Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f1c78e6-5f98-33e5-9dc1-232021669cbe.roa
File:                     0f1c78e6-5f98-33e5-9dc1-232021669cbe.roa (raw, json)
Hash identifier:          La2uEfqlHAyFIk8niUVX+TWgLbb273YOIykFQcWlGrg=
Subject key identifier:   38:6F:9A:2C:6F:7F:AB:51:10:59:1E:4F:D0:9B:6F:8D:D0:6F:00:32
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B4081C8B0DA69C53F4D55D1E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f1c78e6-5f98-33e5-9dc1-232021669cbe.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        2600:1416:9000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:c8:b0:da:69:c5:3f:4d:55:d1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=bdc7e386-132b-4336-8240-a5995cca53c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:cc:dd:2a:6f:0a:39:af:e5:15:4a:98:a4:
                    07:d3:e5:ad:f9:d4:5e:9d:be:0b:71:96:24:32:eb:
                    15:44:70:38:28:f4:3a:2a:a9:6c:82:f2:4c:ae:b2:
                    05:69:3b:17:af:77:56:5c:9c:bb:6f:97:18:7d:17:
                    fb:50:cf:1b:16:0d:63:1e:33:3e:9f:2f:ef:46:9d:
                    e2:a9:6b:fb:b3:4e:b4:d3:33:ed:24:d1:b6:87:a7:
                    c0:5b:90:30:ff:d1:3a:53:cf:00:72:f2:89:5f:b3:
                    fe:96:34:cb:16:59:0c:11:cf:f0:02:9d:7d:ef:67:
                    0e:9a:66:35:f6:ab:e2:c2:2e:1c:9e:5b:c8:8f:e1:
                    5f:38:cb:b9:9c:c5:d2:40:7f:d8:c8:d7:21:d9:37:
                    ef:bd:fc:8b:56:89:21:69:ab:ae:ce:5e:17:5f:59:
                    ed:be:5c:b0:42:86:2e:d5:67:68:84:d6:27:76:5c:
                    48:d8:3f:0d:30:1a:5a:3d:5e:ae:5f:3b:f3:4a:56:
                    89:d6:dd:85:ae:06:b6:28:1d:5f:3b:c6:03:64:25:
                    b7:4f:97:8f:7c:69:6a:a0:09:61:cf:9a:56:b2:06:
                    fc:e8:64:66:5f:7b:6c:10:32:77:b8:3b:38:8f:90:
                    5c:0e:f5:ca:6f:98:2d:c6:e5:1b:08:95:38:5d:4e:
                    57:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6F:9A:2C:6F:7F:AB:51:10:59:1E:4F:D0:9B:6F:8D:D0:6F:00:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f1c78e6-5f98-33e5-9dc1-232021669cbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1416:9000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:52:9b:02:8c:cd:ab:01:23:51:91:6e:b2:85:b0:75:fd:27:
         1f:82:e3:35:28:5b:2b:6c:43:34:5e:cd:4a:35:88:47:3e:77:
         03:70:90:0b:31:95:42:c9:2e:91:3d:b4:4f:90:cb:f2:f8:18:
         f4:70:22:ce:58:65:1e:0a:0e:97:6a:4f:b1:68:7b:77:9f:7b:
         58:08:e5:fa:34:c8:6a:28:b7:83:fd:63:14:6b:de:3d:09:03:
         4e:8d:98:92:e8:29:48:46:fb:05:da:0e:a2:2d:2d:9f:d1:34:
         0f:63:dc:61:98:c3:b5:b0:e0:20:95:99:0e:95:fb:9a:90:4f:
         56:0f:83:a5:8c:31:3a:dd:51:cd:cb:08:22:01:11:74:d4:c9:
         bb:67:e1:fa:7b:12:9d:b6:dc:6d:3d:fb:60:07:d9:77:c7:e0:
         e7:f4:eb:79:5e:7a:1c:88:46:6a:9e:58:76:6b:f8:c5:df:31:
         b3:fa:a6:51:8d:3b:66:e0:55:26:ed:3f:7a:02:8e:ca:50:30:
         11:b3:29:35:69:b1:7a:35:3d:a7:41:59:5a:a8:e0:68:b7:6c:
         ba:58:18:dd:7f:2f:35:a0:51:f2:01:1e:6d:ab:87:24:7c:87:
         7c:34:e1:80:cd:b1:14:02:0b:48:a3:e8:e6:ae:5d:b6:03:17:
         53:8f:dd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:07:09 2025 by rpki-client