Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9e11519-b249-3544-bbc7-779f53db6446.roa
File:                     f9e11519-b249-3544-bbc7-779f53db6446.roa (raw, json)
Hash identifier:          +uLyX4M6kuu2cwUjkcO6gxMnEUvrmwvwRUchNfUkqUk=
Subject key identifier:   E9:17:14:4D:75:73:A3:EB:61:6E:38:5A:A0:B5:00:E4:93:45:01:09
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2CF700908548C2119FA04D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9e11519-b249-3544-bbc7-779f53db6446.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        2600:1408:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:00:90:85:48:c2:11:9f:a0:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=c7ec6cfd-8977-4bde-b324-66ba64ba4d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7c:de:71:3e:4b:1c:8a:88:b3:03:e5:73:0f:
                    0b:40:07:3a:4c:78:56:dd:5c:ea:0d:13:6c:d0:d9:
                    b8:7e:a6:03:6a:2b:e2:8a:7a:b4:c1:05:bd:61:4f:
                    a7:e4:35:a3:4a:09:7d:42:40:69:c9:08:84:b9:be:
                    06:a4:22:15:63:19:08:6a:1f:59:d1:da:44:1a:d1:
                    11:ea:b4:d4:d1:cf:ee:38:c8:04:3b:e9:e5:40:0b:
                    5f:6a:48:86:32:04:78:4d:78:3c:e1:7c:ae:25:bf:
                    87:00:85:77:5e:66:dd:d6:df:96:47:47:f6:2e:43:
                    0c:8e:a0:b0:49:bf:1d:43:20:0f:ff:b6:ca:b7:aa:
                    9d:b4:30:bd:50:27:e8:82:6c:ad:16:90:8c:12:5d:
                    b0:4c:49:e4:b1:49:a1:a3:4b:15:50:85:40:23:08:
                    a4:ec:60:87:d6:5f:5f:c1:64:67:5e:13:ed:64:d1:
                    ad:69:d1:60:be:3b:77:ad:21:f6:0c:76:37:cc:3a:
                    a7:0a:06:af:e2:c1:d0:f6:59:38:d8:d3:04:69:9f:
                    78:ea:22:24:e7:93:9f:8a:e5:af:c9:4e:53:60:3b:
                    25:ab:92:77:38:20:1e:79:07:2f:c7:6c:a9:00:8b:
                    e1:7f:14:83:87:b6:fd:5c:21:d4:48:e1:7e:f8:83:
                    6f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:17:14:4D:75:73:A3:EB:61:6E:38:5A:A0:B5:00:E4:93:45:01:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9e11519-b249-3544-bbc7-779f53db6446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:11:ad:e3:f3:02:6c:37:c6:4b:e5:1d:fa:bd:e8:48:84:a3:
         1a:79:52:f4:5e:34:92:96:e0:74:ed:db:4a:bc:b7:a6:87:b3:
         0d:f4:fd:99:37:93:c9:d8:f3:70:99:b8:cc:8c:c9:c3:a9:8f:
         b9:48:73:b2:fa:d1:2a:c7:e9:70:2d:39:a6:dd:14:a7:d8:12:
         14:b0:02:b3:e6:d4:4c:fd:25:cb:1b:43:ef:f3:55:38:06:eb:
         c8:ba:b9:a8:0c:87:e0:71:c5:50:c4:13:bf:92:a9:9d:8c:00:
         f9:f2:6c:a8:a5:ad:12:27:28:c4:a4:a2:dc:08:34:d7:ac:ab:
         28:3a:72:77:54:90:2f:1c:b0:e5:02:00:13:4c:94:c7:d3:29:
         aa:20:3e:88:e6:e0:ff:aa:32:25:ba:cd:1a:2e:3f:ec:81:96:
         9c:b2:19:55:fa:b7:2f:22:e0:de:b1:26:8d:99:bf:99:25:27:
         44:f4:11:03:f3:fd:2e:95:88:7f:6b:11:bf:1e:39:94:25:af:
         95:f9:5e:26:d8:22:d5:1b:72:44:ba:b6:6a:fc:5b:7f:01:f4:
         5a:d7:10:1a:f5:b9:03:4b:f2:2d:34:c9:ce:a2:81:aa:5e:5a:
         76:c3:3e:b3:ac:34:b7:b5:22:da:45:91:82:89:25:54:cd:f1:
         f2:42:da:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:45:53 2025 by rpki-client