Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fcb4143-95be-32d6-aa16-d12403de0c48.roa
File:                     1fcb4143-95be-32d6-aa16-d12403de0c48.roa (raw, json)
Hash identifier:          CZJc94zwN2LLdVUN/rnEJeYV/IIKdcR8Yea1R4EN0r8=
Subject key identifier:   13:03:FE:D8:A4:16:72:64:B9:11:19:B8:17:EB:AD:51:C6:34:0F:31
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B3556F8FFC0DA2CC542078500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fcb4143-95be-32d6-aa16-d12403de0c48.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        2600:1417:46::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:f8:ff:c0:da:2c:c5:42:07:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=b655b6d8-f6f9-41b0-a1fa-c0222857e6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:9b:03:f8:62:04:b2:8f:67:26:2d:96:4d:
                    84:a4:a8:bf:e1:98:fd:3c:11:95:c6:37:6b:fa:36:
                    86:36:57:05:c6:95:ca:ff:65:9c:8b:c6:8d:28:2f:
                    fc:2b:1a:2a:da:5f:70:7c:7b:cb:4b:d2:b1:e1:b8:
                    c8:a5:b3:ec:32:93:be:a0:7b:2d:10:8a:0b:83:d0:
                    ec:13:07:e3:35:2a:0f:67:d0:91:e6:a6:89:d5:e7:
                    13:35:3d:12:92:c2:7f:51:5f:e4:aa:80:70:47:40:
                    c5:aa:4b:ed:b6:ed:9b:3b:2a:f8:c5:8c:f5:28:91:
                    3b:ea:1e:0b:5e:a8:80:3f:ab:d6:0c:da:5e:e9:1f:
                    58:a1:2c:9c:42:51:07:ff:31:81:62:dd:89:fe:bf:
                    b8:2e:3a:04:ba:78:bb:0b:11:a2:b4:76:4a:8b:b1:
                    e1:04:75:e7:22:f6:90:bc:c1:0e:72:e9:bf:d5:08:
                    1e:db:e9:7d:bb:37:a8:35:ae:02:e3:8f:fe:de:4a:
                    02:b3:c0:f3:74:b8:95:dc:07:58:9e:f5:37:1e:8f:
                    f8:40:c4:d4:cc:95:9c:72:e9:a4:39:9b:17:bc:8f:
                    01:2b:c9:ac:f9:c0:d7:41:51:a1:d7:2e:d1:cb:8c:
                    ed:24:33:ef:ba:9b:14:bd:e2:9d:c3:a8:4e:79:d3:
                    46:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:03:FE:D8:A4:16:72:64:B9:11:19:B8:17:EB:AD:51:C6:34:0F:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fcb4143-95be-32d6-aa16-d12403de0c48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:46::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:7d:d8:51:95:4c:4e:1c:39:ef:71:d2:2d:31:63:79:6d:20:
         17:e1:90:f5:26:95:f4:0b:7b:a3:be:4a:46:0c:a9:b2:5f:4b:
         e7:02:1d:1c:3d:aa:1e:24:2e:59:a4:e8:f1:97:ca:13:39:7c:
         cd:41:58:03:d6:21:a7:b4:6f:23:4e:4f:a6:07:b8:84:c9:1c:
         11:e4:77:3f:a3:f8:18:b6:c5:75:cf:be:f6:f4:6c:80:19:27:
         0b:92:39:60:51:e6:cc:e2:a7:ce:40:3f:a3:db:17:f3:58:69:
         4a:6d:d1:4a:6f:c4:9e:a7:bf:1c:ce:79:6b:a7:39:58:65:6d:
         d4:88:ea:b9:db:5f:b5:23:09:ca:c9:8c:aa:3c:39:8a:cf:6c:
         ff:2a:2a:be:9e:aa:3e:89:e3:90:08:a3:c4:fa:8c:04:49:0b:
         38:e7:b0:dc:1c:62:a8:3d:ff:16:16:20:28:62:13:a3:a7:9c:
         a2:d1:4b:6e:39:c2:92:53:67:da:e9:a1:bb:31:44:86:9e:bf:
         61:32:ec:3a:d9:65:d9:e0:37:ea:ac:bd:1b:1e:56:42:9a:fe:
         6b:7e:c7:8a:5f:71:91:1a:26:73:99:b6:4c:59:50:ff:dd:fa:
         12:46:aa:52:5d:34:6e:b6:26:68:60:01:c8:d9:7e:8a:71:0e:
         f4:fe:50:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:44 2025 by rpki-client