Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/b0105e7f-a332-314a-af06-d7ad1c747449.roa
File:                     b0105e7f-a332-314a-af06-d7ad1c747449.roa (raw, json)
Hash identifier:          BJ1ITHPBMQYzZrhju9QjrRbGCWjmTvmwDsxGcbacIAY=
Subject key identifier:   D2:30:CA:70:53:D2:1F:30:E0:A2:E4:DD:E3:FC:A8:D3:28:99:3D:FC
Certificate issuer:       /CN=7ce16e2f-96b7-44ff-9c53-9dde17e48622
Certificate serial:       010D0C9F4328584BA39D21E574E2E08E10FE0200
Authority key identifier: C7:2A:26:77:20:80:EB:41:DB:92:8B:92:97:D5:F8:AB:EA:38:1A:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/b0105e7f-a332-314a-af06-d7ad1c747449.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     16436
IP address blocks:        2605:abc0::/32 maxlen: 32
                          2606:e6c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/7ce16e2f-96b7-44ff-9c53-9dde17e48622.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/7ce16e2f-96b7-44ff-9c53-9dde17e48622.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:21:e5:74:e2:e0:8e:10:fe:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ce16e2f-96b7-44ff-9c53-9dde17e48622
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=e73953a8-cf0e-4f15-b417-ae6d96b68417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7a:a1:e6:fe:2d:40:04:62:92:45:08:05:0e:
                    cc:65:d8:8e:98:fc:37:a5:be:b8:c9:65:33:75:b7:
                    71:bb:71:e0:11:43:65:57:28:11:dd:f3:41:40:dc:
                    12:b2:55:fa:b4:f8:6a:61:5a:28:e3:e7:5a:5f:6c:
                    41:c2:6f:39:72:28:0f:b4:55:9e:39:d0:fd:09:dd:
                    fd:ed:4d:85:d5:f0:5b:0a:46:ed:89:c7:38:0f:a9:
                    c3:03:28:4d:85:c1:ae:2f:b4:0d:86:76:69:77:42:
                    8d:40:eb:75:a4:25:4c:08:5c:70:fb:b4:fe:e8:a5:
                    66:9a:37:25:18:f5:ba:ac:8a:7c:c5:27:2f:07:54:
                    0e:a6:25:2a:47:42:80:74:c0:cc:34:ef:2b:0f:a3:
                    8d:fc:29:91:d8:c6:e1:bc:56:95:2b:ad:17:4c:6d:
                    b8:9d:00:97:d4:40:f0:00:4d:96:7e:98:0e:54:24:
                    9b:41:6c:78:37:2e:60:81:92:a0:2c:f7:94:89:40:
                    13:8d:c4:76:77:95:9c:c2:7a:12:f4:9e:9a:9b:52:
                    bf:47:68:58:bf:a7:37:ce:c6:e4:50:8c:3f:a4:b9:
                    89:80:81:90:04:ee:9f:14:c4:80:33:a9:41:2a:cc:
                    91:37:68:f1:df:c4:59:8b:ae:d7:ba:fe:ee:1d:15:
                    dd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:30:CA:70:53:D2:1F:30:E0:A2:E4:DD:E3:FC:A8:D3:28:99:3D:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/b0105e7f-a332-314a-af06-d7ad1c747449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/7ce16e2f-96b7-44ff-9c53-9dde17e48622.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2A:26:77:20:80:EB:41:DB:92:8B:92:97:D5:F8:AB:EA:38:1A:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:abc0::/32
                  2606:e6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:5b:10:d4:0a:31:97:34:79:bc:36:83:d6:a5:19:ff:03:43:
         37:dd:72:98:33:00:09:33:01:ac:bd:e1:2e:7a:0b:db:b1:5f:
         9e:a3:c4:2c:f2:2a:20:38:79:fc:44:d2:d9:58:32:db:18:c8:
         e9:c2:27:8f:7c:23:15:c8:73:de:7d:19:4b:ec:42:4a:4c:35:
         a1:9f:8c:98:8a:57:f9:9e:b6:df:d3:46:89:68:85:cc:7b:ac:
         ea:cf:67:9c:4f:1e:e8:03:a3:e8:4c:58:07:bc:9e:aa:77:97:
         fd:10:a9:96:bd:c9:da:d2:07:df:c2:5d:cc:3b:8b:72:fd:64:
         be:65:0b:bf:7e:d1:41:e4:ea:1b:ac:c9:46:c3:78:f5:8b:aa:
         2d:0c:cb:9d:78:3d:90:e1:94:00:11:dc:6f:e1:6c:43:fd:42:
         d3:e0:23:f8:b5:ef:1b:8a:06:1c:ee:0e:b9:e1:71:62:c3:0f:
         18:b2:3d:d1:53:c3:86:2d:b9:16:10:4a:6c:c5:ba:23:07:cf:
         89:f1:d2:da:dd:3c:5b:4d:cf:4c:cb:c5:07:89:8c:43:db:3a:
         b7:c8:ee:ae:a0:d4:07:0c:f6:2e:75:b1:e7:46:d6:51:4b:c5:
         48:cd:56:47:43:79:a8:5c:b3:82:78:bf:f6:7a:e4:35:de:46:
         f0:90:f7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 14:44:55 2025 by rpki-client