Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/a6d68c1e-9961-33a5-b8a2-3e917f115c56.roa
File:                     a6d68c1e-9961-33a5-b8a2-3e917f115c56.roa (raw, json)
Hash identifier:          Gs1e/eI7qU+kQUKsBaFa9n7F4wv0pj/N3hPdiWU1RJo=
Subject key identifier:   48:BD:0A:97:FB:FE:B8:E3:85:13:8C:1A:74:49:AA:D4:75:B1:40:59
Certificate issuer:       /CN=58d440e8-959f-43ab-a410-371a599ce552
Certificate serial:       010D0C9F4328584AB91BB3B750F727B0C60E9B80
Authority key identifier: FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/a6d68c1e-9961-33a5-b8a2-3e917f115c56.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     26806
IP address blocks:        2620:f6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:b3:b7:50:f7:27:b0:c6:0e:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d440e8-959f-43ab-a410-371a599ce552
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=598e0c93-52f6-430c-8917-d789352d7d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:24:2f:8a:9e:9b:82:e2:3f:c5:2e:2c:95:34:
                    06:95:3c:84:93:e0:fb:2d:c7:55:2e:6a:8b:50:05:
                    55:0d:63:7a:49:51:33:8e:75:c0:3f:fe:7d:34:03:
                    91:df:a0:e8:f2:63:d4:28:93:d7:75:46:8a:24:34:
                    d3:14:d2:57:ad:b4:e1:4b:7b:83:e5:88:dd:69:66:
                    6a:bd:05:05:e6:97:2f:1c:2f:91:c6:bc:e8:c0:e6:
                    47:ea:2c:30:84:c5:2b:19:01:9f:a9:69:20:0d:f6:
                    ee:7e:1d:1a:47:f5:b3:4b:0d:f5:11:37:ae:97:82:
                    7d:03:b9:b2:db:7a:4d:b4:0e:c9:27:f7:19:30:04:
                    e8:58:b2:45:33:ce:54:98:ea:c1:ea:47:76:f4:09:
                    b7:2d:a0:cd:96:49:00:6d:35:d5:c6:3b:a5:b1:e1:
                    b8:28:ad:19:49:91:7f:2d:a1:22:e7:86:5b:29:0d:
                    b2:a4:83:37:ff:5d:45:59:88:d0:37:54:7b:a0:d4:
                    56:fa:25:1f:93:48:a5:c9:63:99:02:69:46:0d:2c:
                    9d:d0:0f:f8:6a:27:d7:a8:57:1d:f1:e5:cf:e2:e0:
                    2d:f7:9b:ce:2e:80:a5:a2:d0:90:4a:c9:dd:8f:ec:
                    af:3c:d2:9a:f2:30:61:b3:ac:a4:b7:c9:fc:00:24:
                    f7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BD:0A:97:FB:FE:B8:E3:85:13:8C:1A:74:49:AA:D4:75:B1:40:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/a6d68c1e-9961-33a5-b8a2-3e917f115c56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl

            X509v3 Authority Key Identifier:
                keyid:FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:df:4f:c7:27:bc:6d:15:06:b9:cb:9c:9b:de:b5:eb:cb:05:
         c5:67:6b:8f:9b:9f:66:35:98:60:b2:0c:78:f7:e4:2e:16:91:
         80:51:3b:93:54:d2:ef:69:e5:ad:25:dd:0f:0e:a7:4a:46:fd:
         55:01:c4:59:91:bc:f9:ae:84:2f:ba:33:68:b3:c9:97:ad:8c:
         bd:2e:c1:48:ee:a3:82:6b:9a:7d:84:03:7a:4d:cb:99:f8:4e:
         0b:47:58:d3:a7:18:58:54:7d:76:ba:61:f3:42:d6:95:47:a6:
         48:ef:ed:ef:d2:ca:15:49:ca:2a:c5:3d:15:f8:6b:a8:9e:77:
         66:8a:07:70:cc:9b:79:d1:47:ad:64:98:d6:e2:d2:21:b5:07:
         2d:69:a5:d5:1c:c0:64:66:b8:b7:86:ef:0c:22:0d:45:aa:50:
         8d:29:2e:16:d5:c3:6d:8e:01:fe:f2:cb:da:e6:f4:01:b3:ca:
         e4:99:46:e2:f6:26:5b:b3:41:e2:21:87:2e:a2:a6:3e:cc:b6:
         33:41:d3:09:ef:ba:7d:a4:df:33:d7:b8:77:8f:55:16:64:53:
         d3:fd:07:83:da:ab:8f:62:eb:9f:5e:58:6c:a2:3f:f2:15:7b:
         cf:55:0d:b0:df:4f:a1:43:41:60:dd:30:71:a8:9b:68:2d:03:
         40:0f:a3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:56:51 2025 by rpki-client