Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d73c9c83-c07a-38a0-a04e-bddb6b46a790.roa
File:                     d73c9c83-c07a-38a0-a04e-bddb6b46a790.roa (raw, json)
Hash identifier:          xWML2TfJhy12udEb4cG8BUkOjIIQtEGd5sPKCCmcIJE=
Subject key identifier:   0E:2F:3B:E4:A9:69:0C:55:30:AA:3E:D9:50:27:51:7E:21:45:86:0A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B3F1C64101216545254692558
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d73c9c83-c07a-38a0-a04e-bddb6b46a790.roa
Signing time:             Fri 19 Sep 2025 13:00:41 +0000
ROA not before:           Fri 19 Sep 2025 13:00:41 +0000
ROA not after:            Thu 18 Dec 2025 14:00:41 +0000
asID:                     20940
IP address blocks:        2600:14a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:1c:64:10:12:16:54:52:54:69:25:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 19 13:00:41 2025 GMT
            Not After : Dec 18 14:00:41 2025 GMT
        Subject: CN=90a66be8-c0a7-4e5d-9f2f-07605058a023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:6e:08:d6:e8:a2:d1:2d:cd:52:69:c7:cb:
                    90:a5:d3:0c:34:cc:3f:ce:2b:fe:84:62:db:d9:fe:
                    ff:45:24:f8:a1:57:a3:97:cc:4a:e9:b1:42:82:c8:
                    b9:80:17:a3:35:57:a8:6b:b2:a2:2f:9e:91:6a:1e:
                    5e:f6:ec:3c:3f:bf:28:dd:c0:9f:4e:8c:58:d6:10:
                    5b:1b:23:2d:bd:d6:43:a6:2a:3d:f6:da:20:3f:80:
                    17:ca:84:94:fc:ac:b5:1f:ea:9d:63:3c:38:8a:b0:
                    c7:98:a6:e5:57:b8:5f:f6:da:0b:aa:f8:85:64:6f:
                    30:77:78:e1:5b:7e:7c:90:f9:26:80:67:67:a8:43:
                    6b:23:2f:b4:6a:9a:6b:c4:4a:b7:9e:5e:e4:25:8c:
                    e4:e1:31:39:5a:91:35:bc:f7:38:47:0b:82:08:5f:
                    1c:71:48:bd:0b:5e:52:dc:e2:8e:a9:5e:f2:8f:1e:
                    c1:b6:74:23:0e:0b:31:6a:20:79:f7:49:72:8b:94:
                    aa:da:9e:fc:2f:40:79:2a:74:9b:0f:8d:95:06:97:
                    8a:73:7f:91:2c:7f:bb:16:cf:b0:28:16:e6:b4:0c:
                    09:1e:ec:5a:41:72:05:bb:d5:b0:f5:b2:e7:2e:6a:
                    e7:67:00:e0:4a:10:3a:ba:63:8d:e8:09:94:0f:a5:
                    45:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2F:3B:E4:A9:69:0C:55:30:AA:3E:D9:50:27:51:7E:21:45:86:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d73c9c83-c07a-38a0-a04e-bddb6b46a790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:14a0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:0e:5f:56:f1:16:8c:8a:6e:31:72:8c:95:9c:72:29:d7:01:
         5d:c1:a6:d4:86:eb:c5:10:83:b4:bd:b4:40:fd:e7:2e:f8:72:
         27:5e:2b:ff:ab:b7:db:97:e8:18:5a:83:92:9f:4f:b7:be:aa:
         dc:89:85:22:04:0e:63:a0:5c:1b:36:2a:1d:29:92:dd:e0:f7:
         9c:da:af:df:d5:c2:65:36:92:87:81:16:13:e6:eb:fc:48:b8:
         18:fa:94:7d:3e:1b:06:9d:b1:5e:75:0e:f1:96:f3:53:ff:9e:
         b9:1a:de:b5:d4:c2:57:79:83:43:8c:9b:91:c6:c4:06:08:fc:
         1b:12:b9:02:37:69:13:84:06:ed:cf:e5:5f:82:ca:77:9c:e5:
         5c:30:37:5c:41:78:a6:07:bf:e1:e1:3b:80:4d:45:36:77:4a:
         80:70:bb:2d:94:3d:7b:b0:f7:16:50:f6:5c:2a:b7:11:d8:05:
         ed:d8:13:67:0f:dd:7c:0e:e8:6b:7a:e7:d6:06:21:24:23:9d:
         f9:b9:12:e4:4d:50:55:a0:54:75:69:46:d7:32:0f:10:7d:3e:
         30:f6:0d:cc:9a:92:b1:60:a0:db:21:16:91:7e:e8:39:7e:ca:
         a6:93:e7:25:d4:47:5f:42:81:61:81:2b:b2:4a:28:e9:80:04:
         e4:c6:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:03:51 2025 by rpki-client