Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb443575-901c-3558-9b50-76ec37af099e.roa
File:                     eb443575-901c-3558-9b50-76ec37af099e.roa (raw, json)
Hash identifier:          +10mr4sLogYzwYNXawkUAyrZ26M6pf9fCiQVVm6mmd4=
Subject key identifier:   E7:46:18:66:17:D9:96:78:97:9E:71:08:3D:38:25:DF:F4:05:0E:5B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B4081BC375C65FE2962DF8980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb443575-901c-3558-9b50-76ec37af099e.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        2600:1415:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:bc:37:5c:65:fe:29:62:df:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=a7b7a4ae-bc5c-4a93-b4ef-9efc2cf92b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8b:ae:54:15:e8:50:67:9d:07:c9:23:55:75:
                    28:1f:28:0d:ae:91:ba:1a:de:65:86:7d:c6:93:dc:
                    35:fe:f1:c7:23:f8:4d:68:45:c2:ae:2f:d2:b5:95:
                    2e:8d:2d:93:94:52:5e:d2:02:cb:de:dc:5a:ca:a7:
                    15:1f:1b:64:cc:c6:1f:77:c1:46:b2:54:cf:a2:57:
                    d5:32:1a:b1:63:16:47:35:f6:87:d2:b0:64:3c:69:
                    6a:46:a1:17:10:92:15:02:c5:f6:c2:54:37:ac:6c:
                    86:91:b1:fe:b9:a8:fa:66:0f:f1:a7:f4:8f:fe:2c:
                    7a:ca:45:15:21:fe:6c:f2:89:e0:51:67:e3:2c:ec:
                    0b:af:ed:ea:c6:e4:90:d8:f2:dd:7d:bc:b5:bb:cb:
                    88:a9:cc:70:2d:f0:77:ee:d0:5c:4b:49:f3:1f:cb:
                    61:1e:f5:41:92:a4:ed:d1:e6:7b:69:e7:bb:f6:d2:
                    21:46:00:09:93:47:11:dd:61:5a:26:81:03:f2:47:
                    be:ec:5d:0d:f5:9c:20:f1:eb:41:89:a4:80:07:71:
                    f5:8c:fe:1c:d7:58:2a:e5:be:1b:ed:93:8b:e5:b6:
                    85:ee:5e:46:52:70:17:1f:76:c0:20:0a:f2:16:a6:
                    f8:00:a9:ef:49:5b:76:1f:77:9d:6a:4b:f3:55:d4:
                    cd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:46:18:66:17:D9:96:78:97:9E:71:08:3D:38:25:DF:F4:05:0E:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb443575-901c-3558-9b50-76ec37af099e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1415:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ac:bd:46:aa:be:8d:9b:33:ec:36:b0:79:72:8e:f3:a1:7e:
         6b:c7:29:29:11:e4:25:18:2f:3e:31:20:8c:0a:a5:e0:ae:82:
         b0:5e:a4:17:b0:f0:1b:8c:5d:57:c4:ea:6e:78:ef:79:ff:b2:
         6f:6d:3c:4f:97:b7:54:80:ca:95:52:9a:d4:ee:94:16:a8:89:
         73:48:92:ad:d3:88:c7:2b:b0:7f:6c:93:16:d3:cb:bc:6d:e8:
         48:31:ad:9b:a0:2d:1d:26:f9:95:57:e4:06:1a:40:6f:46:c5:
         3d:00:30:6b:0c:dd:17:ca:82:74:1e:c5:d4:73:b2:2d:97:3f:
         f4:42:49:0c:84:c4:15:5d:08:7b:fd:18:fb:44:02:07:28:8a:
         71:5f:98:c5:fe:8b:4b:a0:8c:fb:94:4a:2a:0d:ee:17:b8:6b:
         8b:67:fe:fd:21:5d:43:e3:23:ff:44:9c:73:a0:de:be:d9:0b:
         11:1c:4d:b9:86:77:3d:3c:41:98:94:d2:67:f6:1b:37:1c:f3:
         47:49:34:a5:97:ac:2d:f8:78:bc:96:a6:18:87:7c:1b:cf:73:
         97:3d:2f:c1:61:6c:84:7a:38:c1:2c:c6:eb:53:81:96:eb:10:
         bc:1c:b7:50:42:d3:1b:25:fb:03:88:05:d6:85:00:dd:ce:b3:
         13:c2:9a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:37:08 2025 by rpki-client