Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530/bd3920e6-0520-30ba-9755-79cf833a409c.roa
File:                     bd3920e6-0520-30ba-9755-79cf833a409c.roa (raw, json)
Hash identifier:          Pq+oeFrDTJ+hJDdafZ/K8nECrQFj24oPj9HaTp4xAys=
Subject key identifier:   92:29:95:64:21:9B:39:CC:1B:70:FE:8F:9D:95:7A:9D:C9:BB:1B:6A
Certificate issuer:       /CN=86344825-5da6-48ae-b81f-d48fcd164530
Certificate serial:       010D0C9F4328584B9E07D44A4E59F06EDFEEFCB0
Authority key identifier: 39:3A:49:A7:FD:F4:63:75:AD:51:EF:D5:B1:AD:8E:1C:DF:C5:DF:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530/bd3920e6-0520-30ba-9755-79cf833a409c.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     62893
IP address blocks:        2606:1840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530/86344825-5da6-48ae-b81f-d48fcd164530.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530/86344825-5da6-48ae-b81f-d48fcd164530.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:d4:4a:4e:59:f0:6e:df:ee:fc:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86344825-5da6-48ae-b81f-d48fcd164530
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=f2778bd0-2e95-4256-be68-920a3fa1d1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:da:03:81:68:53:ed:3b:7f:20:3d:4c:66:e6:
                    98:67:96:30:4b:60:50:13:3e:18:7e:ef:a7:80:3a:
                    b1:3e:a3:cf:0e:bd:4c:9e:27:d7:ae:02:0d:bf:e1:
                    2e:c9:9a:32:e5:1b:98:05:88:a7:7e:82:62:cf:4e:
                    b0:ab:f7:8d:ff:da:3d:15:eb:30:98:c3:eb:62:6e:
                    e8:11:82:0f:33:ff:35:42:bf:13:9b:82:7f:70:0f:
                    e6:ee:7d:c4:65:d2:5e:6a:13:07:4a:bc:f8:4b:f8:
                    b1:76:39:da:cd:7d:7c:71:df:de:06:84:a9:5d:74:
                    4a:41:dd:34:2c:81:e6:6b:11:bc:ef:ca:20:7c:39:
                    0e:8b:ed:62:9a:3a:56:3e:49:cf:b8:8e:11:b1:cd:
                    5c:9e:25:75:9c:bc:7b:e9:e9:1d:d2:b6:8e:d3:e7:
                    0a:fc:2f:21:47:6e:c1:f8:05:1e:66:cd:98:7e:cf:
                    8f:44:70:80:bc:96:53:ef:46:09:71:5a:76:f1:54:
                    1e:91:33:01:85:8b:44:c4:00:5a:92:79:48:d7:5d:
                    1d:2a:67:f0:40:02:30:dd:ec:9e:37:d9:c4:8a:29:
                    8e:97:94:1c:14:ae:83:1e:9e:87:2e:ff:4d:20:3f:
                    f0:8a:9e:36:73:33:3b:69:81:dc:6a:10:5d:13:08:
                    cf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:29:95:64:21:9B:39:CC:1B:70:FE:8F:9D:95:7A:9D:C9:BB:1B:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530/bd3920e6-0520-30ba-9755-79cf833a409c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530/86344825-5da6-48ae-b81f-d48fcd164530.crl

            X509v3 Authority Key Identifier:
                keyid:39:3A:49:A7:FD:F4:63:75:AD:51:EF:D5:B1:AD:8E:1C:DF:C5:DF:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86344825-5da6-48ae-b81f-d48fcd164530.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:0f:2e:ad:e9:4b:be:0e:c9:1d:5b:81:1a:56:29:4c:56:a3:
         65:1e:a0:12:93:79:af:bd:46:64:ff:6a:d8:5e:4d:48:28:7c:
         42:77:24:07:41:bc:14:d5:6e:e6:21:c5:0b:a9:a7:91:c9:90:
         f6:68:53:46:46:1d:ef:f5:4f:be:1d:d6:7a:0d:69:1e:bd:6f:
         2e:5b:43:b8:63:75:5d:2e:a6:a2:b0:29:6d:e0:3c:48:d7:d0:
         1a:10:ba:2c:4f:8a:b7:13:05:19:1a:4c:e6:fc:af:3c:4b:41:
         93:bb:bb:ba:70:2d:96:f8:c3:93:db:e8:5e:00:ae:e9:96:6b:
         b6:3a:4a:81:c0:67:73:f5:48:96:5e:b7:e7:bc:30:ac:07:4b:
         19:ce:7d:11:ed:af:8a:89:04:92:27:c2:1d:99:64:4c:3f:bf:
         b6:89:eb:ff:e9:21:eb:67:27:d0:e9:ea:d7:e7:ea:33:70:ec:
         be:cb:4e:5a:7e:4e:a2:b4:39:30:45:aa:85:c7:43:6d:6b:0f:
         bc:d0:8b:82:cb:94:9f:60:30:46:80:40:dc:2d:00:20:0f:c9:
         b4:e8:20:c9:6c:88:7b:47:b7:40:d8:9b:52:97:c7:3c:2d:f4:
         eb:d8:1a:fe:b2:e8:12:13:bf:0c:4c:3a:05:f8:e6:99:6b:23:
         e3:e4:bc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:50:14 2025 by rpki-client