Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd49359f-3198-3f6f-b958-2ea2aa22593e.roa
File:                     bd49359f-3198-3f6f-b958-2ea2aa22593e.roa (raw, json)
Hash identifier:          UmrJ3hp6yzhHzbbkVxRi/3QNddD999JBYiasr33HD/Q=
Subject key identifier:   86:D4:26:92:0C:FE:BF:F8:4F:C3:A5:6C:3E:10:B8:CB:8A:EC:AB:6E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A497078D70D497DE673BB4600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd49359f-3198-3f6f-b958-2ea2aa22593e.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     20940
IP address blocks:        2600:1405:1800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:78:d7:0d:49:7d:e6:73:bb:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=48aca87a-c62f-49ee-bf02-b7757503077d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3e:af:6c:b9:dd:1f:bd:a3:2c:ee:64:a0:79:
                    1f:01:f6:07:66:2d:ea:60:41:8b:89:29:ab:fc:43:
                    f6:dc:f9:36:17:2c:d7:5a:f9:db:8b:25:51:e3:c0:
                    b4:da:ff:5c:8d:bc:c4:57:d5:f0:d8:be:1b:63:68:
                    a7:c4:73:f1:03:ef:2b:99:8e:e5:06:b0:7d:a9:9c:
                    b5:c5:26:1a:c3:9b:43:3c:4a:61:1c:4e:0e:6a:62:
                    09:62:55:73:a2:b4:74:49:03:cf:c0:61:5f:ec:09:
                    47:b6:d8:0b:11:9f:10:9c:f7:81:a4:72:59:4a:97:
                    e0:a3:af:5f:c1:d7:77:f6:ab:c9:09:7f:fb:73:27:
                    0a:c0:86:d0:4e:e8:20:28:07:3d:cb:d3:66:3c:70:
                    30:3d:01:13:d1:e8:de:ca:b8:20:05:7a:0a:48:d1:
                    90:ae:c4:0f:c7:5f:1d:7a:82:64:7f:8a:b2:71:62:
                    e2:6c:ca:61:f0:fe:11:c2:45:80:fb:ef:b5:e5:f2:
                    99:c2:d9:88:a5:1f:a4:aa:d8:2c:75:2f:93:49:b6:
                    f7:a9:f1:a5:5a:28:67:e3:70:4f:e4:1a:c8:3d:7e:
                    fb:06:b6:c6:d6:8f:c1:9a:6d:00:b9:1f:fe:b5:a4:
                    f5:52:c4:7a:02:5b:e9:a0:88:25:42:1d:7a:ea:bb:
                    e0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D4:26:92:0C:FE:BF:F8:4F:C3:A5:6C:3E:10:B8:CB:8A:EC:AB:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd49359f-3198-3f6f-b958-2ea2aa22593e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:1800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:c6:bf:3f:ad:fc:a3:c1:7b:71:cf:8f:06:bb:4d:9f:5c:cf:
         44:24:5f:a3:de:8b:42:f9:a2:39:86:26:83:c7:3f:14:55:92:
         99:0a:83:74:2b:c7:68:5c:95:97:97:41:04:e3:23:03:f2:cf:
         f4:c3:cd:82:4e:b6:19:a5:af:f2:b1:fe:30:62:09:e3:cd:7a:
         36:d8:47:d6:08:d7:c6:03:7f:af:3b:cf:32:21:34:0f:ee:79:
         88:3f:0c:cb:cc:1f:17:84:44:31:8e:37:b7:c1:7d:c0:b7:08:
         1c:66:be:68:a8:e1:74:fe:ed:77:11:12:bb:ee:02:f6:5f:da:
         83:ba:09:bc:c0:18:4c:55:10:b2:e6:8d:86:89:04:c6:a7:f1:
         d2:ce:af:b5:3d:e3:ab:ac:9b:1c:4f:07:4c:b7:50:d8:8a:73:
         d1:ed:91:5f:97:7a:89:68:4d:1c:1c:89:97:10:ca:72:ae:8f:
         78:93:f0:06:78:b8:a2:1e:67:1c:dc:c0:0d:20:c7:d5:31:ea:
         72:2e:9a:39:06:f1:c0:3b:b0:47:fd:15:c1:5e:d2:80:dc:82:
         8a:b2:f3:72:09:5a:36:68:02:db:e6:6b:6e:35:02:15:1c:78:
         53:7d:64:13:41:64:d5:f6:48:00:05:75:e9:1d:51:8c:90:57:
         38:ab:66:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:09:39 2025 by rpki-client