Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16732b7d-993f-3d4b-b335-7f81488b926e.roa
File:                     16732b7d-993f-3d4b-b335-7f81488b926e.roa (raw, json)
Hash identifier:          aTZ739Fz8QmrWqhuPvME1cQg6EdQL5nUBNzIjlcvX04=
Subject key identifier:   26:B3:9F:2B:0D:9C:86:20:5E:17:6F:4F:D8:62:3E:31:5D:31:D0:DF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2CF6FFD9D285FACF141ED1C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16732b7d-993f-3d4b-b335-7f81488b926e.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        2600:1406:5400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:ff:d9:d2:85:fa:cf:14:1e:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=665b3bec-87ac-42e9-bb1b-b726ea2bb09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bd:6e:b6:5a:72:34:9a:4a:6c:56:f1:37:37:
                    08:97:c7:75:5b:5d:8b:5e:c1:1d:9f:10:03:83:9a:
                    f7:68:9f:44:d4:78:29:b1:d6:91:a3:2e:f4:48:9c:
                    82:7f:db:91:00:cc:1a:51:50:16:b9:11:6f:a8:e4:
                    e5:93:a8:b9:c5:90:57:a5:ea:6e:de:e2:f3:a2:a8:
                    45:43:c6:99:71:12:13:60:10:72:20:3e:e1:db:09:
                    c8:29:ec:29:7d:f0:50:f7:43:87:ff:2c:23:2b:2a:
                    88:f3:f1:dc:07:4b:72:d1:a5:48:f0:cc:c4:f9:26:
                    8c:b2:47:97:29:ab:40:81:f8:c4:41:92:a6:62:f0:
                    35:8a:a2:e6:5c:e9:06:10:b4:42:f1:73:73:47:df:
                    ca:69:2e:e2:32:d3:10:63:2b:0c:7e:80:d2:25:d2:
                    89:32:bb:8c:e2:1c:ec:45:24:60:40:a1:02:05:bd:
                    e3:36:e4:30:2b:b6:0c:5d:56:c2:ff:9d:ff:de:fd:
                    05:87:2c:b7:51:d6:7f:c5:aa:0b:7a:77:9b:19:c0:
                    af:45:1a:46:b9:49:a1:37:ff:c8:2c:2e:36:35:77:
                    b0:b0:9a:7a:5d:f6:49:b0:a7:d5:fe:db:74:3a:d4:
                    f3:72:8b:04:cb:09:e0:0c:b0:30:94:9e:03:ca:b6:
                    73:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B3:9F:2B:0D:9C:86:20:5E:17:6F:4F:D8:62:3E:31:5D:31:D0:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16732b7d-993f-3d4b-b335-7f81488b926e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:5400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:6d:07:f2:af:26:56:22:02:6d:74:65:48:b7:53:76:30:1c:
         5d:2d:db:04:86:c7:be:1d:f3:55:2b:e8:8b:3d:01:14:21:8e:
         8f:74:2f:d2:a2:a2:b5:8c:56:be:b2:5c:1c:a7:7c:97:d2:c0:
         85:9d:1f:f7:57:2d:67:61:c0:a0:da:d7:3f:93:c4:ab:27:56:
         fc:dd:1f:0d:e1:cf:7e:a4:b4:b7:a4:35:39:9c:83:68:b3:f6:
         e6:64:dd:62:ab:8c:1d:41:eb:a1:8b:77:39:89:a3:d5:09:a9:
         b7:8d:1e:a1:e7:50:0f:55:b7:44:50:01:54:00:14:71:03:e2:
         4d:03:a9:ad:b4:e9:97:0a:c2:cb:64:2c:17:c3:90:1b:5d:eb:
         96:2f:4f:c7:ca:2c:c7:85:31:b2:29:f8:ce:43:2b:96:e7:6f:
         ea:30:c4:2f:6b:9e:ff:20:6e:4a:45:6f:30:49:e1:61:13:37:
         0f:0e:c5:52:d0:86:ee:d9:c8:86:67:44:a4:8b:ca:aa:9a:19:
         59:40:2f:ce:77:55:0d:61:35:cc:cb:d5:1c:a0:3c:cd:d9:b9:
         8c:74:e4:f6:25:a0:7d:46:d3:8c:3b:d6:02:69:7c:c9:9d:37:
         cb:8a:18:79:3b:78:34:78:98:74:b6:74:ed:a6:54:ae:b7:fb:
         41:db:ae:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:27:32 2025 by rpki-client