Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d710879-5174-37a8-b083-a00e701de633.roa
File:                     4d710879-5174-37a8-b083-a00e701de633.roa (raw, json)
Hash identifier:          MenxgXiHPwODrr4pYfCR5rnqCiGfna3Nj44t70m0a2Q=
Subject key identifier:   C0:37:B6:45:3C:84:40:19:A3:70:74:EB:71:1A:64:D4:A0:38:C7:41
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B4D11E960FBACA889919D6F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d710879-5174-37a8-b083-a00e701de633.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     8966
IP address blocks:        2600:1417:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:e9:60:fb:ac:a8:89:91:9d:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=c1533289-0fff-4278-963a-a59297f424ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c0:85:4a:b1:19:34:72:8e:c5:36:7c:9f:9b:
                    32:ac:fc:d9:f5:7c:60:6a:07:a5:e3:a5:c6:4a:ed:
                    e5:23:bb:b6:03:22:e0:6b:e5:fd:80:1b:0b:56:8d:
                    c8:bb:b3:7a:71:1f:0b:04:27:76:c5:95:fe:3c:7a:
                    70:1e:88:4a:25:52:53:01:ee:53:b8:fb:f7:6a:d7:
                    1f:75:52:ae:e7:72:05:8b:15:3f:4d:d3:72:76:a6:
                    46:11:26:fb:55:93:04:4c:d6:67:dd:f8:93:70:0d:
                    f8:be:80:9e:2d:6b:d6:bb:1d:06:cc:0b:76:36:35:
                    cb:bd:8c:c5:f2:a6:28:38:ed:ba:d6:ec:9f:c4:57:
                    e0:ae:62:a7:1e:06:7b:bc:a1:d5:fb:51:a5:42:c6:
                    6c:c1:1f:29:77:c2:50:61:7b:0f:fc:4b:58:43:bb:
                    9e:48:b1:34:33:31:b1:b5:97:13:d2:9b:33:21:e3:
                    c5:26:43:17:e8:5a:f6:d1:f7:ff:bd:2f:4e:58:de:
                    ca:f3:a1:ec:f8:28:5f:ea:0b:ad:69:62:54:5d:17:
                    2b:24:9b:42:53:eb:d4:37:5b:76:3d:06:4e:72:b3:
                    24:70:69:08:7b:e5:75:fd:d7:9c:3f:0b:76:38:b2:
                    bd:6c:a7:dc:0d:13:89:98:82:e5:6e:14:be:89:ce:
                    fc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:37:B6:45:3C:84:40:19:A3:70:74:EB:71:1A:64:D4:A0:38:C7:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d710879-5174-37a8-b083-a00e701de633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c0:1a:dd:d0:50:46:12:4c:87:c2:ed:b3:37:3e:1d:68:25:
         64:9e:fd:32:df:dd:0c:b8:4c:82:80:5c:c0:4c:a1:9f:54:e1:
         e9:6a:15:f4:9f:4b:99:98:c2:d7:8a:88:00:62:fa:9f:43:3d:
         56:ee:e8:44:8a:73:5f:53:2c:4b:82:be:9f:32:d2:b3:be:b2:
         aa:43:0b:b1:60:e7:e6:5d:8e:7e:89:73:02:ec:ae:ff:6e:c3:
         d7:af:f1:1f:62:f8:2d:ff:bb:ea:5f:72:53:f3:b3:95:10:cf:
         0e:9b:69:f0:80:dc:1c:2f:d2:53:18:77:10:ef:14:67:5c:0d:
         02:cc:a5:dd:fc:8f:d4:bc:12:7f:6e:4b:46:2f:70:61:d3:84:
         91:f1:5e:14:96:99:31:59:1d:f2:00:a1:ce:23:f3:a1:52:81:
         54:14:bf:50:b2:29:3f:73:c6:3e:68:9a:fa:cd:26:40:dd:b3:
         7f:81:36:7c:ee:12:92:fd:16:f4:ac:32:cf:e4:0a:59:75:4c:
         96:5b:57:f6:22:94:35:a4:b2:c6:18:2d:0c:f5:33:f3:a5:f7:
         6e:0b:1a:ce:57:d1:66:77:74:fe:59:36:ec:64:7b:25:3e:c2:
         51:d1:cb:21:bc:30:1b:eb:1d:f7:81:d2:8b:8b:e3:f7:7e:4f:
         7b:12:26:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:43:43 2025 by rpki-client