Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/c16832b7-2101-3bc4-80fc-37dffcf83679.roa
File:                     c16832b7-2101-3bc4-80fc-37dffcf83679.roa (raw, json)
Hash identifier:          wJhVW3j61YFxKMSn2L4p5Fo80TH2dPoXel3sZTfKmEA=
Subject key identifier:   AF:93:0E:A3:21:6F:96:57:85:CC:D2:FC:9E:70:0A:05:10:8E:B2:B8
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584E4C548B94F764467F2CA2FA20
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/c16832b7-2101-3bc4-80fc-37dffcf83679.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        2605:84c0:57::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:8b:94:f7:64:46:7f:2c:a2:fa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=a0064a89-0923-4571-9a71-3d0c20ab5440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3d:28:e6:dd:5a:23:10:13:57:fd:36:49:3c:
                    fc:aa:53:34:37:7a:c6:09:36:04:6a:cd:df:7a:d0:
                    2e:64:53:c5:ea:22:18:d0:36:93:d3:c2:d1:75:d8:
                    3e:1b:cc:51:39:be:60:ec:c0:df:5e:e6:c2:eb:28:
                    c2:cd:54:dd:9c:de:18:d2:b0:6c:c3:3c:61:ef:76:
                    f5:29:8a:e1:ae:85:53:80:df:6a:d9:fe:e4:c5:f7:
                    24:5f:1f:a8:25:89:3a:3a:7a:f8:7c:45:5d:f6:27:
                    02:26:a5:6f:23:46:31:16:41:8f:13:f6:19:c5:5c:
                    f5:94:16:8c:e1:ea:77:43:39:bf:89:8a:b8:46:33:
                    bc:67:30:1d:56:1c:28:1b:17:e1:ff:68:f1:a9:94:
                    c5:3e:60:44:55:19:1c:f4:cf:b1:f1:aa:76:9c:06:
                    6f:14:ec:05:5e:d4:98:f7:a0:36:f4:e1:a7:01:ec:
                    cb:2e:c7:36:e0:6a:5c:30:d8:44:69:76:dc:69:06:
                    46:fc:2c:c4:7c:69:d4:6d:9e:c6:53:c5:68:44:ce:
                    eb:21:fc:51:e5:a7:b4:2a:6f:2f:a3:5b:82:06:87:
                    f0:e2:fb:0e:2c:38:35:04:7b:98:d7:a1:6e:e2:6b:
                    07:5a:21:4a:25:92:9c:56:71:39:df:54:08:2f:32:
                    a9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:93:0E:A3:21:6F:96:57:85:CC:D2:FC:9E:70:0A:05:10:8E:B2:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/c16832b7-2101-3bc4-80fc-37dffcf83679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:84c0:57::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:c3:fa:f0:eb:ff:31:60:5e:49:db:29:b6:a2:50:2f:2e:5d:
         2c:9e:af:24:0c:3e:6e:67:01:f6:15:8f:33:02:e6:22:ed:ee:
         de:e7:6b:65:f4:e5:bb:0e:69:f7:21:03:43:7f:07:ca:d3:5e:
         14:c4:84:2f:e0:a5:6d:57:9d:3f:88:72:32:5f:a1:87:10:0f:
         fe:a0:7f:13:99:1a:e7:10:a8:db:4d:7d:e5:25:d3:8a:52:40:
         ac:51:66:79:03:6c:c9:4f:f8:01:3b:05:5b:64:90:4c:9f:b0:
         41:24:2f:eb:4e:f1:73:6e:46:1d:ea:6b:db:7a:62:a7:0a:57:
         e9:4e:a0:8f:8b:49:d2:fe:95:80:d1:03:80:9c:53:e9:c5:b8:
         54:75:95:ef:81:cd:f9:7e:41:e0:8c:38:e4:67:90:58:76:c1:
         29:c6:e7:35:86:52:ce:a4:af:af:77:3b:79:fb:02:ab:44:3b:
         b9:ee:b0:a6:73:32:35:24:73:47:ac:16:fe:5c:8a:f3:3c:44:
         fd:6c:d2:a8:17:77:dd:1e:27:fd:c5:70:c1:73:e0:e7:f2:5d:
         79:06:16:cf:a2:b7:2f:1a:3a:40:c6:ef:76:a7:b7:16:75:52:
         9f:a3:89:8c:bc:04:48:59:7f:22:34:32:2b:96:e1:31:c8:0b:
         63:82:5e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:21:55 2026 by rpki-client