Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa
File:                     20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa (raw, json)
Hash identifier:          8wQ9IN5SH7GFAIMLKFmEuKD1i/pmaq/RlE6qeDcy+jA=
Subject key identifier:   2E:A0:57:52:3F:A6:56:BA:FF:CA:7D:1B:3E:C9:2A:15:46:94:08:5C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5F6C0532F02FEAE9B12C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:1406:2e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:f6:c0:53:2f:02:fe:ae:9b:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=a1e16b60-679c-446f-b4de-258752b879e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:70:fe:6d:4a:fa:06:c9:06:da:4c:49:e9:8b:
                    a0:ee:ec:65:ed:2d:58:ef:89:d9:d0:97:b2:21:09:
                    a8:a2:1c:2b:69:63:06:5e:ea:c2:f8:33:6c:42:31:
                    cf:0b:b9:89:ed:ef:2a:39:1e:ac:3f:99:cb:77:72:
                    e1:30:8a:76:da:50:27:67:29:4b:cf:01:b7:bb:de:
                    e3:86:00:7e:29:48:67:e2:de:40:80:5f:5b:31:cf:
                    02:2e:7e:47:71:f3:5c:54:e1:de:e9:4e:32:07:e3:
                    55:96:a2:7a:8c:64:7f:d7:7a:ed:dc:6e:63:92:b1:
                    e5:52:89:19:27:56:ec:ac:92:83:6f:cd:34:8b:fc:
                    b7:ca:39:00:3e:b3:09:5b:d5:a0:05:dd:94:5f:9f:
                    fe:8b:34:ab:ba:74:c2:a8:84:59:dd:f0:62:e2:dc:
                    a2:cd:45:84:3f:46:16:3f:d7:28:86:10:38:5a:10:
                    be:82:a0:5f:46:d5:31:a6:b0:c0:82:ae:45:80:e4:
                    88:05:c8:88:46:b7:98:08:5c:a1:8d:81:95:fe:83:
                    35:7a:0c:53:ec:0d:b8:7d:d5:33:a6:74:64:9d:ce:
                    e1:24:2f:ad:0d:a7:e4:95:8e:ed:9f:7f:10:9f:fd:
                    c5:c2:20:f6:7b:15:10:ff:38:e7:80:cd:fb:ef:fc:
                    32:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A0:57:52:3F:A6:56:BA:FF:CA:7D:1B:3E:C9:2A:15:46:94:08:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:2e00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:59:61:75:49:02:ea:d2:01:52:a8:50:b3:ed:ba:64:5e:c4:
         00:22:12:18:38:cb:06:1b:65:84:66:f6:f9:f0:0c:3b:fe:c9:
         5b:29:52:c9:c7:22:f2:24:cc:79:f1:ef:cc:8f:ee:5d:e5:24:
         ca:1b:1c:97:31:87:89:5a:d8:ef:c8:73:f4:db:8d:51:43:25:
         b7:69:dd:f0:1f:15:5b:c7:c5:c6:fc:3a:95:04:74:a1:74:db:
         5d:22:62:d4:f1:aa:88:e6:a4:fd:ee:5d:39:b1:a0:03:51:fd:
         20:58:93:0c:ce:06:be:3a:d3:3f:42:ec:30:34:51:36:fb:85:
         0b:20:9a:e3:07:86:9b:7b:b2:fa:33:be:5b:49:fc:e3:8c:a5:
         4c:f3:b0:04:eb:5c:a6:10:f8:5e:7f:4a:30:f1:d0:d4:8c:06:
         2a:bd:05:4d:21:74:72:3f:a1:7f:8c:86:5c:e6:73:c5:1d:a9:
         02:96:50:18:ac:24:84:18:e0:9e:2c:d8:ff:cf:81:b1:a8:85:
         43:c4:21:7f:00:73:e7:76:fe:f5:8a:b2:23:54:37:f7:15:ac:
         2e:e0:a7:5b:ce:41:75:c5:f2:59:36:5b:cc:45:15:7f:31:90:
         82:d8:2d:e0:60:6e:22:d0:f1:26:e1:a8:97:c9:b4:d8:17:7c:
         74:28:8b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:27:45 2025 by rpki-client