Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/9e746b82-f44c-3dcd-8d17-a05ea722ae71.roa
File:                     9e746b82-f44c-3dcd-8d17-a05ea722ae71.roa (raw, json)
Hash identifier:          nRa4XgrHefaYcOiO7ZVyVERmWSuGf1Ug2OXsgKA3UQA=
Subject key identifier:   1A:1A:06:32:D0:5E:26:0F:25:7B:F1:AA:6B:8E:3A:82:89:91:02:D2
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F4328584BB88D2B441699BAC4DAA1D880
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/9e746b82-f44c-3dcd-8d17-a05ea722ae71.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        2607:28c0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:2b:44:16:99:ba:c4:da:a1:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=cad2e4a0-50ec-4d0a-ae4a-6b36057c5b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a9:2e:c2:fa:01:ac:8d:fb:22:25:d5:ab:69:
                    ba:9e:f6:a3:e0:44:be:9c:2e:4d:c7:3d:c9:bb:a3:
                    b7:31:8b:ae:52:8a:27:10:a5:4b:b5:d3:22:ec:83:
                    1b:3a:54:13:0b:2d:53:67:69:96:98:49:30:80:84:
                    1b:5d:96:e3:40:6a:61:89:85:52:09:81:be:a6:10:
                    d1:d0:3b:98:88:ea:95:09:85:a0:bf:9b:a0:59:a6:
                    ab:06:5c:27:d4:34:99:1d:2f:f9:e7:fd:dc:18:2b:
                    1d:fb:b1:d0:2a:c7:75:3f:69:03:18:31:0c:c5:ef:
                    d6:f4:86:dc:f9:5b:ff:90:9e:98:42:87:ef:c1:20:
                    15:d7:21:4a:3c:07:76:79:4e:db:e2:d5:14:9f:38:
                    c5:7a:48:d5:3e:f7:18:19:9b:19:21:e7:cd:49:25:
                    5e:8b:b9:da:cc:91:fa:d2:ee:ed:b6:b2:e3:7c:43:
                    79:5b:ba:2d:b5:1b:e2:a3:50:2d:63:2d:ee:e5:1d:
                    24:d9:b7:55:01:46:b0:07:6c:0f:66:58:f9:89:df:
                    8b:ea:75:94:62:8a:b0:54:fc:88:4b:b5:ab:50:6a:
                    8b:ac:5a:44:ab:7e:33:3c:11:3e:7c:66:5f:56:45:
                    68:f7:31:d0:03:72:ec:1b:69:f2:a2:e3:b8:85:01:
                    f3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1A:06:32:D0:5E:26:0F:25:7B:F1:AA:6B:8E:3A:82:89:91:02:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/9e746b82-f44c-3dcd-8d17-a05ea722ae71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:28c0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:aa:13:27:b8:a1:44:a0:11:09:fe:8b:2c:23:07:90:74:1a:
         ca:e1:ac:e0:f6:8a:62:ab:12:82:89:d1:da:5f:8c:68:15:26:
         4e:9e:15:d5:f1:20:13:68:f4:ae:fc:be:f5:98:da:3f:ff:6c:
         02:04:a1:26:c7:12:82:77:35:78:17:12:35:bd:6a:95:b5:e3:
         84:1c:b6:3c:83:14:d3:e9:20:05:05:ef:2e:c3:af:a9:54:39:
         de:1f:07:4d:52:df:4b:a7:a8:fc:dd:c5:36:f4:37:d9:d5:d1:
         4f:91:07:36:0c:03:dd:51:37:49:98:00:fd:00:6c:c0:2e:53:
         6c:e8:dc:1d:54:e1:61:68:50:24:df:60:ca:ad:c9:a5:fa:e7:
         f6:e6:f8:9b:f2:29:81:ee:e7:c2:88:38:24:fd:cf:27:4d:a8:
         80:77:b7:54:6c:73:c0:a4:a0:3e:57:39:0a:e5:10:6f:ed:9b:
         84:f6:c5:0a:70:d9:dc:5a:7d:c9:ae:9c:c6:6a:da:ce:dc:f3:
         8f:7a:89:bc:30:ce:53:19:92:a7:f6:06:c8:10:ff:d0:d0:64:
         fa:76:b5:10:0e:8b:b6:bc:88:c5:e8:2b:b6:a2:62:e8:f1:f1:
         0b:2a:eb:02:e6:4a:10:b0:95:ea:98:4f:bf:4e:01:3c:e3:a1:
         be:3f:4b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:21:48 2025 by rpki-client