Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/b03d981a-03b9-3f4c-9a11-5afe6a4e15d9.roa
File:                     b03d981a-03b9-3f4c-9a11-5afe6a4e15d9.roa (raw, json)
Hash identifier:          KDf9QU2j5Y2vL53I20S4s3lSo6N434VcLn6gi3ZQD2c=
Subject key identifier:   24:DA:D5:34:16:63:0C:30:01:B9:6B:3E:2C:39:AB:3F:F6:B2:3F:87
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584A7A4B4CF80078608142D19A80
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/b03d981a-03b9-3f4c-9a11-5afe6a4e15d9.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     396422
IP address blocks:        2604:81c0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:4c:f8:00:78:60:81:42:d1:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=52a2f131-ed87-4828-8ada-c672ec7a8139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e2:6d:4e:b8:80:71:3e:94:f7:23:f9:7c:19:
                    80:e9:3b:ea:8d:a9:4a:51:04:27:57:4e:92:12:1c:
                    34:df:9c:85:33:a4:aa:ad:22:93:9d:09:b7:fd:37:
                    25:be:0a:5d:f1:5f:02:3c:b0:af:a0:6d:25:8a:c5:
                    32:1c:78:68:48:99:ac:7d:f3:b2:fb:bc:ec:d9:25:
                    ca:fd:6e:cb:32:d9:09:82:e5:d0:cc:95:4b:50:71:
                    09:dd:12:e3:0a:01:7d:e8:d0:84:56:8d:03:74:0d:
                    42:8a:81:db:9c:c3:7f:6b:a8:73:b5:4c:c5:73:19:
                    7c:6e:c5:94:f8:cd:7c:58:f5:ed:eb:a1:9f:b5:f0:
                    80:bd:78:57:0b:a1:7c:df:b1:94:0e:11:c9:90:5d:
                    66:8a:88:d3:1b:fd:88:67:e5:f8:97:bb:28:f8:35:
                    fe:fa:71:97:48:19:4d:c5:d4:f6:34:4e:ca:99:9a:
                    90:e1:94:b9:ac:c7:0a:54:88:ee:9a:dc:6b:e2:ce:
                    ff:83:6a:bc:36:92:6f:be:41:f9:25:f9:56:a2:07:
                    d8:dd:4a:48:49:a1:7e:2f:b4:b9:38:46:0c:c9:2f:
                    13:1a:d3:f7:36:fa:90:57:4d:cb:cf:25:28:9e:20:
                    d7:8b:42:82:15:9a:1f:10:c3:35:90:ae:6f:f6:e5:
                    68:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DA:D5:34:16:63:0C:30:01:B9:6B:3E:2C:39:AB:3F:F6:B2:3F:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/b03d981a-03b9-3f4c-9a11-5afe6a4e15d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:81c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e3:99:e1:a4:fb:ac:c8:15:74:7b:3e:44:65:72:0e:2f:f8:
         5e:f6:f6:ed:5b:9b:3a:d7:0a:a9:3d:ad:21:35:27:e3:46:a3:
         9b:75:82:4a:85:ca:e0:0a:d9:75:a3:03:00:da:5c:df:6d:dd:
         61:fd:6c:59:d9:0d:11:8c:a2:02:5f:3a:30:06:be:de:92:b6:
         cb:19:ac:fe:c3:45:b6:ba:99:9e:bc:38:52:ee:00:b1:0d:06:
         62:5d:79:9d:00:44:c5:fe:27:22:c6:6f:fa:2b:e5:1f:1d:41:
         4c:a3:5a:a1:ec:20:90:d9:1f:a2:48:83:79:de:38:74:d6:d9:
         4d:6e:f5:df:54:19:ba:38:f5:12:59:e4:06:f3:52:32:3c:d7:
         70:33:e7:db:e0:7c:12:93:c1:e2:7b:86:80:29:30:7c:0c:fe:
         da:e7:c2:52:dd:3d:d9:db:60:8c:d7:64:d8:ab:64:29:6a:bf:
         02:db:25:5b:f7:45:2e:32:54:7c:bd:c9:49:23:ba:01:63:86:
         f0:f5:65:b4:b0:d8:ce:92:dd:cf:8b:6c:4f:4d:88:b2:7a:80:
         07:cf:ad:01:a9:58:21:bb:78:e4:c5:00:6a:a9:92:45:95:24:
         9a:7a:57:ea:2e:fd:db:95:6f:9d:4c:a2:83:72:c7:79:41:ad:
         aa:0e:36:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:16:35 2025 by rpki-client