Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61234719-1237-3ce8-ae01-f51935ee326a.roa
File:                     61234719-1237-3ce8-ae01-f51935ee326a.roa (raw, json)
Hash identifier:          LyhF83NUGb/nPZJ7KlUIN93QNC+kmEzKut7+dKG4B+I=
Subject key identifier:   47:34:B7:F2:BA:03:1F:65:ED:99:D7:4E:42:11:CF:8D:EF:D2:56:0E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B48E20A3DBFE84803203B36C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61234719-1237-3ce8-ae01-f51935ee326a.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     35994
IP address blocks:        2600:1404:e800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e2:0a:3d:bf:e8:48:03:20:3b:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=cd063a9b-03a6-4224-a925-5b74291631ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:96:55:6d:e4:10:4c:2a:8c:93:f6:53:2a:
                    cd:e5:78:6f:21:cd:78:12:30:20:cf:39:f2:98:e9:
                    9c:6b:aa:68:45:de:f0:03:0b:aa:1d:f7:6c:76:75:
                    fb:b4:b4:dc:10:3c:e1:3d:f0:ea:fb:6c:5a:c0:6f:
                    3f:c5:56:6d:23:d9:08:ce:13:dd:5c:85:c4:18:51:
                    ae:5f:d9:11:a7:48:27:ed:7e:58:60:e3:e9:9e:ed:
                    78:a0:65:04:a5:f9:af:fc:4c:f4:3b:a3:52:e7:08:
                    da:f0:f5:94:c6:06:78:1f:b8:f4:47:ff:24:bf:fd:
                    20:fb:49:3c:e4:c2:86:8b:06:05:9b:1a:4e:2c:17:
                    97:65:dc:0f:10:16:bf:a8:dc:6b:28:16:a4:de:84:
                    af:54:94:e5:96:74:29:a1:92:65:26:9a:b7:2b:95:
                    ce:23:e0:47:d3:11:42:47:93:bf:02:0c:02:f5:0e:
                    ae:ae:15:bc:d8:3f:c2:13:cb:4c:9d:aa:a3:f8:fa:
                    67:42:d3:6a:bd:8a:1c:51:5f:2b:79:0d:24:e4:59:
                    56:4e:db:95:17:32:56:43:4d:e6:ef:99:5d:cc:25:
                    9f:25:d5:d5:f3:ed:1f:77:d0:c8:a9:11:69:75:3e:
                    8b:39:40:ec:69:29:45:bf:fd:ab:31:c3:7a:2b:12:
                    23:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:34:B7:F2:BA:03:1F:65:ED:99:D7:4E:42:11:CF:8D:EF:D2:56:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61234719-1237-3ce8-ae01-f51935ee326a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1404:e800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:88:e9:f4:ce:b2:89:6d:c1:1b:64:53:f2:23:00:4f:c4:f8:
         8e:5c:97:e4:88:fe:2b:41:2d:9a:ba:97:de:47:cd:87:8c:cb:
         9d:53:b9:d7:07:e1:7c:91:82:ac:3c:51:f8:92:be:50:14:db:
         6a:80:11:08:39:29:e2:c6:4a:ec:d8:56:f9:fb:f1:d5:02:d3:
         3a:09:61:29:ef:1e:85:c7:19:9f:5f:ed:15:4c:8a:60:e3:48:
         00:8c:42:ee:98:f7:2c:31:c1:3c:8e:03:3e:44:ab:83:b4:0b:
         38:3f:f8:b6:8b:b0:65:3c:0d:80:0c:ed:95:3f:a7:94:4b:14:
         8e:34:0e:f3:c2:00:4b:30:dc:e8:81:f0:cf:6e:a8:14:d8:c4:
         3a:1a:07:44:c9:0d:22:c3:0f:94:b5:e1:51:17:1e:18:3b:b9:
         f3:94:89:d0:5a:6d:b9:a3:1b:f6:9d:78:45:e9:fe:57:20:12:
         84:6d:02:38:84:13:07:3d:51:e2:35:f0:72:16:b9:0e:8d:08:
         b6:3e:07:09:98:9d:d3:4e:2d:cd:d4:2b:3f:b2:86:a5:87:d2:
         e6:db:cd:7f:5a:98:2d:2c:b7:67:05:1f:c7:30:0b:ef:d8:d9:
         51:d9:a8:2b:c2:f7:90:51:44:6d:a8:c3:31:86:fa:fa:51:27:
         25:a2:5f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:39:41 2025 by rpki-client