Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a429e1f-6b4a-38cd-893d-d4d7fe33a887.roa
File:                     2a429e1f-6b4a-38cd-893d-d4d7fe33a887.roa (raw, json)
Hash identifier:          GhjBOEzzruK0R5zjuOWY+vzqt3o+f+nrnv4v5yMlCIE=
Subject key identifier:   2C:8D:6D:E9:C9:F1:24:0F:3A:EE:E5:10:8B:AA:40:69:90:FD:86:4C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B4081C890E8D304BA2FD15580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a429e1f-6b4a-38cd-893d-d4d7fe33a887.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        2600:1415:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:c8:90:e8:d3:04:ba:2f:d1:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=3c9987cd-3da4-475b-8b46-1b6542674575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2d:f4:0f:47:fc:fd:53:20:e5:14:95:33:83:
                    ad:28:4f:8c:e6:c2:4b:f7:4a:94:06:88:ca:78:41:
                    77:c9:99:cd:8b:89:a6:ae:c6:81:02:4f:f6:cb:df:
                    0b:b0:93:ff:0c:cd:9d:03:f4:44:ab:20:31:1e:8f:
                    84:a9:aa:cc:4c:20:79:6b:d4:fb:e2:67:c3:14:e8:
                    db:9b:6e:9a:1e:d8:03:dd:1c:cc:ce:74:68:19:1b:
                    5a:97:9b:ca:e0:53:ec:1d:88:0c:a6:33:b8:6e:4f:
                    e3:a2:f5:4c:e2:23:c3:e9:85:da:ea:eb:b6:30:15:
                    50:71:24:8b:2b:5c:44:19:43:25:1a:92:30:af:0e:
                    e3:12:f8:f9:ba:95:b1:70:cf:10:e1:6f:b9:d8:a9:
                    bc:79:45:8f:1f:7d:af:56:96:0f:63:0c:39:ac:49:
                    72:2c:b9:7c:1f:a6:70:3d:b0:d5:62:30:f7:5d:ee:
                    cc:63:ae:35:54:86:7c:2e:1b:f3:a2:6b:fd:16:74:
                    03:10:e7:0a:98:1b:72:8f:9f:d0:93:9c:59:93:68:
                    03:3a:10:c9:56:78:be:ae:7c:d0:63:43:76:69:ff:
                    49:d6:9b:b8:e3:b9:fe:ea:83:8e:df:d5:cc:eb:b5:
                    65:29:f0:b6:5b:b7:fd:2b:20:16:21:d6:43:6f:ba:
                    79:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8D:6D:E9:C9:F1:24:0F:3A:EE:E5:10:8B:AA:40:69:90:FD:86:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a429e1f-6b4a-38cd-893d-d4d7fe33a887.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1415:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:80:02:df:ce:80:1a:80:42:83:79:2e:05:ab:0b:5d:a2:39:
         fd:4d:c6:17:41:e8:5e:0e:cf:a3:9f:24:e5:8c:ed:bb:91:2e:
         5a:a0:49:bb:ab:ce:89:0b:a3:ba:12:b0:d7:a9:1d:f3:85:52:
         b7:0c:58:32:4c:49:37:fa:10:3b:46:d1:67:9a:c8:76:33:77:
         2f:0b:39:cb:c1:5d:14:5e:39:57:95:49:ad:47:88:5a:e5:72:
         74:45:65:98:40:68:33:43:5c:22:8b:64:cc:20:8a:bd:78:29:
         b8:e2:03:ae:01:6b:f5:2a:2c:64:2d:9c:ce:11:9d:31:98:d3:
         44:b1:89:98:fa:a2:8e:35:75:a2:11:11:b7:e7:41:2c:0b:64:
         d2:f3:e3:dc:1d:77:5d:10:42:48:ac:6f:93:5c:71:21:e9:11:
         04:ff:8a:81:9d:44:1b:23:fe:cb:75:76:8b:9a:01:6b:c7:86:
         15:34:f1:c1:ee:6b:13:ed:7a:89:84:3e:6b:50:49:da:43:e0:
         fa:3a:f6:f5:f6:40:c0:dc:a0:3b:08:e4:8a:f5:31:de:eb:47:
         cb:8c:ce:13:27:35:19:3b:6f:18:64:7c:65:c3:2c:3c:ff:ec:
         c7:e8:3f:28:d9:59:a5:9b:e5:64:6a:28:a6:0c:bf:1d:9b:c4:
         14:a0:b9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:26:06 2025 by rpki-client