Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/4ad6dc61-117c-3576-b88f-7d6609adee38.roa
File:                     4ad6dc61-117c-3576-b88f-7d6609adee38.roa (raw, json)
Hash identifier:          bqcUbWgvL9MV+RkThO+xbmyDtLZft2XTYdgtg88SAOY=
Subject key identifier:   30:7C:39:4C:71:8C:DD:B5:F1:21:35:B6:D0:AE:29:48:04:36:73:B9
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584AADF104817F19156D75826F80
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/4ad6dc61-117c-3576-b88f-7d6609adee38.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        2605:84c0:cc1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:04:81:7f:19:15:6d:75:82:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=850f5f02-126d-461b-b7fc-fac39ca47d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fb:08:11:4a:01:3a:1f:fa:f7:96:1a:11:79:
                    af:f9:c0:a2:1a:d3:39:08:2c:e2:66:29:c5:46:22:
                    50:eb:11:93:bd:f0:37:56:e5:56:2d:bb:5b:57:c0:
                    8e:c3:ca:0a:87:13:ba:12:4d:bf:06:12:75:36:22:
                    60:5d:64:44:7f:3d:7d:56:68:87:fc:12:47:db:b3:
                    5a:83:03:ce:b8:06:3a:9d:b3:aa:46:e9:64:44:31:
                    98:9a:66:24:e5:76:5f:a8:76:bf:db:7f:7e:3e:02:
                    a6:84:aa:78:f6:92:d2:4c:f9:12:97:39:0f:24:06:
                    eb:68:44:c9:f4:d8:af:d5:ba:98:7c:4c:91:b4:2d:
                    b5:12:25:1d:00:dc:b4:0a:b9:04:c7:ac:0c:31:ff:
                    7c:82:90:d4:75:eb:fe:4e:60:32:f5:ef:b9:93:2b:
                    98:e3:0e:1a:a2:c6:ce:a3:cc:3b:f6:c5:57:55:90:
                    88:e2:64:17:4c:1e:e6:65:1e:29:c4:7f:31:6d:c4:
                    4c:45:a0:c2:11:9e:74:6c:76:f2:40:d8:59:a3:07:
                    fa:a3:b9:d5:88:8e:d0:8e:18:7e:0e:ca:18:fb:39:
                    0f:8f:16:39:60:10:88:8a:4c:c2:ab:06:01:28:b4:
                    a6:5f:81:73:c6:3b:4f:7a:32:18:ae:ef:5b:69:7d:
                    68:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7C:39:4C:71:8C:DD:B5:F1:21:35:B6:D0:AE:29:48:04:36:73:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/4ad6dc61-117c-3576-b88f-7d6609adee38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:cc1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:45:be:05:4c:80:6c:b9:6a:81:27:6f:55:c6:4f:64:43:60:
         bd:54:db:ac:4c:ec:fb:80:00:69:cd:65:f0:4e:45:60:da:8d:
         ee:26:95:0b:4f:fd:c8:a3:5e:82:03:bd:aa:c9:9a:e3:7a:1b:
         3e:ed:8a:09:83:8b:cc:ea:42:47:cd:30:96:6f:3b:ec:57:ba:
         c2:84:52:a3:93:82:bb:d4:9c:85:35:7a:73:bf:73:01:ec:68:
         6d:41:19:cf:39:06:09:cb:21:2f:13:81:3d:6b:5b:e1:fe:73:
         b8:bd:44:be:06:1b:bf:33:50:9f:61:01:49:eb:c2:fb:e3:d5:
         27:2b:fc:94:9b:1f:7e:2b:e6:c3:13:e2:09:38:d6:6c:94:3b:
         21:b7:d8:88:45:6d:80:c7:5a:a5:10:3b:eb:ec:5c:2d:84:df:
         04:47:b4:68:02:ac:62:d3:92:5d:17:93:c9:69:21:18:f2:f6:
         7b:0f:75:e9:ad:e1:60:10:a3:3d:b8:1a:d2:d3:b2:16:d4:bc:
         cc:fe:f4:a6:43:37:f0:78:50:e9:ea:59:0e:b4:9a:0c:83:7c:
         ef:25:b4:f7:54:7f:7b:17:9f:fe:7c:6d:ff:02:d7:03:bf:3f:
         42:29:c1:3a:68:29:dc:5e:88:b7:ce:ca:2d:2e:44:bb:9b:84:
         0f:d5:47:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:51:01 2025 by rpki-client