Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f60415e-9764-3ac5-8030-d5fbb718f7ec.roa
File:                     0f60415e-9764-3ac5-8030-d5fbb718f7ec.roa (raw, json)
Hash identifier:          e33/IX59d9HqJCk5VT1Klo1d3UV+1+zerh01gGF7zDo=
Subject key identifier:   16:3E:27:C7:4F:26:6B:F4:E9:9A:A3:B2:F1:58:7F:3E:BE:EC:79:FC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB827CC88396CFEF36B1600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f60415e-9764-3ac5-8030-d5fbb718f7ec.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     13367
IP address blocks:        2603:3016:2400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:27:cc:88:39:6c:fe:f3:6b:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=e0a0dca1-b0ef-4105-a17f-90fb1ae6b220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:86:90:e4:11:69:46:14:2e:cd:b4:32:15:
                    c4:e4:01:29:21:42:7c:e8:b7:52:c2:66:64:ae:81:
                    78:32:2d:db:97:05:6d:3f:84:ec:55:61:a7:b1:6b:
                    78:c2:b0:b2:59:96:75:e2:52:7b:2f:69:9a:ce:1b:
                    44:5b:1e:8b:ae:48:ac:70:ad:00:cd:12:c2:93:9e:
                    3d:88:d9:47:a1:1b:75:e4:cb:c2:47:ba:a8:17:7c:
                    b1:d6:89:59:b5:fe:e9:2d:81:db:7e:2a:79:9d:9f:
                    c2:cc:7d:12:80:77:9c:bf:0e:1b:f9:98:fb:9d:1a:
                    03:dc:db:41:f1:a9:09:34:c7:92:0f:01:1f:bb:56:
                    63:65:b4:72:81:02:bb:a9:ae:a7:e5:8d:e0:46:e7:
                    9d:6d:04:38:17:3a:f8:61:70:7e:89:be:9e:f0:d8:
                    9d:26:54:34:50:a6:d0:9f:61:87:b2:c6:c1:e1:b5:
                    50:76:fe:f3:fc:e3:99:c2:6a:e6:77:5d:85:1b:24:
                    a3:9c:06:36:a5:24:38:1f:09:af:8e:68:3b:82:78:
                    a7:23:8d:ee:bf:a8:05:19:82:e1:8b:9c:c6:c5:c3:
                    b5:13:51:8d:61:6b:6e:4e:b9:9b:4e:af:f3:7f:4c:
                    14:8f:bb:e0:41:e7:99:ec:7f:a2:6a:49:1f:e1:5b:
                    32:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3E:27:C7:4F:26:6B:F4:E9:9A:A3:B2:F1:58:7F:3E:BE:EC:79:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f60415e-9764-3ac5-8030-d5fbb718f7ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3016:2400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:c4:93:33:bd:ab:4e:ea:6b:11:b0:91:59:65:c7:45:6e:28:
         a5:0b:8e:6b:1e:76:bf:4c:df:8b:44:9a:67:95:46:7f:96:03:
         1d:46:50:16:8b:3d:ed:83:58:40:b6:30:5a:a3:85:96:d9:ae:
         11:78:fb:14:75:1b:ff:85:9f:89:ce:4f:88:25:e2:33:f9:6a:
         31:88:5e:c0:72:24:37:4f:52:d3:99:55:c6:f8:0b:ed:f7:22:
         f9:ef:92:6a:4e:9b:36:40:9e:34:31:3d:87:d5:5d:2b:33:b3:
         7e:21:d5:31:6f:99:fe:ee:8c:5e:05:2d:40:62:b3:95:c2:97:
         1f:c7:34:e2:f7:2b:ff:58:e9:c2:a0:46:6b:b7:a8:64:ca:c8:
         63:10:61:78:82:36:93:f4:52:9c:0a:b3:43:e3:d3:5b:fa:7e:
         0e:46:a3:92:9c:ad:a2:8e:02:9f:08:a6:a1:c1:e1:d5:2c:b7:
         7c:b2:c2:59:e5:c2:af:86:5e:df:71:24:e0:6d:df:81:d8:82:
         29:81:a2:c0:68:73:f5:88:c9:2d:a9:46:ef:0d:8a:30:a1:75:
         08:e3:de:cc:5f:74:7e:71:c6:07:40:bf:e8:d0:08:f3:62:89:
         c2:5e:8a:f4:c9:28:df:ec:1b:51:05:84:73:fa:cd:f8:40:1e:
         c8:4c:63:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:24:45 2025 by rpki-client