Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/9897673b-da30-342e-a2ae-a0611cdcd3b3.roa
File:                     9897673b-da30-342e-a2ae-a0611cdcd3b3.roa (raw, json)
Hash identifier:          PS++bRNt2zbL8vxIz+gX0JDMzL+wqvszOF5zLlJZOiw=
Subject key identifier:   4C:11:4D:B0:A1:60:B8:84:F2:69:BF:9A:E9:B8:38:B2:20:23:71:DE
Certificate issuer:       /CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
Certificate serial:       010D0C9F4328584B99D7A4AB7F875E1C68E6BC00
Authority key identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/9897673b-da30-342e-a2ae-a0611cdcd3b3.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     27419
IP address blocks:        2606:2f00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:a4:ab:7f:87:5e:1c:68:e6:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=5f3e2000-e528-4697-b83b-7607aa63b47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:89:9f:3a:96:6a:5c:9b:f5:c3:85:88:b2:d2:
                    03:93:f0:6e:b3:00:06:15:93:d4:af:81:2b:73:c5:
                    d1:f8:a9:dc:f8:60:21:47:cd:c6:2c:fa:43:c7:80:
                    2d:15:23:a2:b4:7b:82:68:b0:4e:f8:b1:59:35:05:
                    a9:4c:1c:e6:ef:72:b7:45:a0:8f:dd:e3:c4:31:14:
                    41:87:63:b9:fe:0d:b8:22:cc:04:20:74:3e:21:12:
                    e9:1d:85:27:4e:b5:ae:a2:24:d6:40:ed:2d:a4:82:
                    f2:3c:86:6c:2b:90:ae:87:37:74:fc:c9:9c:ef:9c:
                    a9:ae:71:81:e3:8f:99:e1:d4:c8:13:5a:0f:39:51:
                    82:8a:03:81:79:cd:03:25:68:eb:9d:98:c2:45:ea:
                    9a:09:cc:02:2e:72:3b:d3:c9:e9:14:8b:00:59:f7:
                    35:34:b6:a7:ca:5f:71:43:b7:f1:15:ce:9e:3f:bb:
                    b6:a2:55:42:cc:5f:fc:94:65:62:38:78:cb:fe:29:
                    e2:8c:fd:95:c7:47:e5:11:b9:3e:54:5f:41:5e:40:
                    be:5d:81:a3:ad:32:a3:22:f0:6e:ae:14:23:d2:d6:
                    7c:81:5d:d3:72:29:4f:fb:91:12:8e:cf:35:02:f8:
                    70:ca:aa:b0:97:5a:73:d7:8d:3e:5b:e9:a7:ff:a0:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:11:4D:B0:A1:60:B8:84:F2:69:BF:9A:E9:B8:38:B2:20:23:71:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/9897673b-da30-342e-a2ae-a0611cdcd3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl

            X509v3 Authority Key Identifier:
                keyid:E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:6b:90:a7:7a:68:85:1f:7d:6f:7d:aa:3f:d1:23:6f:70:5a:
         d2:af:1f:2c:9b:f2:ba:3b:72:46:de:68:86:0c:1a:10:5d:aa:
         21:df:3d:3d:73:de:a4:3e:8d:b4:ea:04:d8:bf:4b:7e:e1:05:
         5a:39:54:75:ab:5f:ad:6e:c4:73:b6:cb:b4:7a:b5:09:97:47:
         f3:14:33:be:46:78:6c:d1:4f:bd:22:ab:7d:99:20:b2:eb:22:
         14:df:95:99:35:f5:62:01:2c:d1:90:ed:2a:b6:56:93:3a:ab:
         96:08:81:f9:39:35:62:af:90:81:af:28:48:5b:de:b4:ef:f5:
         db:a8:5b:2f:7c:b8:c0:87:00:6b:da:e4:34:7a:29:bf:14:02:
         58:ab:1b:f3:10:8a:00:2d:80:82:97:d4:a0:4f:bf:d7:ed:c5:
         16:a6:c9:2f:25:39:bd:8e:e3:a4:78:1a:61:fb:68:4b:6d:c2:
         7f:24:2f:81:d4:54:57:76:86:89:07:93:5c:36:49:91:6e:e7:
         91:18:1a:55:1c:39:64:74:56:fc:ff:b0:0a:b3:ae:cf:5c:d1:
         46:36:99:5e:a6:b6:7d:88:57:c3:1c:8d:2b:d3:f8:5d:4b:f4:
         1b:94:23:09:6b:f3:6b:66:fb:9c:fd:cd:30:87:6e:97:8e:bd:
         20:22:24:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:30:53 2025 by rpki-client