Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb2a4735-3104-3f61-b90c-da6ef366517f.roa
File:                     fb2a4735-3104-3f61-b90c-da6ef366517f.roa (raw, json)
Hash identifier:          GYH6rJ9cZSvB60rkNQ3otxTZVN0ghBD1E5g4ivnK1LE=
Subject key identifier:   FC:F4:59:E0:7A:A5:C6:D9:20:A9:CA:E4:75:43:C0:1F:68:CD:49:2E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B2CF7016023966956E1755C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb2a4735-3104-3f61-b90c-da6ef366517f.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        2600:140b:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:01:60:23:96:69:56:e1:75:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=e05825a4-e211-434f-bc58-fecc5653b73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cf:de:21:df:82:1a:b4:78:a9:15:23:09:98:
                    91:b6:ac:9c:44:5e:be:41:8d:97:49:48:07:9c:c5:
                    42:e4:64:9d:a5:88:b1:e8:0c:d2:23:73:07:b5:b9:
                    c7:de:17:52:7b:15:80:57:85:70:cc:80:30:35:ed:
                    61:49:16:10:c3:5b:35:53:22:16:9d:3d:f2:72:0c:
                    06:da:24:67:13:9c:1a:77:cf:fb:3a:3d:a7:ec:c8:
                    09:ae:0d:aa:74:b9:5e:e0:f9:87:a3:cb:2d:c2:09:
                    1c:ca:d9:e9:28:8f:fc:a9:5c:e7:98:88:30:52:a2:
                    14:fa:be:0f:53:b9:da:99:9e:a4:77:1e:dd:ba:c2:
                    d1:f3:b5:7c:0a:87:0d:8c:74:82:4d:39:e7:f8:82:
                    71:88:d1:c1:d7:50:2f:db:2f:34:ea:72:86:2e:60:
                    e2:9c:85:ce:ab:4e:05:5f:cd:76:17:24:bc:a4:17:
                    a9:c3:c9:2a:91:20:c3:76:1d:bb:a4:51:b1:a1:08:
                    d0:16:a5:e9:f0:a2:51:fa:87:9b:ff:16:08:a5:00:
                    52:04:32:6f:cf:f2:8e:03:61:e7:05:bf:19:37:46:
                    26:8e:fb:d7:28:1e:e3:6b:53:fd:07:72:df:73:2e:
                    9f:62:e9:4e:f4:a6:c2:86:a4:00:74:d2:a8:0c:ee:
                    06:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F4:59:E0:7A:A5:C6:D9:20:A9:CA:E4:75:43:C0:1F:68:CD:49:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb2a4735-3104-3f61-b90c-da6ef366517f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:cf:aa:8c:67:05:e4:fc:fb:3e:fc:e2:15:c1:89:b3:ab:a8:
         90:55:dc:62:42:0b:1a:25:be:60:fa:94:a8:61:50:f3:ef:0b:
         19:40:99:fa:53:ae:3a:89:ca:57:9a:22:89:b9:c2:f1:8c:5d:
         86:c7:e0:22:8b:fd:72:df:79:15:47:51:c1:4a:ce:43:f5:65:
         9d:78:c1:f6:7d:1f:ed:a4:e3:7a:0f:26:33:53:4d:65:96:2c:
         8d:15:52:7e:33:a5:22:52:33:e7:7b:22:9a:39:09:1d:51:61:
         82:fc:0f:08:7c:1d:53:5c:f7:1b:b5:a4:24:79:c8:55:b6:c7:
         f7:ee:f5:3f:7a:0a:36:38:aa:0f:d0:e3:e0:ac:0e:96:68:12:
         f0:79:60:1c:ee:f8:d5:59:56:ff:bc:4e:8c:28:10:16:3c:71:
         a6:d3:e9:3c:86:69:e0:78:88:6a:08:f6:6d:32:3d:fd:16:d0:
         81:dd:4d:e8:15:a4:9e:ec:de:67:d5:e0:bf:55:cb:16:62:6a:
         f5:31:9d:7c:c5:40:a2:1a:8e:8a:73:4b:4c:1b:42:41:0d:aa:
         2a:98:ae:f4:5f:6e:4c:aa:16:f7:83:3f:82:c1:fe:2b:02:73:
         d1:8a:74:7d:84:93:38:8f:20:61:82:03:92:9e:a4:95:05:d0:
         31:f5:de:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:42 2025 by rpki-client