Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/72168295-8ea7-3c44-9003-58938d256c37.roa
File:                     72168295-8ea7-3c44-9003-58938d256c37.roa (raw, json)
Hash identifier:          N8XONmBaB53gVAO1AFBC6AVFoWQmTXXXZA6MMVL6tp8=
Subject key identifier:   47:C3:2A:97:47:32:0E:E3:C5:05:6C:F0:71:10:06:3F:16:4A:1A:65
Certificate issuer:       /CN=24d6cba8-85d8-4359-a10e-8e9ab867266a
Certificate serial:       010D0C9F4328584B4A471FD8F5338A406BF4C180
Authority key identifier: 75:23:3A:57:80:8C:E7:C1:7F:3E:ED:23:59:A2:C1:0A:00:40:8E:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/72168295-8ea7-3c44-9003-58938d256c37.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     21738
IP address blocks:        2607:c2c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/24d6cba8-85d8-4359-a10e-8e9ab867266a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/24d6cba8-85d8-4359-a10e-8e9ab867266a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:1f:d8:f5:33:8a:40:6b:f4:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d6cba8-85d8-4359-a10e-8e9ab867266a
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=67780958-f815-4950-9217-e1801d281ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c7:d1:65:ce:37:cf:94:54:1c:b6:10:c3:e5:
                    1b:8c:4b:ea:1b:43:e1:bb:12:e1:72:29:a4:8b:42:
                    c8:23:63:75:bd:13:7c:55:d0:02:53:22:76:50:41:
                    b4:5c:de:cc:30:0d:ec:e4:ed:1a:6f:6c:a2:25:27:
                    cc:ca:e3:c3:2b:a8:82:e5:93:c3:73:8a:9b:24:b8:
                    fd:07:5c:af:91:33:4f:e3:80:d0:62:3f:ea:13:96:
                    d7:24:11:b1:e7:db:97:0a:c9:db:23:76:2b:84:d9:
                    05:05:ca:fe:f4:35:63:c0:ab:31:91:c3:e8:cd:bf:
                    35:aa:5a:30:b4:b3:4f:bd:c8:f9:59:d3:7f:ee:56:
                    44:2e:2b:fe:b9:69:eb:10:c1:5e:09:fd:3a:11:f4:
                    08:f4:df:68:eb:7c:cd:3f:95:e4:dd:00:25:c0:e5:
                    2a:06:aa:39:e2:7a:24:b2:8f:a0:92:74:36:15:ec:
                    c8:ea:14:43:47:a5:26:de:33:92:e0:cc:a8:14:5e:
                    2f:bc:1f:31:8b:bd:6a:90:e2:2f:9d:8e:28:24:fb:
                    b9:4b:d7:74:d1:31:85:ae:32:ac:e5:48:f1:bc:8b:
                    c8:79:5d:b8:54:95:6b:f4:53:dc:de:26:57:9d:d3:
                    a4:95:2e:67:cd:67:d6:43:f4:6c:b3:6b:93:64:42:
                    50:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C3:2A:97:47:32:0E:E3:C5:05:6C:F0:71:10:06:3F:16:4A:1A:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/72168295-8ea7-3c44-9003-58938d256c37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/24d6cba8-85d8-4359-a10e-8e9ab867266a.crl

            X509v3 Authority Key Identifier:
                keyid:75:23:3A:57:80:8C:E7:C1:7F:3E:ED:23:59:A2:C1:0A:00:40:8E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:f2:b0:d9:8d:20:93:89:f3:d2:c7:20:af:36:0e:b8:33:92:
         56:59:7b:6e:c4:9c:99:14:7c:3a:80:3c:44:4f:e4:af:1c:ea:
         54:6f:38:16:a7:ba:96:01:24:f0:28:1a:99:c1:f9:c1:c4:66:
         85:1c:ed:7f:10:67:ff:ee:0a:8a:d8:4b:ec:b5:ff:e7:a7:02:
         fe:17:ac:9b:cf:94:d7:f0:56:fd:54:b0:ac:99:91:7a:89:e2:
         4d:c0:ad:ec:46:ba:4e:50:dc:f1:5d:0d:da:a2:10:22:7b:26:
         ea:50:93:ea:4d:f3:9c:b7:56:cf:87:b4:6c:8d:00:b5:c8:3e:
         5c:60:d2:0f:a3:5b:fc:1c:1b:96:02:a1:83:b4:c8:f1:63:03:
         3c:1f:c4:45:ae:f0:55:88:d2:9a:ca:08:40:cd:4a:02:02:9e:
         2c:d3:84:6b:7e:ce:51:b8:37:77:d5:d3:e7:8d:81:6c:7a:5c:
         c6:8c:22:ba:01:28:34:ec:5c:9f:05:11:70:8d:59:39:48:10:
         b9:13:de:2e:64:73:78:0d:e0:0a:b4:a0:43:76:08:a2:f5:55:
         a3:13:7d:bf:3b:f2:ff:42:34:fd:3c:d7:15:60:db:b9:d6:30:
         c7:c3:c5:16:97:e7:76:67:94:83:8e:63:75:89:d7:e6:92:c1:
         35:c1:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:50:34 2025 by rpki-client