Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f022c65f-be6e-3f0c-a4a0-21f0caa5f8f6.roa
File:                     f022c65f-be6e-3f0c-a4a0-21f0caa5f8f6.roa (raw, json)
Hash identifier:          RbeInxiqKIxfu36ljeLieEEqmTftHB75rLycaEjKmQk=
Subject key identifier:   2F:16:87:05:EE:F0:BD:A0:84:B2:5B:2A:52:80:D6:B4:32:F7:22:DF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B4081C4D63E49658F422E49C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f022c65f-be6e-3f0c-a4a0-21f0caa5f8f6.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        2600:1405:8c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:c4:d6:3e:49:65:8f:42:2e:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=b7c89464-5504-49c1-9f8d-5440b7836aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f0:6e:17:d6:c2:6f:3c:e4:88:05:6f:4d:e6:
                    d8:29:5f:bb:e9:10:02:77:ed:4c:e2:48:40:88:0e:
                    68:45:e6:78:a8:be:ce:d5:93:a7:f2:52:48:7c:68:
                    ea:3e:b0:36:3b:7c:0e:b7:aa:24:98:eb:1a:ef:ba:
                    31:b5:a1:eb:8f:f3:78:aa:81:81:60:65:18:fc:51:
                    78:72:e4:9f:06:1e:81:6a:43:cf:67:fe:85:c9:e0:
                    02:30:31:90:55:e8:3d:dc:71:b8:30:96:56:ce:7b:
                    ff:5e:56:18:c8:dc:47:fd:d3:55:ca:44:2e:60:da:
                    ee:7a:7d:57:20:ef:04:79:b5:ac:7f:12:3c:d7:bf:
                    80:26:64:ce:88:76:16:33:bc:d4:53:81:4d:ea:1a:
                    2a:b3:8c:92:59:20:ca:32:5d:2f:bd:18:da:4d:7f:
                    f9:60:76:86:ab:84:3d:f7:f7:93:10:10:5b:79:71:
                    ec:3c:b3:62:e6:5e:29:c4:01:0a:4b:a0:cb:c2:2d:
                    2a:a9:b7:8b:80:6b:f9:57:05:54:c8:19:72:cd:b6:
                    48:94:06:bd:72:56:f6:3a:f7:ec:c6:8d:4b:58:3e:
                    02:6c:a9:43:2e:39:28:9f:29:95:d1:2b:55:75:c3:
                    65:a5:52:53:8f:fb:bc:90:97:b5:3d:62:51:74:a7:
                    0e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:16:87:05:EE:F0:BD:A0:84:B2:5B:2A:52:80:D6:B4:32:F7:22:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f022c65f-be6e-3f0c-a4a0-21f0caa5f8f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:8c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:5b:fa:bb:58:41:cf:9c:8c:7e:82:83:ac:d2:0a:71:2c:14:
         9d:e8:95:b8:98:d8:c8:b5:88:ea:9c:2b:21:18:43:32:f0:15:
         38:ac:54:b9:57:32:a5:f9:cc:d1:af:16:1e:80:4f:bd:95:b1:
         a2:a7:65:65:a6:3a:8f:11:ff:51:b5:63:90:f5:6f:3d:38:2a:
         2a:27:a6:02:92:b2:05:12:2a:f4:f3:36:56:6f:92:c3:ef:07:
         34:da:5d:02:7b:2e:79:d7:a9:14:bf:13:97:7f:2e:56:85:47:
         a2:99:39:74:2c:80:58:f5:c5:38:c6:0b:d5:9e:db:83:4e:1d:
         26:52:0f:b8:42:38:a6:db:db:87:06:e6:95:0e:96:83:9c:a6:
         2f:a8:8d:39:de:f7:54:24:5e:9b:14:84:e4:8e:c9:9d:eb:20:
         39:ca:3c:46:80:6e:24:b3:7d:82:56:a1:6b:e5:6b:5d:b7:dd:
         fb:bb:27:5f:48:85:a4:6f:87:dc:00:1e:8a:79:b5:a5:bb:b6:
         eb:8f:ac:5d:01:37:f4:57:22:06:72:f1:89:08:ac:4a:ba:af:
         c6:55:04:35:5b:48:c0:f4:c6:43:01:eb:ee:bf:da:a4:1a:cc:
         65:11:55:02:70:a2:ae:68:af:7c:82:70:0a:e9:81:94:5d:df:
         fb:03:f1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:06:48 2025 by rpki-client