Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/695e8e4c-d432-3126-a3c1-aa94e8253b6f.roa
File:                     695e8e4c-d432-3126-a3c1-aa94e8253b6f.roa (raw, json)
Hash identifier:          hUJTAKM833Lngrcv6IT+kaaUa0IFTXtmmBFALP9igUE=
Subject key identifier:   28:10:92:9B:0B:0D:27:5F:76:75:CA:85:C8:75:71:8C:46:9D:7B:B4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B48E1C967BAFC56E5B83ED180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/695e8e4c-d432-3126-a3c1-aa94e8253b6f.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        2600:1488:6080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:c9:67:ba:fc:56:e5:b8:3e:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=f181d124-1ad3-48b3-978d-4615219e42ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5a:8c:bb:93:be:e9:68:63:2a:83:5a:ed:65:
                    35:b4:cd:2c:df:bc:69:d3:50:68:1d:9f:75:8e:13:
                    15:60:03:7b:d5:05:a7:a2:df:be:c8:29:5f:92:ba:
                    c6:d2:19:10:d5:95:7a:9b:c7:16:33:41:45:56:0f:
                    65:02:2b:25:c1:0e:47:31:6e:cd:3b:57:43:50:94:
                    37:4b:39:5e:b8:7d:de:29:9d:d9:00:23:e1:78:fc:
                    e6:03:f5:58:87:e0:46:9a:8e:25:ab:a6:04:eb:62:
                    9d:2e:95:e2:de:54:a4:10:b5:f5:ee:01:97:c7:2b:
                    e4:aa:8c:b9:85:0c:0d:2f:56:6e:63:ba:94:a4:de:
                    7c:57:ce:ad:32:d7:c1:a6:de:2e:77:06:81:bd:bc:
                    b2:be:1e:1b:83:ca:0e:1d:40:34:49:25:74:c2:2f:
                    d7:97:5b:ed:ba:e1:af:bd:97:25:d1:8a:9f:d8:1b:
                    0f:e4:fd:b6:ed:4f:9e:df:d9:10:57:31:b7:ac:11:
                    2b:df:98:11:21:a5:dd:73:81:9d:bf:92:33:3e:5e:
                    65:35:2c:cb:b4:02:de:14:c9:66:ae:18:9b:8d:50:
                    6d:bf:f7:c1:fb:b9:7a:49:f9:08:12:ef:b6:92:12:
                    76:97:9a:1a:c1:a8:9f:66:41:07:29:2e:89:f0:48:
                    43:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:10:92:9B:0B:0D:27:5F:76:75:CA:85:C8:75:71:8C:46:9D:7B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/695e8e4c-d432-3126-a3c1-aa94e8253b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:6080::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:81:42:ed:29:21:0e:53:da:23:bb:cc:4f:d7:be:69:b2:64:
         f9:61:88:c3:f8:31:c6:68:06:35:8d:75:e4:f3:69:38:25:ab:
         d5:0b:c0:2e:50:e8:c3:74:59:a7:bc:66:0b:ab:6f:d1:7c:0e:
         8d:5c:d8:58:8f:1c:dd:46:0d:69:b5:84:b7:be:cf:f0:70:59:
         7f:85:24:60:0c:5e:44:25:26:4d:48:22:c9:ef:7d:43:ee:15:
         1c:78:e7:f0:eb:6d:f1:57:1a:25:98:a0:64:76:03:a0:35:e9:
         52:70:66:5d:7a:12:16:88:22:5f:7c:6f:47:db:99:8e:01:1f:
         a1:d1:39:a8:cd:8f:9f:f6:42:60:e7:48:eb:25:83:06:f4:4a:
         92:c4:e7:86:d7:37:68:a3:e5:cc:1e:5d:2f:78:b4:08:08:b6:
         d7:ad:ab:b3:cc:aa:51:33:84:5c:11:5b:28:b9:32:dc:ef:4c:
         d6:4d:79:16:82:b7:38:b4:c9:dd:b6:ee:f3:3b:86:ad:2d:f2:
         1e:86:70:2c:3b:2f:8f:c6:4f:49:96:83:0e:26:c1:71:41:91:
         7d:9e:88:10:32:72:ba:27:ed:8a:08:83:f0:ac:99:d3:e3:22:
         72:5c:65:b9:c0:12:41:d3:29:8e:23:3b:e9:13:6f:9e:a0:0a:
         de:05:bf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:30:24 2025 by rpki-client