Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/4277c435-28c3-3fa2-862e-346dc42fa1d7.roa
File:                     4277c435-28c3-3fa2-862e-346dc42fa1d7.roa (raw, json)
Hash identifier:          MwcH3X2QqkQjuHV0rjFpsGFYWBB8lYLI+fJdwyIwjcI=
Subject key identifier:   67:D6:33:B4:F8:D5:EA:8E:AB:AB:E8:48:A7:48:6A:B7:0D:BA:FD:F0
Certificate issuer:       /CN=c24d54f2-22ea-4242-9583-989286d76aac
Certificate serial:       010D0C9F4328584B13D6B6B1F8D86EFE9A064E80
Authority key identifier: 6D:4B:D5:F6:3C:E8:2A:AF:29:38:C3:09:AF:7D:10:2D:FF:E8:E6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/4277c435-28c3-3fa2-862e-346dc42fa1d7.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     19382
IP address blocks:        2605:7c0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/c24d54f2-22ea-4242-9583-989286d76aac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/c24d54f2-22ea-4242-9583-989286d76aac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:b6:b1:f8:d8:6e:fe:9a:06:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c24d54f2-22ea-4242-9583-989286d76aac
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=46cf9ef2-1d5f-4708-a7da-c44c587392ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f7:3f:1e:3a:be:09:b1:12:69:ff:c1:8b:12:
                    21:92:51:34:d7:54:0f:5e:c9:45:1e:40:9d:b0:70:
                    0e:59:11:fc:f5:9a:ce:31:0f:b1:12:d1:40:a3:42:
                    3d:40:b6:d6:10:17:e1:c7:b3:f5:95:21:ef:54:ff:
                    64:e3:41:03:ef:6e:5f:b0:7c:ca:60:d7:87:47:b8:
                    f2:b2:a8:67:f5:18:28:f8:5b:95:6f:bd:10:5e:92:
                    d0:ae:aa:5b:1e:65:a0:54:7e:18:20:e5:97:9a:cb:
                    85:1c:22:22:b6:fe:33:5d:8a:d5:16:63:5a:d6:ba:
                    1a:5d:b3:a0:23:6f:c9:27:39:ec:45:28:84:61:0b:
                    1a:0c:5e:83:47:5b:5c:3f:aa:06:2c:75:44:c9:c7:
                    67:1e:f4:31:89:54:56:e9:c6:62:26:32:dc:cc:c0:
                    40:0a:a9:21:59:bf:d7:a8:66:f3:88:8b:bb:32:aa:
                    ce:3e:46:ae:10:88:9a:d2:8a:e0:bc:00:eb:39:ad:
                    89:05:22:e4:c8:b7:2d:ea:be:60:30:0e:57:7f:22:
                    88:bc:19:27:66:7f:bc:ed:a3:82:f9:ca:a0:72:b8:
                    d2:9e:ce:1d:50:cd:32:0c:5e:98:d2:87:d4:25:d6:
                    10:86:c4:de:bf:b8:26:0e:2e:be:26:19:13:29:68:
                    b9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D6:33:B4:F8:D5:EA:8E:AB:AB:E8:48:A7:48:6A:B7:0D:BA:FD:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/4277c435-28c3-3fa2-862e-346dc42fa1d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/c24d54f2-22ea-4242-9583-989286d76aac.crl

            X509v3 Authority Key Identifier:
                keyid:6D:4B:D5:F6:3C:E8:2A:AF:29:38:C3:09:AF:7D:10:2D:FF:E8:E6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:95:94:69:b1:dc:35:17:2d:86:00:77:5d:79:08:bd:15:b9:
         57:ab:9e:4c:6c:a2:cd:06:0f:a0:a9:fb:18:8c:8e:29:2d:96:
         6b:77:b0:ab:72:cd:a1:8a:8d:3f:7b:fd:9e:f8:f5:b1:2a:8c:
         ad:39:46:31:2f:2f:ae:2d:87:9d:d9:2a:cc:04:47:01:e3:8b:
         e3:c6:09:6a:e6:fa:c2:b4:50:14:59:14:78:49:87:c4:61:3f:
         bd:fe:41:55:31:df:24:40:92:64:94:f7:b8:7b:77:68:dc:a9:
         dd:ff:24:7c:23:31:9c:93:94:43:b0:62:9c:75:c0:37:98:58:
         4f:ca:b9:8a:04:e4:5f:d5:56:c7:08:b0:8c:89:a5:f2:a8:3a:
         25:3d:ea:34:48:c1:d9:dc:51:ec:90:5e:8b:08:70:01:d4:ee:
         ab:e8:41:25:17:b9:7b:15:b1:e2:1c:99:8e:96:01:a3:4b:94:
         87:ea:7c:ce:6a:cd:3b:52:cc:3f:cd:22:d7:8e:db:49:6a:aa:
         bd:92:6f:bf:b3:14:20:69:2a:c5:fd:7f:82:21:bb:69:e4:8b:
         68:63:cd:c7:97:ab:12:c1:19:c3:f1:c4:a0:0f:0f:59:ef:68:
         8d:b7:2d:ea:fd:0e:39:26:10:97:49:be:1b:ae:83:87:1f:f7:
         82:d3:06:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:37:09 2025 by rpki-client