Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f083b6ed-9939-3aa4-a0d5-c0a4e33de441.roa
File:                     f083b6ed-9939-3aa4-a0d5-c0a4e33de441.roa (raw, json)
Hash identifier:          YWM6NvQSnJFxErm+qcszMAClWdVZk8wKMPFtAFCdVnk=
Subject key identifier:   FB:8E:E2:EE:F7:9A:35:A1:CA:10:34:3A:BC:BC:CD:B4:84:FF:4D:07
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5765D5EFC2FA2F8F11DDEE20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f083b6ed-9939-3aa4-a0d5-c0a4e33de441.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     20940
IP address blocks:        2600:1417:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:d5:ef:c2:fa:2f:8f:11:dd:ee:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=a6b97c0d-bf9a-40d7-8df3-305ee97d4063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:13:9c:55:19:00:54:fa:4f:b1:d5:4e:dc:62:
                    11:20:f3:1f:42:0a:b6:9e:db:27:57:ba:db:73:57:
                    bb:cf:8f:a7:83:04:30:6e:8d:eb:5a:0b:eb:7b:df:
                    9d:45:7d:fa:cd:a2:73:d6:9b:0a:46:1d:8c:76:04:
                    09:5a:39:bf:1e:4b:29:9d:05:e8:a7:77:6d:60:d9:
                    5d:ff:b3:db:7f:48:f9:08:ea:2e:cf:6f:54:65:d5:
                    8b:7d:e9:8f:3a:fa:67:46:9a:e5:65:70:5b:15:47:
                    74:e8:ef:c5:33:97:89:4e:8b:3b:ea:50:15:13:72:
                    88:18:99:67:2d:03:77:5a:9e:17:b6:de:f8:d9:13:
                    fb:a9:97:e0:3b:7d:8a:54:8d:45:51:24:ff:d3:38:
                    8f:cd:78:3a:71:62:59:b4:7b:77:72:73:90:ea:ac:
                    29:33:95:5e:3f:16:79:e2:ab:ea:74:25:4b:aa:b7:
                    0f:1a:2f:02:b3:c9:08:9f:17:da:7f:0c:c1:6f:af:
                    68:60:64:e2:44:f6:2d:20:53:ed:75:a1:46:10:78:
                    51:88:da:7f:9f:6d:e8:36:8e:ec:05:c2:3a:43:87:
                    54:62:d0:f4:cb:4f:42:e2:20:a3:28:44:ed:8c:bb:
                    ed:07:c1:ce:ba:aa:fb:f6:a4:0f:29:c7:4a:8a:74:
                    7a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8E:E2:EE:F7:9A:35:A1:CA:10:34:3A:BC:BC:CD:B4:84:FF:4D:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f083b6ed-9939-3aa4-a0d5-c0a4e33de441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:92:06:92:33:a3:03:e1:02:d8:bf:c2:8a:cd:6b:c8:e2:ee:
         29:67:d2:1e:8d:83:17:7d:9c:40:68:20:63:ca:1c:e6:00:bc:
         10:ad:2f:1f:30:cb:78:1b:d6:f5:ea:e4:9b:90:e1:3d:e4:60:
         a1:3f:61:64:c2:05:06:d0:8e:0d:0c:c8:f7:e9:93:c3:ec:7d:
         ba:fd:b9:25:e4:12:d3:12:72:96:7f:3f:fe:f8:d0:f1:e5:52:
         bf:97:5d:dd:ef:38:ce:65:87:76:b9:dc:29:40:53:46:bb:82:
         6c:a2:90:db:d9:62:c5:c9:55:c4:a4:cd:ff:fc:4e:ec:cc:32:
         50:fa:0b:cd:0c:5d:85:29:59:ad:0e:3e:fe:b7:f9:d3:58:29:
         3f:fc:de:75:1e:f1:2b:65:85:79:cc:1a:2c:c7:8b:ef:e0:14:
         b6:d3:be:3b:1f:96:76:c8:77:ff:ad:b7:87:1d:34:93:de:77:
         8b:35:b9:e1:19:19:60:d1:dd:1c:61:a5:c8:4a:9e:31:4a:d6:
         78:5d:5e:7d:4c:2a:98:a4:25:62:29:e5:09:ae:7b:8e:89:f6:
         7b:92:f2:9f:33:e6:74:63:72:7b:fc:8f:80:11:c5:e9:87:6d:
         06:e0:d5:46:e9:63:1d:91:0f:b2:df:c3:c5:7b:97:1a:19:bb:
         29:bd:bc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:58:57 2025 by rpki-client