Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d9040f3-dd7a-316b-baf6-7f7053148da9.roa
File:                     6d9040f3-dd7a-316b-baf6-7f7053148da9.roa (raw, json)
Hash identifier:          6qHnJkbekh9qSRumcS0N9HC4923aW4YNdazT/jWmE+4=
Subject key identifier:   FF:12:27:23:3E:27:AA:2F:CD:A3:44:2F:8F:33:FE:4F:E6:95:EE:EA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B48E206F8C039998C6CFF7980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d9040f3-dd7a-316b-baf6-7f7053148da9.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        2600:1488:6002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e2:06:f8:c0:39:99:8c:6c:ff:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=ad4b04e1-437e-4635-bce3-5202c66126c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b3:31:0d:26:4c:9b:50:ed:13:1d:d2:3a:38:
                    31:c5:43:cc:e5:71:8e:95:44:75:c7:69:d6:cf:0e:
                    d2:fe:18:9c:08:20:31:15:21:32:7f:f2:17:9e:c4:
                    99:77:27:ea:a8:05:bc:53:f9:02:0b:f9:da:15:c0:
                    3a:a9:da:56:fb:89:d0:79:b8:62:99:dc:b2:a1:fa:
                    0c:37:4f:02:30:74:64:04:88:54:ca:5d:77:b2:d5:
                    3d:57:3e:15:ea:b9:2b:b1:e2:c5:ad:49:90:75:6d:
                    6b:b8:61:f8:2f:55:54:c0:d0:9a:25:86:f0:c1:2c:
                    78:e8:08:27:61:22:42:c8:75:03:c5:a0:0c:e4:02:
                    bb:08:98:09:0e:db:cf:0d:f5:23:58:f9:34:d8:10:
                    47:57:89:89:ee:ce:6e:58:98:1a:4f:23:95:15:dc:
                    f3:ed:85:b9:a6:f3:9e:4a:5b:d5:be:c8:ce:3f:7a:
                    38:56:1e:e6:75:8a:87:cf:26:36:77:c1:90:ac:da:
                    72:18:a5:9f:35:0d:1a:a3:df:4c:42:e0:10:17:f6:
                    f6:d5:bd:13:e5:b4:c5:b9:48:e7:ee:14:c0:61:36:
                    e4:9f:1e:2a:e3:e9:f0:50:a4:11:e0:40:64:ef:23:
                    cf:b5:07:11:5c:74:c0:4a:66:3c:c8:6c:68:8f:94:
                    d3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:12:27:23:3E:27:AA:2F:CD:A3:44:2F:8F:33:FE:4F:E6:95:EE:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d9040f3-dd7a-316b-baf6-7f7053148da9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:6002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:2f:76:36:63:58:02:37:af:2b:0c:a4:d5:f7:c7:f8:bd:27:
         91:6c:20:a3:38:d5:31:b6:a7:69:91:be:5e:61:cc:02:19:4f:
         a0:79:68:69:b0:50:2a:67:25:91:8e:9d:f5:20:03:b6:04:66:
         b6:b2:db:02:19:7a:98:d1:b3:8b:3d:fb:7d:53:af:f0:d4:90:
         93:1f:5f:fb:cf:85:74:53:e8:86:ae:6f:d1:39:47:54:a6:c0:
         7f:a7:a5:b7:63:84:17:09:7a:4b:d5:41:0c:0e:f2:e7:4a:a5:
         84:0e:df:0d:86:7d:bd:e0:cb:50:64:de:6c:16:52:04:ec:6d:
         fc:8e:62:ec:cc:65:26:eb:c8:4b:5c:13:fa:6b:55:0a:37:99:
         67:86:19:81:19:be:21:20:e8:28:13:6d:c5:64:10:50:cc:78:
         e4:14:eb:0b:22:99:1d:98:a3:86:0c:f2:12:7a:35:e9:15:21:
         17:16:99:93:92:0f:c4:ad:b8:8d:26:c2:78:a7:6f:0c:ab:0f:
         ac:fa:c4:a9:13:62:03:38:ea:05:57:d1:81:52:73:b1:92:e9:
         c0:e0:b3:98:37:4f:e7:5c:cd:c7:a1:e1:f7:60:53:84:fc:9c:
         40:49:23:4e:05:a1:d1:28:92:28:2e:af:71:5f:ad:79:26:ac:
         93:08:a6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:27:20 2025 by rpki-client