Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4d3716f-4100-39b7-a308-f701edbadaa4.roa
File:                     c4d3716f-4100-39b7-a308-f701edbadaa4.roa (raw, json)
Hash identifier:          K87J/ByZXcFHlBZUonieIfqPMx2hLlKNV9yajoWAfs4=
Subject key identifier:   0F:E5:62:C7:40:F1:5C:14:B1:D2:44:97:91:8C:A6:81:17:CB:D8:BA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B4D11ECDCB5C7675B51494FA0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4d3716f-4100-39b7-a308-f701edbadaa4.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     9498
IP address blocks:        2600:140f:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:ec:dc:b5:c7:67:5b:51:49:4f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=c7f301dd-7c00-4d57-9a22-94bbaf96058d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:05:48:d2:f6:8f:f1:fc:12:45:5b:84:bc:f0:
                    7d:8d:d7:99:a0:9f:f0:ce:99:7d:07:26:c2:c6:ea:
                    37:3a:70:a3:86:8a:61:ed:55:33:ed:0e:62:cd:37:
                    b0:91:b3:83:c3:9b:d5:05:e4:7e:f0:bb:f0:70:96:
                    88:d6:83:6f:36:2b:eb:0b:d3:50:d4:ae:5c:c7:7b:
                    a5:b3:bc:a7:68:94:0b:b2:2a:e5:13:00:0c:ac:64:
                    86:29:4f:8a:7d:71:1e:0f:e6:ed:b7:06:41:1c:32:
                    ef:41:cf:19:23:a7:84:33:7a:b0:38:8b:9d:31:de:
                    63:f3:4c:7c:15:94:55:3d:d8:cb:1e:d6:34:2a:5e:
                    ae:be:b9:59:b4:f6:ac:07:20:3b:a7:49:dd:45:91:
                    7d:54:2e:c0:1c:75:8b:57:4b:0a:0f:c9:3a:37:e2:
                    ca:fa:d2:8d:ee:0a:f6:41:18:66:51:61:8d:7d:e2:
                    98:d7:15:da:3b:27:1f:08:9e:c8:ec:a6:87:03:56:
                    61:fd:e4:68:5a:b9:06:f8:24:f9:6b:a5:7a:6b:e5:
                    c5:10:ea:11:1c:a1:33:58:f5:2a:5a:57:7a:89:81:
                    4d:4a:0c:c4:1d:df:b5:e3:d4:2e:e3:4e:66:e7:00:
                    36:6d:be:df:ec:0c:8f:6f:a6:ea:4d:23:8c:dc:ee:
                    c9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E5:62:C7:40:F1:5C:14:B1:D2:44:97:91:8C:A6:81:17:CB:D8:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4d3716f-4100-39b7-a308-f701edbadaa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:fd:c1:a2:14:52:41:16:7c:9a:f7:95:c3:31:4e:b2:bd:5e:
         0f:ee:0d:02:aa:2c:ab:de:ea:58:71:a6:0d:8d:f2:4f:0c:8b:
         4e:ee:fa:40:ec:2b:0a:8c:38:f9:21:5c:52:4c:f0:2a:1f:b0:
         ec:d0:e5:3c:cc:b6:b3:e3:73:85:0d:15:39:4e:7c:78:96:db:
         fc:bf:94:30:2a:61:ed:a0:01:b1:6d:b6:62:9e:e2:4a:96:cf:
         55:18:72:c3:42:f8:25:9e:31:cd:01:09:36:fb:af:f3:55:f4:
         be:9e:49:22:51:22:84:8b:b3:1f:9d:bb:f8:d5:54:77:f6:84:
         a8:d6:31:16:11:c8:d7:b8:37:da:49:b0:2a:c9:a8:0b:4c:81:
         0d:a3:4d:ac:40:2b:65:bb:74:0c:66:b7:c1:66:7d:49:be:bb:
         98:95:8a:20:40:ff:a3:2e:7d:b9:d6:ae:c8:9c:48:ac:b8:69:
         d5:e2:c7:17:3d:d5:43:ef:a4:e9:8f:93:cb:2e:76:1a:d0:cc:
         d6:cb:bb:59:8a:2c:01:b4:a8:ab:80:86:d3:ff:01:03:d2:79:
         3f:cc:78:09:dd:89:2b:1e:33:b1:1e:50:6e:af:9f:ef:b6:fd:
         a3:77:b0:14:11:50:f2:ec:5b:85:0e:b3:5b:df:26:54:3c:45:
         b2:02:4c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:16:18 2025 by rpki-client