Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d247d27-6beb-33ac-a8a5-f2757add8f8b.roa
File:                     1d247d27-6beb-33ac-a8a5-f2757add8f8b.roa (raw, json)
Hash identifier:          VkOTVUxMRgVo8B+9WFm/AL1Pnncv+9GR5jMYccwJW4k=
Subject key identifier:   59:44:AB:3B:D2:2D:56:02:77:B5:8F:74:52:D9:58:15:CF:7F:E8:D9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B3821AB17383B7B695996C6A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d247d27-6beb-33ac-a8a5-f2757add8f8b.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        2600:1417:e800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:ab:17:38:3b:7b:69:59:96:c6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=771ee77d-1b9f-48b5-a4f3-fd00ddae60a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:43:99:a2:69:e9:a5:e5:b0:70:cf:7b:8d:5a:
                    1f:7b:b8:71:1e:25:f0:25:f2:07:42:c1:31:c0:42:
                    96:e5:b1:d8:72:1a:2d:d8:67:fe:a6:b7:b5:8d:0b:
                    6d:38:13:fb:c6:9f:03:5a:d8:1d:cc:7f:4d:a8:d6:
                    9b:47:83:89:4d:fe:34:bd:21:75:f9:70:d0:77:f4:
                    a8:ea:98:09:1b:36:ee:ec:0f:f2:76:43:df:a1:3e:
                    61:2d:50:17:e6:53:43:fe:c0:ce:8a:2e:68:ba:cf:
                    c0:fd:21:1b:48:97:c4:46:3f:71:e5:62:4a:59:11:
                    bd:7f:52:6f:a9:73:eb:8c:62:20:28:5f:08:7e:1c:
                    71:a6:bf:0b:8f:1c:e3:05:e1:32:eb:38:46:e4:be:
                    0f:ea:bb:97:8e:45:b1:19:c1:50:34:00:c1:5c:8c:
                    3b:a8:f8:58:a9:fc:1b:6a:92:aa:6d:f7:8c:fd:f0:
                    95:62:9f:f4:83:25:b9:1d:04:6c:e8:17:3d:89:1a:
                    ba:1b:cb:ac:82:57:ed:c6:1c:98:7f:cd:2d:06:fd:
                    97:91:3b:ca:9a:8c:de:50:01:fb:3c:b4:aa:34:f6:
                    ba:4e:16:b7:ce:8a:72:91:d6:2f:c7:e4:99:9b:7a:
                    2d:9b:d2:71:4a:d3:17:9c:e4:e4:ef:26:15:4e:6a:
                    45:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:44:AB:3B:D2:2D:56:02:77:B5:8F:74:52:D9:58:15:CF:7F:E8:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d247d27-6beb-33ac-a8a5-f2757add8f8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:e800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c0:2b:e2:1d:a7:33:93:ff:11:c7:85:cd:56:4d:3d:8e:e6:
         6e:cf:43:94:cb:11:6b:e0:6c:f5:f7:85:d7:0c:9a:d5:82:7c:
         54:ca:ee:3f:50:41:33:46:fd:94:b1:b3:da:d8:32:5f:a4:0b:
         14:6f:ef:4f:8d:3c:ee:ba:af:e7:17:1e:74:aa:07:92:8b:04:
         04:5c:57:36:66:2d:08:4d:b5:8f:06:6f:1b:e9:8b:3f:8b:ae:
         cd:54:bf:9c:da:5e:53:89:a0:24:4f:cf:d7:cd:77:c0:d3:13:
         2d:92:b5:f6:a4:6d:86:4b:f7:4e:09:4c:14:53:64:5f:3f:48:
         7f:04:64:62:75:64:f2:51:9d:06:9d:81:bf:a0:b4:5f:30:b9:
         16:29:2f:1d:e5:b4:fd:d9:2b:fd:dd:dd:56:b4:a0:1c:af:ef:
         b4:51:04:88:ea:30:8e:59:04:74:fe:2d:1a:ae:74:e0:a6:4b:
         4d:ba:8e:95:0b:07:18:e3:4d:91:22:18:38:ef:50:c0:7b:e3:
         a1:73:bd:b1:84:2a:2b:71:c0:1f:c2:fb:aa:63:c9:20:f7:ab:
         f1:28:81:b7:94:62:77:95:88:9d:a5:65:df:f2:00:b4:06:92:
         1c:00:62:2f:a9:22:be:d7:88:fd:9a:d1:d5:2d:5b:bc:45:db:
         e1:2f:40:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:27:44 2025 by rpki-client