Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa
File:                     844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa (raw, json)
Hash identifier:          ECmVv3hTqhDSgmTAOPgbLSlUN26k98X+rEFAL3ZRdqA=
Subject key identifier:   BC:12:4C:37:6F:FA:0A:12:8C:50:38:CA:BA:35:A9:8B:98:54:D8:29
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584BABFD05B5B82D75E8041DA380
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     14618
IP address blocks:        2605:84c0:56::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:05:b5:b8:2d:75:e8:04:1d:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=a65ae4b0-f3fe-4bc7-b864-744cda472858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:6e:0e:1c:3b:97:b3:48:82:77:82:e4:f1:
                    67:bf:36:7c:99:29:2e:b5:42:e6:e2:3a:cd:7d:e6:
                    7d:6a:b7:8a:4e:30:e6:68:86:d0:f8:31:1b:8b:37:
                    c9:ec:74:08:1f:f9:7f:67:e0:77:b5:38:06:f5:f9:
                    91:c5:88:ad:ad:49:ed:f0:d6:6f:63:75:e3:99:de:
                    08:93:1b:a9:53:e9:c0:ce:4f:4b:04:a5:db:2e:b2:
                    af:fe:e4:a9:10:ec:a4:9a:5a:80:c0:c5:79:15:3c:
                    04:6a:8f:99:74:32:4f:59:fa:55:3d:9d:97:14:90:
                    22:76:aa:6c:e9:76:51:cc:63:6f:51:5a:53:c4:8d:
                    ee:7a:60:d9:d1:65:11:e7:ca:f4:7f:8f:5e:bd:33:
                    da:fe:4a:51:dd:c4:6e:aa:9d:3f:ba:96:b5:f4:53:
                    32:f9:c6:1a:05:95:0e:d8:88:82:70:67:e6:d4:03:
                    e9:da:44:7f:89:55:dd:c8:68:d5:a1:f8:0b:a0:4d:
                    21:15:f4:74:be:da:73:cc:a3:04:42:9d:73:a1:07:
                    80:f0:79:6e:23:86:62:18:be:73:5a:64:75:5f:0e:
                    51:5c:8b:42:b2:98:33:bb:dd:eb:ae:24:d5:18:0e:
                    9d:b2:0b:10:74:3c:0b:5c:5f:c2:31:12:52:2a:35:
                    fb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:12:4C:37:6F:FA:0A:12:8C:50:38:CA:BA:35:A9:8B:98:54:D8:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:56::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:5b:d4:11:90:8b:e1:7f:60:7a:cc:85:59:1f:cc:25:77:1d:
         dd:14:12:a7:67:34:6f:e8:af:01:e9:d8:bd:1d:18:8a:a6:3d:
         a6:db:a5:80:2f:56:74:de:be:c0:64:20:51:27:15:7e:66:63:
         9a:2a:82:31:c1:8d:05:43:f7:49:3b:40:7a:f5:72:ff:2f:4d:
         be:2e:f2:8a:e3:ee:a2:0f:2a:a3:19:4a:30:9a:d2:63:c9:4b:
         43:12:ba:39:46:16:8b:bc:59:a4:e8:a0:0f:3d:b8:06:0a:2e:
         47:d1:e0:cf:08:0e:ad:60:ac:44:da:c6:e0:f3:a6:e9:7b:53:
         5e:0d:40:eb:da:47:60:f4:d1:07:5a:73:43:0e:b7:db:bd:c3:
         a6:9c:f1:bb:fe:bc:8f:67:b1:06:4c:5a:d9:1a:b6:e0:04:64:
         d6:16:d6:2a:0e:e7:ea:ec:b0:92:6f:36:14:f1:05:2a:1c:31:
         86:11:31:71:48:f9:44:e4:5a:c9:4c:ed:3e:af:64:f9:b7:41:
         5b:21:23:30:80:6b:97:65:ab:77:03:36:29:66:92:8f:9e:cb:
         15:c3:28:e5:96:c4:8b:bf:fd:99:16:b7:e7:b8:d2:3d:0b:5b:
         48:31:76:cd:d0:d2:fb:2f:1b:c5:09:53:14:d8:f9:71:e8:41:
         26:27:b1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:37 2025 by rpki-client