Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/9c549b63-6d1b-340f-a75a-67f7ee513f95.roa
File:                     9c549b63-6d1b-340f-a75a-67f7ee513f95.roa (raw, json)
Hash identifier:          Bc1PUWEG2DUReIFaIDKBUCcdDSEjANQWzmrqvy/hfDo=
Subject key identifier:   E2:3C:D4:B1:88:F6:A7:E2:D0:D1:F4:68:EA:E3:38:8F:19:1E:12:D6
Certificate issuer:       /CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
Certificate serial:       010D0C9F4328584B9E07D3E9D82759AEBC94F180
Authority key identifier: 7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/9c549b63-6d1b-340f-a75a-67f7ee513f95.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     396982
IP address blocks:        2607:1c0:2320::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:d3:e9:d8:27:59:ae:bc:94:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=4477dbc6-3746-4af0-a6ae-8ccaa486ffc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:58:8f:a6:a1:24:db:9a:15:25:d9:a9:7d:0c:
                    64:f7:b9:19:16:16:e7:b4:5d:56:68:8d:77:cc:e6:
                    40:b9:81:67:ce:6a:e0:5a:c6:03:f7:ca:91:ae:6b:
                    a3:50:d8:37:45:75:05:d7:96:e2:78:82:79:d0:27:
                    10:c3:22:29:99:dd:0b:a8:c5:06:0b:50:d2:c0:8b:
                    7b:ca:e0:f5:95:f5:87:4f:30:02:a6:19:a3:dd:cf:
                    66:2e:4d:88:d6:b3:33:9a:30:69:df:b1:7e:eb:31:
                    ff:f6:f8:9a:d7:fe:73:b7:e7:d3:4f:b3:f7:8d:ae:
                    40:75:85:37:d7:9e:d2:29:8e:5b:aa:0c:20:50:7d:
                    84:23:de:4a:17:b6:75:83:7d:4f:7f:67:55:f6:a0:
                    e2:2d:e5:41:43:0c:99:a9:e4:fb:07:e2:e8:7d:95:
                    05:18:f4:c7:c2:cf:b5:13:f8:e2:39:e1:db:02:13:
                    3c:45:ad:a6:b4:70:d3:dd:1e:97:10:67:14:06:84:
                    bc:bc:28:98:e2:39:55:1a:8e:44:61:ae:61:40:33:
                    2c:d6:be:ab:bf:29:b4:59:97:f0:4d:84:f1:0f:16:
                    5c:49:bc:c4:c5:1b:a9:39:07:59:c8:17:6b:29:11:
                    f2:4c:82:47:1a:09:84:83:20:ff:74:bc:4f:70:c5:
                    a1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3C:D4:B1:88:F6:A7:E2:D0:D1:F4:68:EA:E3:38:8F:19:1E:12:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/9c549b63-6d1b-340f-a75a-67f7ee513f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl

            X509v3 Authority Key Identifier:
                keyid:7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1c0:2320::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:52:05:d0:d7:0a:19:ce:51:b6:56:1f:52:36:6a:c8:11:c7:
         af:42:74:7a:8d:cc:4b:55:12:22:b7:55:59:11:0f:c0:e5:dc:
         8d:9d:57:75:9a:d7:e2:cc:0e:0f:ff:af:af:2b:c2:98:09:9e:
         e9:0c:42:26:fd:70:ec:21:32:e2:f2:e7:79:4f:cb:23:dc:9d:
         24:d4:02:b9:a8:27:6d:11:ff:a8:d5:17:e1:93:25:a2:31:23:
         a9:90:b1:16:2f:ee:60:97:be:14:1a:55:86:42:f5:08:3e:ba:
         26:78:24:ee:ea:24:f1:67:e8:ca:63:46:b5:df:81:8f:82:38:
         d1:98:78:a2:ef:41:8c:26:f3:c5:c0:f0:f3:f9:47:a2:16:8f:
         47:e5:37:70:18:76:73:2e:b4:90:66:a3:4d:bb:3f:e5:07:20:
         cc:de:79:aa:80:9e:4f:d6:8c:b9:5c:aa:16:14:03:ad:70:30:
         97:d3:15:e9:ff:99:25:24:4a:0b:e1:1e:1f:a5:c8:00:bc:59:
         61:34:17:b1:a3:54:c4:1f:7b:65:08:db:60:6a:9b:9a:c8:11:
         55:0a:8a:ce:1c:60:04:de:d4:1c:ae:f9:d3:f5:fd:f6:77:99:
         b4:26:d9:92:0c:8e:34:09:b0:ac:75:b2:5e:eb:f9:38:98:35:
         a2:bf:fb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 23:16:49 2025 by rpki-client