Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/e3f4cef0-f3d0-3420-b375-1fcfb36fde52.roa
File:                     e3f4cef0-f3d0-3420-b375-1fcfb36fde52.roa (raw, json)
Hash identifier:          gwWuy48ilSxVKJZAuEGBzuvrStzbTOaaEvpzbmnpys4=
Subject key identifier:   F9:32:02:39:2D:C4:76:F7:5F:2E:94:4A:1B:4A:96:DC:47:4E:53:83
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584AADF10492442DD6806042D3C0
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/e3f4cef0-f3d0-3420-b375-1fcfb36fde52.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        2605:84c0:cc1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:04:92:44:2d:d6:80:60:42:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=c73ce75f-9d45-4a6b-bea9-33bf74d477f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:a9:41:ae:9b:8e:3b:cb:1e:d3:5d:a2:28:
                    86:06:2f:a7:b5:09:ed:e8:f2:ac:fe:1b:ee:7b:9c:
                    59:8b:de:ea:ef:37:3b:78:61:40:08:fc:36:74:fd:
                    00:47:da:d5:0f:25:89:64:73:e5:e5:6d:34:4e:1d:
                    fe:8b:f0:98:68:57:d6:06:d1:1f:3c:49:23:2e:f7:
                    a3:d7:e9:41:d7:1d:35:48:88:fa:aa:94:dc:96:6d:
                    45:eb:bf:03:e9:ee:67:09:8c:be:a3:4f:eb:1d:7a:
                    c5:fc:26:5a:a6:95:9e:fa:8f:71:bc:a2:dc:a9:14:
                    ce:eb:ed:91:6b:06:ce:7d:96:d2:11:e3:6b:04:7d:
                    4f:b4:c0:9a:b9:be:55:15:69:09:9f:73:fc:c1:b9:
                    b3:f1:69:53:2e:8d:7c:34:a2:77:ff:e5:27:98:9a:
                    c7:3b:ec:e3:20:20:9d:89:e2:e2:f0:7c:f4:a3:d1:
                    f3:27:cf:2b:36:a4:19:39:e3:fb:2b:bb:ae:d5:94:
                    84:12:47:fa:9c:e6:fa:77:96:89:b0:e4:af:39:57:
                    bd:4e:29:6f:72:7f:e3:02:df:77:e8:aa:90:02:46:
                    f9:c8:b7:c8:93:71:3d:d6:73:ea:a2:35:56:5f:c2:
                    25:2e:17:11:5c:81:5d:ba:4d:97:f2:9c:ec:a4:5f:
                    3a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:32:02:39:2D:C4:76:F7:5F:2E:94:4A:1B:4A:96:DC:47:4E:53:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/e3f4cef0-f3d0-3420-b375-1fcfb36fde52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:cc1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:4d:0b:cf:b8:98:ce:bf:1e:67:16:ae:1a:0e:d7:1b:ca:7a:
         4c:67:52:0f:0c:63:db:ce:b0:c0:a8:9d:51:e7:48:44:06:95:
         2b:c0:a7:20:94:d5:0a:8a:0f:fd:b8:a8:79:ab:d0:7f:61:ca:
         6a:a2:99:59:1d:bf:55:83:2d:cf:a7:fa:1d:0e:3d:02:ae:6d:
         8b:d5:8a:ea:39:2f:13:10:f9:a5:c5:be:fa:1d:86:df:ee:34:
         4e:14:ac:6c:31:e0:84:f2:df:b3:83:4b:3b:58:bb:ce:82:ee:
         e7:e3:68:8e:c7:f2:a6:52:85:91:91:96:71:a0:fd:54:16:13:
         a4:19:e0:7e:f4:4b:96:fa:ee:97:ae:5e:5e:e0:7d:df:dd:d8:
         ef:5d:d7:91:66:eb:99:dc:1d:eb:07:60:3c:25:95:13:15:95:
         b9:54:45:0f:59:ff:bf:43:3b:bc:db:fb:a3:ea:83:1d:94:83:
         fe:0e:98:94:54:6e:43:63:9d:b6:35:cb:4e:f2:c8:a0:16:8b:
         cb:16:38:41:5e:64:77:8b:74:c8:3a:0e:6d:dd:14:71:d5:be:
         e9:c7:c7:fd:99:34:9e:6d:85:f7:b4:c9:64:18:09:d7:57:c8:
         95:e2:ef:e3:a2:44:f6:cd:32:a8:bf:58:ab:e6:ab:88:d0:2c:
         36:73:c6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:10:27 2025 by rpki-client