Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/781d61f4-48b6-3e01-b568-cd2c4e459eca.roa
File:                     781d61f4-48b6-3e01-b568-cd2c4e459eca.roa (raw, json)
Hash identifier:          S8S6jM0Y1G3xPD3Wcav1jx2EhSchgbujMSZzbdZTIHM=
Subject key identifier:   C7:58:A4:65:73:7B:8A:8A:24:5B:04:C3:30:2A:4C:EF:56:30:25:72
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A549B29EE46AF3F1AD4BD2FC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/781d61f4-48b6-3e01-b568-cd2c4e459eca.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     20940
IP address blocks:        2600:1415:8800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:29:ee:46:af:3f:1a:d4:bd:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=76befad6-d7be-4eee-afbe-d91e40d82191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6f:ce:6a:cd:b0:eb:30:64:69:4a:e8:b3:b4:
                    42:b9:03:f9:4d:59:be:8a:10:6a:76:95:fd:ca:13:
                    63:b8:8f:12:22:50:a1:e8:5d:6d:d7:9a:d4:51:27:
                    a0:b7:6a:cc:fa:36:a0:16:0b:15:11:d5:1b:d5:da:
                    5f:ae:17:26:04:f9:ed:e8:89:bd:7e:49:68:09:a5:
                    6f:47:26:96:3f:0f:c9:4b:de:70:20:b5:cb:42:98:
                    76:e4:f2:73:1d:32:7a:e8:9a:97:a3:59:08:12:6f:
                    22:6b:1f:e2:13:7b:ec:14:5b:67:c1:aa:94:e0:49:
                    64:47:60:2b:f1:82:bb:ed:ad:2e:c0:03:74:3c:66:
                    31:50:1d:fd:2f:36:7e:1d:78:d9:6b:b3:9b:92:9a:
                    bb:36:ae:e6:fa:7b:bb:78:dd:02:2f:e6:1a:c3:ef:
                    c5:3b:1d:32:5e:73:84:67:88:52:70:3d:26:7f:2a:
                    5a:d5:79:3a:d5:a5:33:b8:0e:ef:80:cc:6e:97:86:
                    b8:ee:6c:b2:a3:8f:a3:6d:00:79:1a:d6:95:70:cd:
                    f5:f7:c9:86:5f:ec:27:be:8b:ad:f0:ee:bd:e4:49:
                    90:f7:17:c7:50:e5:4c:fb:82:e1:5e:56:e9:31:61:
                    43:f7:1f:86:63:3c:bc:f7:47:46:8d:c9:f2:ca:30:
                    2a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:58:A4:65:73:7B:8A:8A:24:5B:04:C3:30:2A:4C:EF:56:30:25:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/781d61f4-48b6-3e01-b568-cd2c4e459eca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1415:8800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:38:24:34:9b:ef:cc:11:b6:65:db:e8:52:bc:b1:7e:07:83:
         cb:94:68:c8:5f:1e:24:db:d1:e3:d9:aa:21:d6:fe:da:74:e8:
         ac:4a:5e:3e:e0:a3:87:8c:69:77:80:2c:f9:9d:0e:a6:13:4a:
         01:0c:19:67:d3:2b:44:69:d8:40:b2:01:70:dd:89:15:51:25:
         cf:fc:de:5f:d2:09:1c:43:1d:19:9b:31:72:b6:07:07:5b:ca:
         19:2f:88:4b:95:ea:4c:42:9d:26:40:9e:22:75:81:d0:7d:ed:
         dd:09:48:6c:ae:5d:d0:0b:a1:a5:a9:f1:35:a7:bd:2a:0d:3b:
         2a:29:7e:c9:9d:48:28:cf:7e:3b:8f:eb:bf:55:ab:d4:5a:70:
         2c:07:af:bf:a2:16:ad:0d:02:46:c9:0f:f6:d8:42:aa:17:9d:
         9d:b4:7a:e6:7d:c6:12:a6:c5:55:45:d5:64:c1:a4:48:02:45:
         bf:db:92:ae:1b:53:6d:ca:51:00:06:5f:44:95:3c:b1:9f:cf:
         06:be:22:42:36:7d:76:27:dc:f2:7d:7e:65:f8:9d:1b:45:b3:
         2f:9f:de:8a:94:2d:1e:e7:05:0c:7b:4e:f8:2a:0b:16:c4:53:
         d7:21:fa:34:47:bc:25:21:41:9b:80:13:6b:8a:c1:f7:e9:72:
         1d:f4:4c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:46:52 2025 by rpki-client