Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9893a5ef-068a-31d9-a7e5-6042bfa7f3d2.roa
File:                     9893a5ef-068a-31d9-a7e5-6042bfa7f3d2.roa (raw, json)
Hash identifier:          Ihpr39AtEssvDjI8G/LXyCzoSag33yGoAgtmqLu+uXg=
Subject key identifier:   31:45:88:9E:7A:06:6B:50:C9:0E:25:D6:86:F5:34:C7:37:58:C3:C4
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584B609CB669EF1A354BB013BF00
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9893a5ef-068a-31d9-a7e5-6042bfa7f3d2.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        2605:84c0:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:b6:69:ef:1a:35:4b:b0:13:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=2d13921d-1f19-4d43-ab27-0d66ed6a6221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:9b:e8:78:9e:c5:50:7c:a3:b5:1e:64:03:
                    b5:1b:14:7e:87:8e:db:4e:28:0e:82:13:3d:38:d1:
                    35:cd:1a:99:fa:03:b7:d6:ca:94:a4:62:a4:1d:f9:
                    2d:3b:1b:e2:0a:07:46:cc:3e:c1:80:fc:bc:29:b4:
                    e0:be:d5:55:06:c9:7d:9c:6b:03:dd:2f:15:9a:16:
                    f7:b6:4b:de:2e:38:8c:8e:3d:38:ec:29:20:12:c2:
                    57:fb:bb:9c:d5:42:85:cf:73:17:c0:97:08:34:a3:
                    60:af:47:0a:c0:85:d3:72:7c:da:b1:fa:3b:a9:7d:
                    72:1b:71:2c:eb:0f:fd:3f:f2:c1:91:a5:5d:f4:74:
                    c9:0a:1b:c1:82:41:0b:20:4a:ba:44:50:12:64:2c:
                    02:4c:06:7c:5d:7e:15:f3:76:5e:2e:0e:e0:47:2a:
                    00:4d:68:67:74:e2:be:f3:63:f0:a1:42:e0:f9:26:
                    3e:62:87:75:c1:4e:fc:d6:b3:63:cf:a8:37:f1:77:
                    99:d4:b2:39:77:f4:c3:46:59:24:0d:ea:91:5d:c1:
                    29:ae:6f:8d:f9:50:48:d1:65:ce:05:f7:fa:66:30:
                    03:e4:5e:09:a9:4b:84:1d:9d:67:71:24:f8:fa:4b:
                    36:62:c3:5a:b3:39:81:c4:db:e7:ba:83:5d:6d:dc:
                    fc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:45:88:9E:7A:06:6B:50:C9:0E:25:D6:86:F5:34:C7:37:58:C3:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9893a5ef-068a-31d9-a7e5-6042bfa7f3d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:87:47:5b:1b:6a:f8:f0:d1:6e:36:64:97:e1:d8:a5:80:bb:
         08:dd:c3:54:cd:88:24:e3:71:dc:72:ec:4a:e8:b4:1e:6d:06:
         01:db:3c:2f:d0:91:ea:bd:5f:ae:06:c5:46:34:f0:98:3c:a4:
         85:9c:39:fa:e7:a9:63:01:44:3e:33:b0:5e:61:58:a3:84:e0:
         45:94:4c:a1:ab:6a:f6:2d:ca:de:34:0b:27:de:fd:91:9c:37:
         c2:89:ad:aa:f6:5d:56:81:d0:8e:6b:4c:63:06:2e:28:73:2a:
         d0:57:a5:49:cf:d1:39:97:65:70:d6:33:c0:cc:62:42:9d:c9:
         3e:cf:88:f5:f4:52:cf:f9:1b:b8:d6:24:5c:e5:b4:04:1e:df:
         76:7f:56:bb:fd:44:0e:88:4e:ec:f9:4b:04:61:6a:e9:7c:7e:
         7b:c7:b7:ac:3b:09:6e:fc:99:96:5d:56:ea:41:90:00:b1:64:
         ea:63:23:6d:62:5e:37:a8:cb:b3:9a:65:49:84:11:f3:c3:80:
         35:62:9d:e3:73:64:a3:71:74:9b:9e:f5:4a:c6:26:85:ba:cb:
         51:bf:cf:b8:13:0b:3b:1a:44:95:27:02:90:f8:de:c8:ef:25:
         08:43:da:c5:0c:1d:30:f5:ce:40:4d:56:11:ff:52:d5:03:dc:
         1e:eb:15:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:19:37 2025 by rpki-client