Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/67d9001e-bdf4-3632-9574-e5ac9d70054d.roa
File:                     67d9001e-bdf4-3632-9574-e5ac9d70054d.roa (raw, json)
Hash identifier:          oMQoG/u0/8pPhHXpAVUuVdG9xIDq4uHcqu5Jgrkoay0=
Subject key identifier:   E0:FD:A5:EA:35:40:B7:85:A9:71:AD:AD:26:7E:72:E6:76:51:35:5C
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584B64CE717A539784C2420DDF50
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/67d9001e-bdf4-3632-9574-e5ac9d70054d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     14618
IP address blocks:        2605:84c0:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:71:7a:53:97:84:c2:42:0d:df:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ba8f7c59-43cf-483c-8451-f0c9a51d1fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:32:eb:37:4e:fe:70:36:12:ea:c4:ce:26:86:
                    0a:e4:23:49:cd:bd:3f:83:1c:39:44:a9:f5:5b:e8:
                    1e:bf:ef:41:26:d4:63:fc:84:a0:39:62:a7:96:29:
                    1b:fa:10:d7:99:fe:19:5c:20:f3:d4:9c:bb:57:d0:
                    97:07:d3:c0:97:ac:7b:43:7b:d2:58:b4:c8:27:c5:
                    15:b8:a8:39:65:9a:ee:e8:18:a7:c7:90:5a:82:e4:
                    50:4a:64:97:9e:8a:27:3d:1b:52:5d:a0:33:0c:96:
                    62:7c:b3:9b:89:be:21:1b:85:a9:7d:34:c8:ad:c8:
                    3a:ee:d1:ad:33:52:5d:06:d6:01:f3:8a:ed:0d:8d:
                    23:01:22:90:74:69:3a:44:bb:0b:2e:22:39:e3:65:
                    2f:f5:75:95:39:32:f6:7d:d4:16:79:35:d6:fa:f1:
                    81:c3:1e:43:3c:b5:00:10:71:09:f3:83:32:c5:11:
                    7f:5b:ab:ac:4d:66:ec:95:d3:e1:11:9f:17:b2:56:
                    85:1e:0d:4b:d4:48:03:fb:f4:cd:b2:d0:2b:5d:15:
                    54:e6:c3:40:9a:7e:3c:27:63:63:75:70:5a:2a:86:
                    c6:dd:b8:9d:d3:67:13:c4:51:07:a3:51:c3:95:c5:
                    c5:5c:bd:30:0c:60:62:67:9f:6f:fb:d4:28:d7:3d:
                    53:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FD:A5:EA:35:40:B7:85:A9:71:AD:AD:26:7E:72:E6:76:51:35:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/67d9001e-bdf4-3632-9574-e5ac9d70054d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:0d:8b:e3:31:32:43:8b:78:94:36:22:14:5b:92:3a:a8:3c:
         13:ed:a0:7d:f8:d7:66:2a:b0:d8:0a:21:e6:51:c1:1f:e9:62:
         fa:32:ac:fd:b4:60:8b:d4:ed:fc:fc:e0:75:09:1d:3a:0a:54:
         3a:07:40:e0:75:23:72:c6:cb:b8:e9:e5:a0:6c:17:c5:d3:2b:
         5d:5b:11:02:4b:8e:f2:21:d1:cd:48:ee:30:e9:d1:3e:53:79:
         31:b6:eb:d7:84:92:a1:31:20:d0:8c:d3:54:5f:4f:c6:05:d5:
         9d:d6:3a:7b:19:d9:89:69:c0:0d:37:90:0f:ec:b3:ce:1e:c4:
         c3:6e:74:5b:53:09:2c:f3:fe:65:f6:fb:d0:b2:f3:26:ba:6e:
         11:1c:6c:c8:07:53:f8:e3:96:56:e8:9f:5d:27:8c:1d:0c:05:
         21:d3:5b:15:40:80:38:59:3a:0c:ce:9a:ec:6a:84:dd:ec:3d:
         60:79:a6:73:9b:36:b9:7c:27:af:98:d6:3b:26:ef:63:c9:0d:
         10:56:f4:e7:2c:7b:ea:92:2c:11:ac:cc:14:b1:2a:3a:50:d9:
         0e:31:3f:71:63:77:b3:43:c7:d3:83:39:7f:e8:92:14:53:fa:
         ed:9e:c9:2f:e0:66:12:fa:1e:b0:f6:c0:17:5c:df:e3:bb:c7:
         d1:e1:36:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:47 2025 by rpki-client