Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ec31afd-a22c-3cfe-aa09-ae1a728c92f7.roa
File:                     1ec31afd-a22c-3cfe-aa09-ae1a728c92f7.roa (raw, json)
Hash identifier:          pMqATxq8r/zpyT7JDRWev0cO2+7SKIsi4TKeShDZv/U=
Subject key identifier:   5C:73:0F:CA:82:07:C6:3E:25:D5:17:CB:1F:F8:CF:EB:F0:9F:75:39
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6C55EA4BE569EBDA8E2FDB40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ec31afd-a22c-3cfe-aa09-ae1a728c92f7.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     9498
IP address blocks:        2600:1417:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:ea:4b:e5:69:eb:da:8e:2f:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=7bb8d3e1-6366-466b-b8a8-aa0931db1e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3d:6d:d6:1c:92:d1:0e:74:74:68:df:8b:d5:
                    4b:cf:9a:6e:8a:a9:b9:e1:9e:38:d4:ba:cd:90:e7:
                    cf:46:6c:e8:ba:1a:d0:29:ce:df:47:57:32:e0:14:
                    86:2b:64:be:54:76:be:79:43:42:26:e0:67:30:ea:
                    65:94:a5:86:8f:96:7d:f6:68:0e:13:92:c1:8a:6c:
                    65:3f:f9:e2:43:96:8b:6a:fb:d3:88:0f:ef:64:6e:
                    fc:eb:ab:8f:ee:2e:08:2b:3c:e1:e6:83:5c:57:25:
                    3f:6d:80:a7:b6:1d:bc:b3:6e:af:a9:8b:41:7b:57:
                    35:4f:88:48:de:32:5e:a5:b0:6c:86:15:6d:72:f2:
                    c5:59:51:d9:1e:c3:24:02:51:42:6e:45:17:20:74:
                    c7:4c:a4:2e:d8:fa:65:b1:39:be:f2:d7:d6:7b:da:
                    38:59:5f:76:ed:a1:6b:c0:c7:65:78:df:1a:d2:d6:
                    49:8d:b5:d1:78:d0:0f:f9:f6:71:bc:06:ce:58:13:
                    59:77:a3:a7:13:67:3b:51:35:5a:7e:64:de:53:5c:
                    ff:08:46:a6:d5:22:d7:4c:47:3f:6d:8c:ae:79:5a:
                    a9:c1:2b:80:b5:f6:cf:db:0a:6d:f1:20:10:ba:a6:
                    d7:25:d7:5e:87:be:a9:4f:92:ca:85:1c:8b:6a:48:
                    66:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:73:0F:CA:82:07:C6:3E:25:D5:17:CB:1F:F8:CF:EB:F0:9F:75:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ec31afd-a22c-3cfe-aa09-ae1a728c92f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:1a:7d:bd:ef:a9:cc:fd:76:a1:7f:02:57:33:05:da:a6:d8:
         e6:65:19:a6:86:c0:30:be:5c:d9:1d:52:d8:f6:12:ba:86:ed:
         7c:5b:ab:c3:12:bf:21:f2:ed:43:be:ab:f4:58:9c:bc:27:7d:
         de:3a:7c:51:32:ba:14:37:8f:a1:d8:32:d0:a8:8b:12:92:c8:
         7e:b9:da:1e:95:26:37:f8:27:2b:52:ea:da:f3:64:bb:91:f2:
         8e:db:6a:5b:c9:7f:3f:cd:08:9b:b7:e6:d5:56:f1:58:9d:08:
         0b:5a:9f:7d:de:6e:88:3c:87:71:06:96:ce:81:9d:1e:48:7e:
         95:9d:e9:2c:8d:3c:58:85:86:dc:97:39:58:37:87:ec:f3:ac:
         a9:d1:cf:ed:12:68:f3:10:0b:5b:b3:f9:77:a2:73:36:a0:a9:
         54:d6:ee:eb:62:04:f4:27:5f:33:df:d9:e7:4c:8d:61:6d:34:
         98:8c:b9:0b:c3:38:87:a8:6a:30:11:58:59:3b:80:63:5a:6c:
         d5:72:f6:a8:50:14:6b:ac:e7:4a:95:12:82:3d:5f:1f:4f:06:
         2a:06:da:a8:c8:4e:c4:bb:47:08:26:7a:38:f1:7d:a1:66:85:
         dc:39:5d:b2:40:04:ca:ea:c7:e3:0d:2f:25:c4:70:4d:ea:f5:
         68:7b:02:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:23:03 2025 by rpki-client