Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/601e0b95-c18d-3e35-9cf6-d298b4a6c272.roa
File:                     601e0b95-c18d-3e35-9cf6-d298b4a6c272.roa (raw, json)
Hash identifier:          s6RZZXBqxqpQze3PF+0Zyblk60xJlQWKuIzjaadsfQc=
Subject key identifier:   83:46:4D:C4:60:D7:49:51:CE:17:90:DC:F7:53:68:10:27:29:90:C6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B64CD76FA813D5D5B20DC6200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/601e0b95-c18d-3e35-9cf6-d298b4a6c272.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36040
IP address blocks:        2600:1900:4110:fc0::/60 maxlen: 60
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:76:fa:81:3d:5d:5b:20:dc:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0051fc69-afbd-46ae-b9fd-5afa315d202f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:65:8a:e2:db:59:ec:37:44:dc:fc:72:01:
                    b0:cf:d7:3e:3d:9d:b8:f8:5f:78:f7:f5:ec:7f:c8:
                    9e:b6:ae:b0:9d:e8:a5:05:04:c7:0e:0a:70:92:14:
                    f4:98:22:f0:4d:5f:99:19:50:d2:9a:d4:4f:21:e9:
                    4f:fb:55:42:4b:5d:e2:aa:39:79:cc:07:fc:3c:2e:
                    70:50:1b:71:96:96:e8:c8:c2:7b:d7:82:a7:ef:a6:
                    d4:75:14:e8:93:c5:d5:b6:11:a8:fb:ca:a9:29:e1:
                    66:f3:50:1e:c2:81:db:f8:19:85:d5:4e:67:83:c1:
                    0a:96:0b:46:d8:ef:30:3f:bf:56:f6:87:92:68:92:
                    e3:dd:22:8f:a6:c5:3a:dd:88:03:c3:da:14:79:87:
                    3c:a5:21:83:68:7b:b9:75:68:07:5c:98:73:89:9f:
                    37:29:1f:2d:2c:06:5a:1c:61:26:9b:e8:c8:fb:4d:
                    3b:5e:ce:94:dc:80:03:f9:64:49:ef:d2:20:92:ae:
                    bb:5c:85:25:7b:9c:bf:88:68:bd:19:43:cb:5a:bf:
                    93:f6:38:f0:d2:69:b6:22:af:95:53:b2:11:6c:12:
                    40:2c:ee:9c:ab:8f:b3:fd:b7:f3:be:fd:ef:de:c3:
                    c8:b6:c5:1b:81:a0:2c:4b:3d:4a:72:b1:4c:08:5d:
                    0d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:46:4D:C4:60:D7:49:51:CE:17:90:DC:F7:53:68:10:27:29:90:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/601e0b95-c18d-3e35-9cf6-d298b4a6c272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:4110:fc0::/60

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:5b:97:c9:62:4a:10:a3:34:c9:1e:83:f6:4e:ac:da:e2:2c:
         0f:03:3e:24:ce:23:e9:c7:35:62:34:18:07:b0:75:1e:47:bd:
         ef:29:76:f9:b7:a6:91:8a:e4:e0:49:c5:0f:ee:ba:4e:26:f2:
         a2:ca:9d:82:41:45:6e:bd:38:c7:dd:cb:fd:02:91:67:e2:ca:
         17:38:e5:5e:7e:a3:64:68:ed:6a:b7:1b:72:3d:6d:3c:db:99:
         30:58:33:bb:7f:49:57:45:51:b2:aa:43:ac:73:58:9b:37:bb:
         85:c1:63:59:0b:b9:f0:b5:01:ba:42:b0:0c:54:04:c4:c6:ef:
         34:52:02:df:f7:91:c9:b9:91:65:33:99:0e:93:fa:04:b2:4f:
         b5:d8:d5:19:f1:70:2d:9d:96:41:3a:ae:40:0a:be:2b:85:2f:
         23:ad:93:ff:91:32:d7:a3:90:5d:37:28:d4:39:4d:0e:49:fe:
         54:2b:2d:88:29:fe:56:97:da:d2:3d:bf:0a:94:11:8c:f6:f9:
         0e:b4:3c:ed:b9:cc:c3:fd:fd:91:61:08:21:86:11:32:4c:e4:
         e4:48:38:0b:cb:43:c5:74:86:e8:21:65:31:e4:f7:1f:4d:58:
         1d:3a:9a:c4:40:c8:69:3a:ac:57:c7:1e:b8:b9:07:74:27:a2:
         a2:96:96:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:54:17 2025 by rpki-client