Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b94c3c41-ac0a-3d46-bd03-b607a7bc1a9d.roa
File:                     b94c3c41-ac0a-3d46-bd03-b607a7bc1a9d.roa (raw, json)
Hash identifier:          5HsDbyIwS5PmeQHEbRi7UyuHQrNiU/dwm6KHHHikGu4=
Subject key identifier:   D6:42:28:49:AF:83:6C:71:68:06:16:87:23:15:1B:A6:9A:D8:1E:0A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B4D11E742DD8B98B58CE42540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b94c3c41-ac0a-3d46-bd03-b607a7bc1a9d.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     9498
IP address blocks:        2600:140f:4a00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:e7:42:dd:8b:98:b5:8c:e4:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=527a2f14-cd63-452d-813a-a5a22525e702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:86:48:48:20:3b:47:a1:69:50:56:47:90:e6:
                    12:fe:53:df:c8:9f:a4:d7:e4:31:be:d2:ab:ef:c5:
                    8a:df:0b:4f:76:e6:3f:25:4b:10:3b:08:96:c6:59:
                    77:9b:fa:57:c5:a5:2f:42:47:98:20:a5:19:7a:a0:
                    34:48:b6:7e:af:d0:74:3f:f7:4e:0b:29:1c:14:21:
                    18:0c:de:10:5d:96:d2:d2:70:5a:d1:10:c3:91:8b:
                    b0:63:72:99:29:0d:3f:e5:5e:c3:b6:30:61:52:23:
                    81:ea:ed:7f:38:65:64:71:62:77:c3:86:69:50:fe:
                    5c:c8:ab:e2:8a:d1:1a:b8:29:11:8f:02:e5:29:42:
                    cb:ca:fb:24:98:22:d9:cf:1a:6f:c0:e7:cd:2b:ac:
                    7f:91:ae:f5:b5:a4:bb:d5:fd:35:b1:91:65:ac:f2:
                    f3:60:74:f8:d5:9a:ab:f2:34:30:a1:a5:89:07:8b:
                    da:80:97:47:b7:99:ec:77:60:d1:97:6a:c4:97:8b:
                    3d:f0:38:7e:d3:19:34:e1:e4:63:90:0e:10:e2:4e:
                    8c:d1:1f:91:95:9d:21:ce:c8:e1:24:c4:fb:e0:65:
                    3b:ed:cc:fa:74:3f:66:ea:b8:cb:64:fb:ad:49:16:
                    a3:85:d9:41:64:9f:cc:76:3e:95:e0:81:1b:4b:db:
                    0f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:42:28:49:AF:83:6C:71:68:06:16:87:23:15:1B:A6:9A:D8:1E:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b94c3c41-ac0a-3d46-bd03-b607a7bc1a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:4a00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a0:d7:dc:37:5d:60:2d:68:3d:16:bd:bf:db:dc:fc:92:9a:
         4b:0e:ae:e4:d9:e7:92:0d:3c:a4:08:8c:6d:4b:12:58:48:c2:
         de:39:09:ad:b2:c0:a9:87:35:a9:72:ac:a6:c6:5e:b2:1d:3d:
         19:31:c0:90:94:8b:3e:ef:fc:1c:b9:27:54:af:1b:7b:51:47:
         04:ba:33:bf:26:35:62:19:b5:2e:60:c4:a9:48:a4:b3:70:b5:
         4a:f4:85:1a:09:f7:d5:64:04:73:17:b0:e5:62:6a:05:7a:01:
         17:71:e9:f7:ae:52:ad:66:96:39:57:06:1a:7b:a6:1b:65:02:
         ec:d2:8d:0e:a4:07:6b:fa:15:f3:33:33:6f:87:82:00:22:d8:
         c7:6f:dd:aa:8d:e5:58:b7:a4:32:49:a5:32:50:ab:5f:ec:66:
         bd:58:88:49:0f:b1:bb:3b:9b:8a:a8:f0:eb:3b:a4:8a:be:d7:
         ea:eb:7a:9f:6f:dc:ac:42:a1:8f:94:bb:d3:2b:7b:fb:46:87:
         7d:a7:a2:cf:94:48:bf:e5:0f:35:aa:de:b6:0a:9a:2c:29:3c:
         ff:e4:ee:19:ac:28:05:db:9c:cb:3e:ce:2a:df:d3:09:f8:bd:
         00:8e:23:a1:bc:f2:fe:4d:2d:f8:ec:61:f8:33:70:8e:3d:cf:
         84:f3:9a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:39:52 2025 by rpki-client