Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c16ed97c-8646-379e-b507-327349487263.roa
File:                     c16ed97c-8646-379e-b507-327349487263.roa (raw, json)
Hash identifier:          Mp3GIxpzykiTvU+Z6JbvS+55Nez2n6Tp/1I/sKElCDU=
Subject key identifier:   9B:C5:5D:BB:16:BC:60:4F:0B:52:56:E4:6D:2B:6E:91:C0:BB:C3:85
Certificate issuer:       /CN=c241be4c-9ded-4e11-a20d-5f2444f46b6a
Certificate serial:       010D0C9F4328584B39870AF6FA855A431B08D5C0
Authority key identifier: 27:8E:22:73:6C:9C:2F:55:11:74:B7:4D:DA:25:C1:B8:D2:D3:4E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c16ed97c-8646-379e-b507-327349487263.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     215568
IP address blocks:        2607:cf40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c241be4c-9ded-4e11-a20d-5f2444f46b6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c241be4c-9ded-4e11-a20d-5f2444f46b6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:0a:f6:fa:85:5a:43:1b:08:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c241be4c-9ded-4e11-a20d-5f2444f46b6a
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=d1939d6f-813c-414a-be59-bb1d772abb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:13:35:40:2a:be:a1:e5:87:86:2e:13:6e:61:
                    55:cf:a2:95:ed:eb:39:89:80:c4:49:96:b6:f5:84:
                    8d:71:5c:72:74:ac:86:0b:46:56:63:97:a2:b9:92:
                    f5:8c:e5:5b:39:82:d9:10:67:66:02:22:ae:2c:13:
                    f6:75:b7:0d:15:2f:f4:20:1a:71:aa:d1:76:ce:98:
                    0a:3b:22:67:44:7a:38:ef:fa:a6:9c:3e:9b:87:62:
                    30:c3:fc:ae:b8:0b:54:ed:ce:0d:b0:aa:da:e4:1e:
                    de:36:42:b9:47:af:76:46:cc:fa:95:b5:80:3c:d4:
                    be:31:3f:f8:18:02:fd:47:23:45:05:d4:46:82:96:
                    3a:c4:a2:38:49:eb:59:e4:6a:53:61:e5:29:91:ea:
                    23:fa:f1:32:d7:95:8f:af:4e:02:03:3e:11:7f:62:
                    aa:39:03:b1:a5:40:ec:c5:fc:bc:41:84:7c:ad:da:
                    48:55:57:8e:d5:bd:b5:dd:86:00:81:10:bb:f8:14:
                    1e:60:1a:55:95:df:b9:0d:7a:44:00:13:e1:43:2f:
                    94:32:dd:cf:d8:e5:91:35:f8:c1:3f:33:ed:e7:5d:
                    3c:a5:8e:cb:e6:f1:03:75:16:2d:dc:c2:cf:21:e1:
                    47:5f:b7:b0:86:18:7d:61:fe:1d:5a:30:d4:77:88:
                    2f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C5:5D:BB:16:BC:60:4F:0B:52:56:E4:6D:2B:6E:91:C0:BB:C3:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c16ed97c-8646-379e-b507-327349487263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a/c241be4c-9ded-4e11-a20d-5f2444f46b6a.crl

            X509v3 Authority Key Identifier:
                keyid:27:8E:22:73:6C:9C:2F:55:11:74:B7:4D:DA:25:C1:B8:D2:D3:4E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c241be4c-9ded-4e11-a20d-5f2444f46b6a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cf40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:2b:26:16:29:58:2c:7f:49:d9:9f:e5:cf:18:f2:5c:01:22:
         41:fc:3c:f0:be:c9:03:a3:61:b3:94:27:a7:f9:23:ba:6f:8e:
         c1:a7:8d:31:7d:79:79:c7:4f:91:05:2a:25:53:fd:70:20:ba:
         48:64:df:16:5c:93:41:7b:a3:5a:35:4d:1e:9d:91:21:4d:50:
         44:db:38:3c:70:04:64:dc:c1:90:e1:cf:b0:5b:ff:6c:c3:f1:
         7d:2a:f3:01:24:a5:51:b1:72:86:e1:09:b2:d7:97:b6:1f:70:
         97:80:b9:0e:58:e7:e2:13:58:b8:8f:47:f0:f3:8f:46:8a:e9:
         9e:3f:ae:a1:24:f2:c3:30:43:ee:50:62:8d:de:98:bb:d2:15:
         6e:79:ff:a4:b6:e5:02:3b:da:f1:e8:9d:4f:a6:a3:b2:3a:9b:
         cb:1d:18:56:d3:aa:a3:1f:7c:0f:8a:93:f7:fe:e8:ad:39:a3:
         4d:4f:17:b8:cb:5e:db:e1:fb:f3:a9:44:fd:5e:22:3e:9f:b0:
         79:db:27:48:50:dd:1a:3b:4f:b0:9e:f0:5c:fa:65:07:9f:66:
         dd:ff:b1:6d:f8:5f:59:7b:98:4f:ba:16:8e:44:2f:1f:6b:02:
         b2:05:7c:4b:04:62:5b:fa:06:9e:c6:8b:e9:9c:73:5b:fc:82:
         34:fa:84:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:14 2025 by rpki-client