Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed4638f5-c536-35d7-8c5d-9dd4685a2f24.roa
File:                     ed4638f5-c536-35d7-8c5d-9dd4685a2f24.roa (raw, json)
Hash identifier:          1FlfCCH+LIU3fMp3vXmOuEUHD1UpR7uXwacjKrA9Yuc=
Subject key identifier:   05:F6:EE:4B:E2:1E:FA:9A:30:CD:46:C8:F3:B3:AB:DA:74:14:31:DC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5765DA9C2E1F8FD5200B5320
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed4638f5-c536-35d7-8c5d-9dd4685a2f24.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     20940
IP address blocks:        2600:141c:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:da:9c:2e:1f:8f:d5:20:0b:53:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=229d1a57-1f79-42db-990c-9aeeaadca6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e5:d2:54:d1:f4:14:35:85:2e:65:37:d9:51:
                    8f:50:ae:21:19:36:68:85:4a:41:b6:c3:e7:17:5a:
                    e7:f7:f4:aa:3d:5b:15:49:9d:c3:da:62:ed:a6:8d:
                    a3:86:70:73:c4:f1:db:2c:cc:b4:89:6f:2a:2b:2e:
                    bd:cf:c6:63:48:e4:f2:f6:dc:84:47:fa:fe:15:ef:
                    e2:2d:ed:23:78:d3:2e:69:c6:fa:6a:45:e1:28:e8:
                    98:a6:91:ce:dc:72:fa:94:56:41:30:54:d7:07:a4:
                    c3:5b:17:8d:27:95:8b:e9:27:4e:b5:48:54:8e:76:
                    cd:52:54:62:25:08:a8:2a:b8:a0:65:93:45:25:ec:
                    5d:22:8f:08:b6:d4:84:e6:cc:1f:36:7b:5c:64:6b:
                    1d:b0:24:1f:be:52:f7:97:05:89:00:11:6b:58:58:
                    93:d9:ed:d8:e0:5a:54:e6:1a:14:c9:37:a4:58:b0:
                    f7:17:96:84:a0:06:fd:41:e3:ae:eb:eb:a4:60:6f:
                    e8:01:0f:2d:3b:c4:f4:9d:bf:d0:1e:a3:58:b9:fe:
                    81:7a:32:c8:58:32:5b:6c:36:8f:3f:f9:02:27:45:
                    34:c8:4b:47:0c:9c:49:b7:70:bc:89:11:90:4e:8d:
                    ef:fc:38:4e:78:98:bf:dc:ce:16:0d:60:bc:45:ef:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F6:EE:4B:E2:1E:FA:9A:30:CD:46:C8:F3:B3:AB:DA:74:14:31:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed4638f5-c536-35d7-8c5d-9dd4685a2f24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141c:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:99:74:9f:18:27:4c:2a:13:d0:eb:28:bf:f8:7d:b2:67:17:
         29:cc:02:bb:8f:6a:81:53:84:bd:d5:17:7b:4d:e1:37:ab:1b:
         98:df:ef:6a:0f:0f:e4:97:5d:64:24:1f:aa:83:ea:d0:37:79:
         18:8b:23:3b:95:28:7e:17:f9:5f:b5:c7:1b:35:c3:60:eb:ef:
         e7:80:91:0c:64:21:53:13:ef:63:bd:2d:d0:86:22:b3:5e:4d:
         76:05:7e:1c:e5:f6:e4:ee:c0:aa:89:f8:14:78:c4:cc:da:d6:
         35:06:60:a2:0b:09:61:e1:b1:8f:15:b9:e2:fe:0d:5a:3d:d6:
         6e:c1:20:d5:ae:e0:69:bd:42:13:40:62:5b:76:61:60:35:51:
         60:9e:e0:0b:8a:d4:61:60:45:65:93:4f:8d:07:0a:50:dd:bf:
         ed:95:11:00:87:0b:f7:15:ec:1e:ca:77:26:bc:77:2f:05:8e:
         6c:86:cd:ef:09:f3:3e:7d:ac:b2:9f:ac:98:42:a9:ee:cb:29:
         b2:7f:a1:b2:4c:56:36:24:56:4e:88:df:5a:92:2a:fd:94:16:
         ca:b5:5b:90:03:5c:af:04:82:11:7a:d9:bd:b5:75:f2:2b:79:
         52:98:ee:75:b8:04:9c:fa:ff:87:bd:25:2c:5f:4a:dd:9e:c9:
         85:63:c8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:43:42 2025 by rpki-client