Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1799bef7-379d-3d89-8827-fe96da225bfb.roa
File:                     1799bef7-379d-3d89-8827-fe96da225bfb.roa (raw, json)
Hash identifier:          7jmczK1FhsY5FU44gfgHEY9Fz865uesTOXtUbZfJgSY=
Subject key identifier:   0B:92:3E:31:55:4C:4E:0D:CF:D4:4F:16:4B:6F:9A:56:3D:1E:EF:24
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B3556F74B4FA6061187901384
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1799bef7-379d-3d89-8827-fe96da225bfb.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        2600:1410:d000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:f7:4b:4f:a6:06:11:87:90:13:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=4591c4c2-3754-493d-9718-c19f827e29a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:06:ab:44:1f:02:e8:d4:96:2d:85:5a:6a:f6:
                    fe:a4:8e:e6:3e:e5:87:1b:7a:98:d9:11:ec:8e:68:
                    81:72:6a:28:21:6a:64:71:8b:62:b5:4e:67:56:be:
                    6a:50:4b:90:6b:95:0c:b1:6d:09:f9:47:a6:79:6e:
                    38:bb:84:75:2c:56:a0:8d:ee:f8:ff:6d:3d:3d:d7:
                    fa:18:99:c0:a8:6f:20:6d:d5:66:dc:00:3a:20:5f:
                    97:81:7e:c9:2c:92:9a:83:62:56:96:b7:4b:8b:8b:
                    0d:2b:06:3c:5f:3f:6a:b1:7d:89:4a:03:f0:14:cb:
                    3b:91:66:1d:d5:6a:98:55:7b:12:b8:88:99:fa:a7:
                    88:75:59:f0:39:13:f8:1e:0e:b1:cf:10:50:b8:75:
                    65:c7:85:e6:3f:c2:d7:15:a8:9a:56:06:db:11:3c:
                    82:f2:82:32:54:2e:58:59:b5:d3:55:43:b9:db:0f:
                    7b:c1:54:7a:b8:71:cd:a3:9c:76:c1:3e:b6:b8:99:
                    44:9a:f7:e0:98:90:76:a0:dd:82:74:69:aa:c7:f8:
                    28:73:bb:86:ac:08:a8:b3:81:63:35:e1:d6:6f:c5:
                    c9:06:4f:0c:98:f8:1a:50:85:96:e8:83:a0:a8:09:
                    f4:af:53:97:6c:58:ef:01:85:86:d7:3b:60:94:77:
                    14:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:92:3E:31:55:4C:4E:0D:CF:D4:4F:16:4B:6F:9A:56:3D:1E:EF:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1799bef7-379d-3d89-8827-fe96da225bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1410:d000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:14:80:33:65:65:21:67:aa:35:85:c3:86:d1:1b:f4:1f:34:
         ec:af:c6:cb:69:7f:db:d4:36:49:d5:02:f5:ad:ac:51:b1:52:
         de:67:d7:62:ba:25:33:6c:52:b5:68:95:2c:77:9c:f5:d6:7a:
         b5:cf:d8:ea:45:a8:61:0e:70:62:7e:f4:21:f3:34:02:d2:72:
         6c:40:f9:7e:2c:bb:98:3d:21:db:65:84:38:66:b2:bc:a4:49:
         1b:26:16:94:25:14:3f:e1:7a:91:58:54:39:c5:c0:7d:32:a9:
         64:cb:e9:1f:16:76:b4:09:c9:cf:8f:e1:50:2e:a8:93:90:8a:
         8c:46:68:f2:eb:c0:f0:a0:15:47:5e:b6:c5:e2:37:85:ca:3c:
         48:ae:a8:19:38:0e:de:c2:a1:1e:f4:3a:72:89:76:12:f3:bf:
         f8:fe:a0:fb:f8:27:63:3f:4d:3b:4b:5d:58:eb:c1:aa:30:39:
         0e:1c:c0:07:c8:5d:64:76:64:e7:15:9c:63:75:c7:89:c8:cf:
         2c:28:e6:07:a5:49:1f:25:f2:cf:d1:bc:30:b2:a0:22:12:96:
         04:85:fd:a7:76:a9:cb:4b:c7:e6:d9:2e:2a:46:6d:0a:6f:5f:
         ff:a0:85:f5:c0:43:e1:a3:a4:dc:51:85:4e:dc:f0:a2:4f:23:
         38:ab:9e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:55 2025 by rpki-client