Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa
File:                     844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa (raw, json)
Hash identifier:          aDo2/UHCSxu8tfa9pjv+nrw59HyvKO8TI4pajw+cLSQ=
Subject key identifier:   97:93:10:66:A7:E2:6D:B0:BA:53:26:88:B5:6E:BA:4D:F6:BA:DB:38
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584ACB40E89DFE83758D236B2C80
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2605:84c0:56::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:e8:9d:fe:83:75:8d:23:6b:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=72ffbb97-5117-47e8-b41e-f6024ab8cc4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dd:c7:de:8e:d1:81:4e:8a:93:cb:c3:c0:d6:
                    52:6a:45:96:15:ff:b4:20:af:bb:82:86:da:80:c3:
                    12:cc:29:f0:25:66:c7:16:3a:ec:c9:8d:e1:bc:a6:
                    fd:f7:6d:8a:91:a3:a1:3e:21:bd:43:81:1d:b9:90:
                    61:42:5e:43:b6:cc:c7:94:4d:d9:46:f2:3e:fe:d5:
                    a8:48:46:70:e4:f0:d6:57:6d:bd:2f:35:ad:bb:22:
                    51:0b:17:80:c8:a0:68:6d:35:98:20:6c:9a:19:67:
                    c8:13:83:1e:e9:c4:6e:10:b5:21:3d:20:3e:e5:85:
                    da:80:83:1a:a3:43:48:e9:c8:1e:a1:24:be:d5:9d:
                    6c:b7:c1:01:01:d0:93:8e:27:02:9d:f7:e5:b4:76:
                    82:04:2a:62:41:ea:a4:c7:ec:dd:b7:d5:c5:97:76:
                    72:cb:57:0c:37:33:56:21:f4:a1:b1:d2:a6:33:23:
                    fa:fc:ae:16:c2:96:a4:4a:07:d5:aa:7a:97:b8:b4:
                    5c:3a:d2:c9:61:e8:6c:99:ea:76:e0:5a:ab:cf:87:
                    fb:44:e8:65:5b:36:9b:c7:bc:6f:5b:7d:6d:64:1a:
                    83:95:b9:21:81:0d:f3:3b:2b:85:8a:82:f0:10:75:
                    10:05:72:a5:44:e3:0d:41:c0:98:04:d5:f6:6a:a0:
                    97:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:93:10:66:A7:E2:6D:B0:BA:53:26:88:B5:6E:BA:4D:F6:BA:DB:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/844e8540-ba60-3e6c-9f0d-3e7fa24095f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:56::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ac:0e:8d:99:2c:d6:4c:a3:23:00:44:ad:35:22:37:7c:df:
         2b:21:73:73:b5:a5:00:da:42:9d:37:75:3a:70:e6:93:18:a7:
         fd:f4:a0:7c:f6:e0:a7:bf:a2:41:98:88:7b:f3:18:bf:e5:8d:
         67:e5:a5:64:56:b8:3b:42:2a:90:85:53:0c:de:83:09:6c:2d:
         07:10:e0:8a:d2:bb:f0:31:19:1d:6a:27:70:48:ed:06:11:16:
         81:6f:13:07:4d:3f:31:73:df:e9:d8:54:fd:fb:aa:e6:d6:89:
         c5:b0:c8:35:81:e8:b6:c1:42:46:bd:c7:ed:68:21:8c:3d:6b:
         eb:02:2d:49:58:a5:99:63:62:bf:47:c6:08:49:f8:ff:57:b2:
         2a:9e:7c:09:27:09:7a:f5:c1:1f:c6:c7:4d:67:c7:83:76:d8:
         d6:78:04:b8:f3:c6:62:d7:08:28:9a:c1:46:54:68:69:3f:04:
         bf:ca:31:84:5d:2b:0a:7a:0e:d8:40:f8:da:05:4a:14:89:a0:
         e7:ad:b1:38:1d:a6:91:c5:2b:e6:b4:91:4a:aa:fd:a6:92:b4:
         0d:5d:49:80:b3:0f:7f:60:f5:a7:cf:bd:5c:0b:cc:da:28:68:
         ee:ad:c3:37:1f:90:e3:c2:0f:e4:ab:d1:b1:84:cd:90:a9:9e:
         e6:92:24:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:46:16 2025 by rpki-client