Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/6a4b8ec7-3ba0-35d8-9b5f-88ad07235add.roa
File:                     6a4b8ec7-3ba0-35d8-9b5f-88ad07235add.roa (raw, json)
Hash identifier:          FXAvwqrFbR2H3L4tUAJM0T7AYx95/3MAfbojR7IL9+w=
Subject key identifier:   D1:E1:29:BB:B7:8B:B8:46:42:9F:F1:16:06:8B:07:0B:D9:DF:B2:C7
Certificate issuer:       /CN=55e7b8e0-0df5-4481-84e4-83619b05f966
Certificate serial:       010D0C9F4328584BBFA5934829AF380554E47680
Authority key identifier: 61:AA:90:72:0A:BC:38:A3:EE:E2:A2:55:8A:C1:C0:63:76:26:67:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/6a4b8ec7-3ba0-35d8-9b5f-88ad07235add.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     16509
IP address blocks:        2606:ec0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/55e7b8e0-0df5-4481-84e4-83619b05f966.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/55e7b8e0-0df5-4481-84e4-83619b05f966.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:93:48:29:af:38:05:54:e4:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e7b8e0-0df5-4481-84e4-83619b05f966
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=8b1399b7-e603-4fd3-bc5b-34160b8a4dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:34:ce:7e:df:30:b9:94:99:25:1d:3b:b0:cf:
                    26:80:f2:fd:5c:9f:77:e5:47:c2:c1:28:e6:8c:cb:
                    f7:fc:be:9a:77:6e:a3:d9:79:2b:9d:e5:8b:98:4e:
                    e0:ce:ed:23:47:3d:bd:50:9e:ae:7d:63:da:64:24:
                    d4:55:d1:9d:58:f2:83:57:fc:4f:c5:31:33:b2:42:
                    17:96:26:f2:10:d2:57:5b:be:32:73:07:fb:66:12:
                    06:11:c4:6c:c0:62:0d:c8:9b:8f:46:45:05:d7:9d:
                    db:f7:37:66:f8:08:54:cc:39:6c:4e:c1:06:a4:7e:
                    18:53:99:95:21:de:9b:99:77:5a:d7:c4:28:44:b5:
                    ce:de:30:1e:15:8d:cc:57:b7:d7:1b:b9:76:5d:4b:
                    f2:d5:8e:27:6a:3e:f5:d1:cd:56:a3:ce:6e:8d:52:
                    74:3f:d6:0b:a8:63:0a:44:90:42:47:49:8b:84:54:
                    dc:73:68:eb:0f:63:3b:93:9e:21:a8:31:46:d1:36:
                    81:0d:45:36:00:db:d3:2f:84:e6:fd:d7:9d:bb:af:
                    c6:08:f8:90:25:2e:61:8a:e3:2e:f0:dc:7d:50:b4:
                    33:fa:a9:11:f8:df:1d:00:b7:89:54:ff:f2:fa:12:
                    b4:a4:39:10:76:17:e1:00:cc:5d:6b:92:3d:b1:31:
                    70:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E1:29:BB:B7:8B:B8:46:42:9F:F1:16:06:8B:07:0B:D9:DF:B2:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/6a4b8ec7-3ba0-35d8-9b5f-88ad07235add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966/55e7b8e0-0df5-4481-84e4-83619b05f966.crl

            X509v3 Authority Key Identifier:
                keyid:61:AA:90:72:0A:BC:38:A3:EE:E2:A2:55:8A:C1:C0:63:76:26:67:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55e7b8e0-0df5-4481-84e4-83619b05f966.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ec0:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:74:de:6a:97:92:5b:76:0d:16:e4:a8:83:78:de:d2:87:a6:
         34:06:53:7b:5c:f1:e2:91:8c:73:1d:e7:4d:dc:f7:dc:22:40:
         da:60:42:7b:31:c6:cd:5a:30:27:10:de:a0:b8:99:0d:bf:21:
         f7:39:7b:7b:05:6c:eb:1b:8a:bd:59:db:ee:66:be:30:9c:bf:
         fa:66:66:b9:12:52:73:46:eb:c3:1d:fd:1f:45:ae:89:8b:f4:
         c4:63:1a:fe:e5:f9:8b:3b:55:d8:20:85:b9:74:6a:29:27:15:
         cc:93:c6:52:1f:5a:15:ab:a2:b5:bc:98:1a:a8:7b:e2:4b:68:
         f4:85:6f:74:bf:a3:ef:43:3a:dd:0b:99:c0:3a:a8:2e:49:5e:
         e6:03:b9:f2:a9:94:bc:e1:e3:14:dc:16:85:37:51:79:a1:4d:
         3b:80:67:16:70:45:bc:9a:d4:e4:b8:c0:01:51:d8:b5:96:de:
         5a:75:52:a5:1f:45:51:0a:84:de:5f:9a:c5:cc:fd:61:3a:65:
         0a:f4:79:14:73:86:d0:70:30:e7:a1:f4:3e:fd:6d:53:2e:f7:
         ae:18:84:37:2d:bc:70:f4:d2:e5:b0:d5:b5:7b:e3:20:87:33:
         68:49:c8:5d:83:5a:31:76:c1:c5:7e:71:53:7e:cb:3f:09:96:
         3d:1b:83:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:22 2025 by rpki-client