Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/c16832b7-2101-3bc4-80fc-37dffcf83679.roa
File:                     c16832b7-2101-3bc4-80fc-37dffcf83679.roa (raw, json)
Hash identifier:          Wg9Ro8RLaO02uAyqC9H2xIR1Uah9zbHqyYyNoTebsRU=
Subject key identifier:   70:0E:EF:5B:0A:23:32:EB:01:9A:2B:DA:F1:E4:45:1C:2D:08:55:D4
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584BABFD05C826A7111A4D551C00
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/c16832b7-2101-3bc4-80fc-37dffcf83679.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     14618
IP address blocks:        2605:84c0:57::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:05:c8:26:a7:11:1a:4d:55:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=d37c9017-4c27-4e71-9aa7-9f4ae977a575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:77:54:da:a5:55:2f:7f:1b:56:28:63:c6:05:
                    2b:1b:6f:94:27:3d:c4:f6:d6:3c:75:a8:d9:1d:cf:
                    4b:0b:ce:2e:6a:25:b5:88:95:39:d5:fe:e8:c5:06:
                    74:a0:43:43:9c:fd:31:af:9e:fe:83:49:e3:ce:b7:
                    c5:bb:0f:06:94:aa:77:e8:04:bf:31:7b:e4:41:d7:
                    f5:b7:8c:71:2c:3c:c4:b7:7e:57:79:a6:bc:f0:d0:
                    f1:b7:f6:e5:c0:6a:c9:b3:e7:90:41:5f:b7:12:08:
                    5d:f6:c6:51:9e:ff:8a:cd:9f:ff:63:aa:26:a8:b3:
                    37:c9:c7:b3:e5:3e:bf:fb:9b:3a:c8:5b:c9:45:9e:
                    f3:78:a8:de:04:c2:8c:da:fd:15:ed:b4:11:5f:99:
                    c9:49:28:a4:00:a8:d5:f2:49:fe:22:f5:81:2c:09:
                    4e:8b:1c:dd:75:bf:d2:c9:2e:0b:06:e2:ae:dc:47:
                    0e:2d:2a:cb:82:0d:bc:22:d6:c0:78:0f:1e:70:35:
                    6f:11:3a:ec:64:dd:98:17:cf:e4:2a:95:6c:52:a4:
                    da:54:de:1d:e8:8e:aa:89:97:d7:b0:34:97:45:a7:
                    f0:9d:b8:5b:a3:f4:26:e8:6f:73:3d:f6:cd:0c:e3:
                    59:fc:11:99:30:72:48:dc:02:1a:39:3b:ac:87:5b:
                    01:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0E:EF:5B:0A:23:32:EB:01:9A:2B:DA:F1:E4:45:1C:2D:08:55:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/c16832b7-2101-3bc4-80fc-37dffcf83679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:57::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d1:76:b4:d8:74:c6:1e:c3:9f:e2:bf:03:80:f9:bf:56:27:
         3e:7b:3c:6b:2b:18:8b:66:35:8f:23:80:ee:4e:cc:48:85:6c:
         0d:d5:b4:f9:d3:d9:dc:cf:d9:da:b6:32:14:a2:a2:9c:c9:3b:
         8e:ba:6e:cb:89:22:bc:7f:a5:62:49:df:cb:2c:82:d1:1c:09:
         c9:0d:97:89:f0:77:9e:19:f4:57:79:72:2b:2b:b3:06:19:91:
         95:ae:53:5f:c5:11:6d:c3:13:eb:94:27:2f:e0:73:79:89:1d:
         1f:0c:c8:e8:e1:96:95:a0:2a:6d:ae:90:5d:a3:d4:29:b9:eb:
         e3:58:d2:00:54:c0:9e:72:14:a4:bf:60:bc:e1:2f:bf:5d:92:
         41:41:7a:56:51:54:82:72:83:b3:c0:87:f7:96:57:b4:06:81:
         67:94:89:b4:43:3a:fd:19:f6:45:60:23:a5:22:2a:d9:f0:ea:
         72:59:86:95:2b:19:d2:4e:c2:44:26:55:79:cd:4c:6d:61:ee:
         3a:a2:24:0b:9e:ed:aa:53:c3:65:cb:c8:e1:cc:77:8d:72:7c:
         dd:9e:f3:1d:d3:36:6b:b0:ca:f1:15:97:e3:36:39:d6:41:c2:
         8b:e5:49:8b:bd:3b:b7:84:80:df:0a:36:27:51:4a:b7:ad:1e:
         d7:a2:18:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:27 2025 by rpki-client