Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4191dcc0-0c3b-347b-bffe-51907b8f3c3d.roa
File:                     4191dcc0-0c3b-347b-bffe-51907b8f3c3d.roa (raw, json)
Hash identifier:          Z7ch9cUxYXCwGdH9AUVBK9ULrH7+kbAtddxNVAfESIw=
Subject key identifier:   B2:0B:CB:F1:7F:8D:11:AC:6F:5B:AA:67:0A:81:D8:2E:C6:B3:19:C2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B4081BBEF43B5C1B5D6A1DF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4191dcc0-0c3b-347b-bffe-51907b8f3c3d.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        2600:1411:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:bb:ef:43:b5:c1:b5:d6:a1:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=e9914f9d-3238-4e07-8c36-0df31aac82b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:57:c2:cb:f3:f2:6f:94:5b:08:f4:14:d0:91:
                    f5:f5:66:1f:3a:15:6c:d7:01:a6:4d:32:15:7d:f9:
                    64:18:1b:57:cd:80:1b:c3:1c:aa:af:64:24:2d:94:
                    6a:d3:ee:3b:f8:6a:ef:3e:80:2e:b9:f0:2b:42:38:
                    70:1c:47:42:70:55:af:65:aa:34:5b:26:12:c7:ce:
                    5f:77:ad:92:5b:17:75:72:14:82:2b:40:ac:53:97:
                    14:8b:9a:91:a0:1c:dd:65:ac:be:d7:15:90:6e:72:
                    65:67:5d:5d:e4:e2:69:5a:b4:99:77:dd:f2:9e:88:
                    ac:b2:74:5b:29:b8:72:bd:3a:82:a1:c0:57:03:0e:
                    30:fc:8c:b1:49:65:14:d3:96:09:1d:2f:e6:8c:3e:
                    30:f3:04:6a:6e:56:63:f7:57:2d:5d:e9:47:95:f1:
                    31:ca:e8:e3:b1:0c:c2:51:be:ee:5c:28:98:d3:a7:
                    2f:79:80:ec:89:65:03:09:fe:06:c8:73:2d:c8:5a:
                    27:5f:54:e1:4a:69:e4:2b:c4:15:1a:be:93:89:dc:
                    3f:cf:4f:7d:cf:3e:11:86:4c:d8:4f:97:81:2f:67:
                    da:70:c2:ed:90:26:cd:a8:5f:c3:f3:8f:c6:dd:74:
                    45:5c:6e:d2:dd:a2:24:fa:b0:50:87:8a:d7:1e:85:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0B:CB:F1:7F:8D:11:AC:6F:5B:AA:67:0A:81:D8:2E:C6:B3:19:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4191dcc0-0c3b-347b-bffe-51907b8f3c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1411:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:f6:0b:54:e0:b6:f3:f2:1d:46:47:94:1b:de:6b:38:bf:9a:
         62:75:2d:9d:43:15:b4:ae:f3:9c:a5:e6:ff:f8:db:13:bc:91:
         46:e6:29:46:4b:cf:b5:76:ee:80:20:8c:d8:8e:82:f3:3d:e7:
         e5:a1:43:6d:13:ce:27:f2:f2:bd:2b:e8:26:80:ce:73:11:cd:
         0b:0b:ee:12:df:5e:45:a7:24:54:cf:e1:83:dd:3d:74:41:bd:
         e2:d0:5f:8a:35:e9:0e:8b:3a:bf:92:38:e7:85:46:a9:81:b0:
         45:19:bb:3f:e9:b0:d6:3e:7e:0e:aa:ee:29:1e:ff:24:82:32:
         29:43:d2:81:f3:48:37:bf:7e:ac:af:7b:60:e5:86:25:d9:11:
         6a:ea:80:80:e8:7b:05:fd:23:d4:84:68:e9:8e:b7:aa:3f:23:
         12:df:0f:7f:c9:66:83:17:1c:b6:12:50:fb:75:b7:aa:6c:cb:
         90:f0:2f:43:27:4e:53:af:8c:df:df:f3:92:39:66:12:f1:6f:
         48:9f:7c:01:cb:02:6b:42:2a:93:e7:8f:56:86:23:7c:e0:56:
         5e:a3:0b:4c:44:f8:0c:fd:3d:ae:7f:4f:5f:b8:c2:6f:24:72:
         61:1f:b6:13:15:93:b3:42:42:0b:42:27:5b:a0:c9:b9:13:bf:
         9b:46:55:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:26:37 2025 by rpki-client