Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b66f94f8-e0fc-385f-bfa4-922d68b6ab46.roa
File:                     b66f94f8-e0fc-385f-bfa4-922d68b6ab46.roa (raw, json)
Hash identifier:          zrHo0md0Jm5OkLqIOLfupQpny4gegSO/St1Pl3x2raQ=
Subject key identifier:   BA:A0:86:3B:A6:5E:FF:56:C7:89:E8:B3:16:65:A1:37:2B:21:13:71
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A549B299F26361E8B798F5680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b66f94f8-e0fc-385f-bfa4-922d68b6ab46.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     20940
IP address blocks:        2600:1415:18::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:29:9f:26:36:1e:8b:79:8f:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=a812c143-4cbf-4e28-adca-b9be8c9b4698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bc:f6:49:5a:22:94:05:6f:ea:17:2e:c2:c7:
                    17:0c:7d:31:9c:b8:1e:1f:7b:0b:a1:f5:39:58:9f:
                    b8:68:d0:88:21:2e:f0:a7:00:1e:78:c4:a9:8c:b2:
                    7b:87:7a:5a:47:b7:e8:f7:23:f3:67:97:7e:10:d3:
                    8e:4f:3e:16:6e:4b:af:c7:f4:09:37:ca:38:3b:bf:
                    90:56:1a:aa:c7:bf:34:03:cc:63:b7:d9:5c:8e:2f:
                    b3:c1:78:40:30:2e:c4:6b:6d:e1:be:7e:b6:ea:e5:
                    10:f2:15:b9:b0:ea:53:80:42:4b:03:f4:ba:39:95:
                    61:b9:56:45:d3:94:14:0c:f8:24:41:70:b9:fc:a3:
                    36:60:e6:18:c7:9d:d3:77:41:f6:ff:95:3f:f5:b5:
                    84:85:1b:af:0b:5b:bc:77:2a:ef:c4:63:74:52:77:
                    45:1c:52:23:8a:32:43:4f:83:f3:ca:a1:92:5b:57:
                    f5:63:1b:82:28:18:39:41:f0:43:22:49:b6:90:a2:
                    d2:5c:e4:09:2c:19:6f:79:27:4b:f6:2e:40:92:db:
                    5e:8e:1f:db:10:9b:18:87:d3:0f:60:a0:71:40:ba:
                    6c:7e:ec:b7:58:fd:cd:0b:b5:70:25:aa:95:d5:11:
                    e6:4b:8c:16:da:4f:3f:c4:3d:ea:bf:38:4f:52:5c:
                    2e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A0:86:3B:A6:5E:FF:56:C7:89:E8:B3:16:65:A1:37:2B:21:13:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b66f94f8-e0fc-385f-bfa4-922d68b6ab46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1415:18::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:4a:c1:3e:9e:fe:ce:be:a3:61:b9:9a:70:54:ea:88:06:3d:
         b1:fa:db:fd:53:30:b6:23:5e:96:61:69:d1:74:53:57:55:8b:
         26:91:77:35:d1:a9:5a:0a:1c:a9:ef:46:4d:6c:d7:51:ab:2e:
         d9:e1:1b:b2:ba:0a:be:82:09:dc:3b:32:4a:bf:c1:53:50:cc:
         28:e1:23:ab:e7:54:4e:29:4d:04:47:94:04:be:61:4a:ee:3a:
         40:44:45:22:df:fe:07:77:c4:e4:47:e7:e2:eb:cc:37:a2:82:
         7c:73:b2:14:1e:52:ba:c6:77:17:89:84:d1:4f:d6:4f:6d:98:
         58:e0:21:4b:19:0b:aa:ad:da:55:73:4a:fd:96:26:46:f5:ff:
         5f:2f:60:7c:06:84:85:17:33:5d:09:8d:18:0f:01:b4:17:d8:
         df:de:b9:b7:ed:77:e6:b8:83:e1:e3:f0:b2:6e:62:29:fa:f8:
         84:64:be:62:78:d1:c6:35:56:35:01:06:c7:8e:2a:c9:65:31:
         d8:95:39:45:31:df:9b:e8:db:c1:f5:8b:26:93:b0:1c:da:d7:
         da:6c:d4:b8:74:d4:43:08:32:75:30:f9:ba:be:a2:29:fc:ef:
         e6:74:07:7c:5b:02:8e:c2:1e:ae:c5:c8:6c:6a:10:ee:dd:85:
         6c:97:ef:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:45:30 2025 by rpki-client