Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1cdbbe46-64e9-3b59-ad45-ec6c2bec44f5.roa
File:                     1cdbbe46-64e9-3b59-ad45-ec6c2bec44f5.roa (raw, json)
Hash identifier:          87QDtzIJKROG7hhI6FfFudwHD+5AN/PGYmUcTK+/fPM=
Subject key identifier:   53:51:FE:52:98:9A:FE:D6:0A:0A:37:89:08:0D:AA:DB:3D:C9:C7:4A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B4D11E709694065BF6222B400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1cdbbe46-64e9-3b59-ad45-ec6c2bec44f5.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     9498
IP address blocks:        2600:140f:bc00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:e7:09:69:40:65:bf:62:22:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=44bddc89-4884-4b7c-9cb3-ca3f3439ef85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:9d:b4:d1:8f:4c:c5:97:8c:9b:b4:ec:51:
                    a4:62:08:ec:8d:84:75:3d:70:93:e8:5c:d4:5a:ad:
                    10:92:2d:4c:d0:c4:20:ae:2c:1e:ff:ea:44:59:21:
                    73:6a:4a:d1:5f:03:98:39:63:ed:ef:f1:00:85:0a:
                    30:8d:4c:98:d6:f4:2e:3a:e7:9d:8c:07:eb:31:7c:
                    36:a3:c5:4b:c5:b7:ec:a5:4e:63:5e:fd:a2:4a:01:
                    92:f7:4f:06:87:a4:65:2a:ed:89:46:55:52:5d:f8:
                    3c:59:c8:98:89:6e:fd:c8:45:35:c9:f5:05:63:4d:
                    16:fd:27:3f:c5:9a:3b:74:4b:81:10:3d:41:23:49:
                    10:d1:ef:49:d3:f5:cf:59:b8:6c:84:19:80:9d:b1:
                    4e:42:8a:8a:7d:f1:3d:cd:3b:38:23:75:a0:f6:00:
                    15:73:09:e8:9b:32:85:89:58:46:fd:5f:30:27:c9:
                    35:16:a7:4b:90:ff:54:01:5a:0f:da:26:d1:10:60:
                    49:d7:08:4d:0a:6b:90:3d:44:16:0c:98:fe:fa:09:
                    91:f5:1c:19:8b:80:90:8e:38:48:f9:94:f1:d9:ca:
                    4f:67:d0:13:99:9c:27:d7:4f:48:10:d0:be:96:02:
                    66:e7:4a:5f:3f:1a:ce:39:df:7a:00:52:07:67:64:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:51:FE:52:98:9A:FE:D6:0A:0A:37:89:08:0D:AA:DB:3D:C9:C7:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1cdbbe46-64e9-3b59-ad45-ec6c2bec44f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:bc00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:4c:70:98:f7:d8:3d:aa:e5:55:b9:5f:c0:97:f1:61:ab:1c:
         6b:45:c8:04:b3:3f:43:8a:95:3f:78:29:76:b2:1f:9d:95:c9:
         40:fc:c4:af:b9:e0:2f:3a:99:47:9d:87:ab:19:87:b6:f3:8b:
         f3:40:38:a3:7e:93:30:f1:db:12:b8:42:33:5b:4a:a6:e2:ab:
         b0:eb:21:6c:e7:cc:f5:c8:88:53:94:e4:56:15:03:10:46:7d:
         b9:8f:8c:c6:ea:13:fe:40:40:81:0f:e5:3f:8b:7c:81:3a:1a:
         7e:9b:f2:f9:ee:ce:0f:ed:aa:2d:11:ff:67:9e:87:3f:66:21:
         b9:14:6b:7d:fa:33:c8:ae:3c:b8:38:d2:42:6e:06:a1:a7:20:
         be:49:a0:87:67:e0:06:15:3e:e7:fa:91:f3:8d:86:3f:bc:ee:
         f7:de:40:2c:48:c3:f2:15:c1:59:74:28:54:71:8a:09:f0:72:
         48:05:e8:1b:41:5b:64:98:d1:5a:88:d7:cf:e1:b7:bd:07:e5:
         e2:f1:2a:3a:e6:9d:11:ee:f4:f4:0a:40:b3:e5:b7:b7:28:21:
         fe:ae:2c:49:e4:28:ca:f3:af:45:ae:3f:91:20:bd:88:78:4d:
         51:7c:68:c8:b6:2e:ca:7b:92:05:8f:a6:0a:69:3f:72:e5:c2:
         e5:4d:22:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:19:09 2025 by rpki-client