Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f2bdaa5-1084-3f5d-a6b8-8ce127bd2f5b.roa
File:                     7f2bdaa5-1084-3f5d-a6b8-8ce127bd2f5b.roa (raw, json)
Hash identifier:          odk3Gh71kqkMILuw/3KaZ9O9oyun0D2ZbYWIf3JrPnA=
Subject key identifier:   6B:68:17:32:A7:3A:08:DE:96:F7:0C:32:15:A5:64:3A:D0:17:C6:14
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B48E209C5F1D428706EB9D000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f2bdaa5-1084-3f5d-a6b8-8ce127bd2f5b.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     35994
IP address blocks:        2600:1404:24::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e2:09:c5:f1:d4:28:70:6e:b9:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=f9b495e4-aeb4-4a69-b90d-c5571d80c4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:18:f0:8b:ab:d0:17:c7:ce:9e:63:e4:44:19:
                    fe:c1:53:84:9b:c3:19:f7:60:b5:aa:0d:84:2d:9a:
                    54:e4:c9:f3:6c:47:24:a2:77:ac:e9:f9:95:b1:fc:
                    05:c2:5b:0f:a0:a7:ef:d6:3a:b2:30:a8:68:a1:18:
                    99:a3:8b:1f:5a:12:35:01:89:db:68:10:a7:88:91:
                    8d:33:f8:7c:48:7b:25:22:e4:8a:b3:44:0b:9d:d2:
                    ff:ff:74:49:cd:53:24:67:7a:1d:71:75:d3:58:92:
                    34:db:8c:0b:83:0a:d0:0e:94:83:e4:71:08:ab:4c:
                    18:59:1a:29:c3:4d:23:0b:bb:08:e5:d0:3c:31:e7:
                    80:28:04:69:22:f4:b7:d6:7b:f5:ea:a9:c2:e7:87:
                    8a:7b:d5:4a:fc:f9:e0:de:8e:63:d8:90:90:8b:cf:
                    fb:f8:16:c7:63:aa:06:f5:7c:c9:fc:59:b2:cd:dd:
                    8e:7c:71:7e:7e:f7:23:6e:90:55:ec:62:42:d1:24:
                    e9:e6:70:29:7b:a1:18:47:8e:38:3f:45:a3:09:64:
                    c3:30:f0:94:d0:ac:6b:9b:d7:59:6f:bc:cd:f7:f6:
                    d0:b5:a4:07:37:c6:a6:72:30:8a:dd:ec:aa:fc:95:
                    a9:89:eb:80:fb:de:58:a9:93:c3:66:b3:2b:af:f8:
                    0b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:68:17:32:A7:3A:08:DE:96:F7:0C:32:15:A5:64:3A:D0:17:C6:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f2bdaa5-1084-3f5d-a6b8-8ce127bd2f5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1404:24::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:56:e4:e7:a4:35:1a:e1:a5:d5:74:b0:ef:66:a0:a4:b6:86:
         84:8e:b5:00:9b:66:6d:f3:3e:ab:5b:a9:fa:58:5c:5e:12:0c:
         26:ae:01:49:3e:fe:71:8d:a3:dd:ff:5b:47:18:93:58:74:24:
         d0:b6:96:b0:6d:32:0b:1b:c4:ce:58:e3:27:29:ea:67:a6:ff:
         fe:c8:1f:28:c0:84:5d:5e:9b:55:06:3f:2c:5e:6b:cb:66:8b:
         00:33:2d:f5:71:75:73:0f:18:ee:97:95:6d:6f:75:08:cc:c1:
         fd:b7:ef:9c:dc:10:bd:d7:43:13:d6:e8:2a:87:21:75:6a:af:
         e8:fa:71:c8:f4:c7:d3:7b:fc:95:b2:ac:f6:c2:0c:ef:cc:08:
         d2:93:3e:f5:3b:eb:43:33:81:31:8a:77:71:2d:33:7d:5d:3b:
         c7:f1:db:d9:fb:00:c4:02:66:10:98:ab:18:b0:26:1a:f5:d2:
         99:18:10:c4:ed:54:5a:75:23:d6:98:b5:2b:d9:35:bc:c0:bd:
         d0:78:3c:bd:ed:7d:db:81:5d:8d:3f:4b:40:0c:1e:07:2d:0f:
         80:9a:9b:cc:e8:d7:94:ac:e1:d3:18:a7:b4:91:d4:f4:29:48:
         65:f2:0a:c5:74:6a:22:66:24:d0:a0:1f:78:5d:70:0b:39:91:
         37:b7:9a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:35:14 2025 by rpki-client