5d:24:15:3d:15:90:e9:41:23:c9:5b:7a:37:bd:c3:
         af:e7:8f:02:86:00:f4:8a:ef:fa:15:1d:80:e7:3e:44:dc:21:
         6f:32:f9:af:73:6e:17:a8:54:0e:d6:c3:fe:64:de:66:bf:ee:
         e0:74:61:b3:e1:99:a8:21:5a:7b:68:1b:b9:3f:48:e9:f2:cf:
         41:ff:2c:7f:83:ac:fe:fe:0b:c4:63:42:0a:94:e0:4d:c5:9e:
         b7:df:b9:60:bb:f3:b7:ef:e1:8c:40:f6:c5:cd:6a:19:ef:a9:
         57:ec:dd:9e:c8:93:49:6d:7d:7f:05:da:da:32:b2:0f:e7:0e:
         c0:37:e3:de:c0:82:1e:df:f4:12:85:01:b5:22:cf:8c:39:1f:
         f4:5e:41:e4:f5:82:d9:76:af:b1:ac:5a:da:35:9c:60:6a:af:
         2a:52:88:b5:ed:bd:3d:5b:78:f9:0b:da:92:1b:1c:cc:d0:58:
         87:7a:22:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:34:02 2025 by rpki-client