Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3636f0bc-cd17-38c4-a6b3-ad1b6d595ef6.roa
File:                     3636f0bc-cd17-38c4-a6b3-ad1b6d595ef6.roa (raw, json)
Hash identifier:          aKUNOaoxcrB8/NNiowSApx6N6GwjvQPdpDUlChWzByY=
Subject key identifier:   15:62:9A:46:8E:1E:16:CF:A2:98:DC:A0:A9:50:DF:57:65:85:08:FD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5EDD4FD3C5795FF8852C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3636f0bc-cd17-38c4-a6b3-ad1b6d595ef6.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:1405:8400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:ed:d4:fd:3c:57:95:ff:88:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=a58e6a65-d7ff-48a0-be35-bca99d78c8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:72:93:dc:b8:8a:ed:c5:71:93:a2:88:d3:
                    92:1e:b2:11:e8:3d:ed:a1:cd:b1:dd:33:fc:b6:40:
                    b4:1f:ca:ad:49:18:36:62:75:a5:bc:c1:82:13:87:
                    8f:85:bc:b1:5f:3f:a0:84:53:92:37:8e:28:21:f3:
                    79:69:04:6b:62:ee:8e:18:c1:2d:f1:f2:5f:55:87:
                    76:8b:e5:55:6f:26:c8:55:20:89:a2:6b:ea:ed:d7:
                    28:d6:b1:aa:fc:6b:45:3c:c0:6c:4e:a7:3b:33:2e:
                    fa:a7:04:9a:86:74:7a:8d:2c:46:8b:1e:ea:69:6f:
                    0c:40:4b:07:62:a2:3e:05:72:30:30:09:87:4b:8f:
                    e1:5b:67:fc:d3:d3:d9:83:b1:dc:de:37:b2:b6:b3:
                    a5:07:45:39:c1:15:80:09:66:4b:82:34:31:e3:29:
                    ad:83:3c:74:16:ec:38:1b:ec:4a:67:dc:85:b2:97:
                    70:62:05:6b:73:35:b5:ad:1e:5c:16:98:2c:18:d0:
                    f6:fb:cc:ee:c3:9a:00:8e:f3:8b:41:9c:94:0e:14:
                    10:68:e8:c4:a6:29:5f:2f:22:0f:39:7b:b8:59:3a:
                    27:5a:63:48:10:31:36:2e:f2:29:a0:7e:3b:17:b4:
                    9a:5f:a4:91:cd:91:34:7f:e6:31:22:7b:a6:61:4b:
                    92:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:62:9A:46:8E:1E:16:CF:A2:98:DC:A0:A9:50:DF:57:65:85:08:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3636f0bc-cd17-38c4-a6b3-ad1b6d595ef6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:8400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:fe:d7:61:68:7b:b9:a3:52:21:e5:18:e0:bb:b5:59:95:7f:
         6f:e6:5e:f1:01:83:ad:91:57:ce:3a:78:1c:1a:90:15:da:98:
         4c:f1:c6:03:cc:0c:be:7a:98:4f:8a:d0:24:6c:db:45:ac:15:
         0d:07:7f:59:17:e8:82:98:5b:66:39:9f:a7:e7:9e:4a:f0:87:
         aa:23:62:71:db:25:80:be:4b:64:dd:10:5f:05:70:94:91:9a:
         86:5e:f5:0b:7c:8e:f3:dd:af:38:65:e6:2c:3f:5e:02:64:9f:
         d8:9d:84:91:5a:4d:a3:f5:b7:75:92:c1:66:9c:10:a7:3c:ba:
         2a:51:58:f0:f5:aa:ca:88:ed:0c:42:2d:3b:7a:b7:e9:86:ff:
         3b:ab:c2:fc:79:70:53:09:05:92:fd:00:09:3a:53:86:8e:53:
         52:88:e2:f7:2a:35:21:53:fb:5b:97:ef:bb:bf:ff:39:b6:aa:
         88:3a:78:cc:d8:09:21:75:2c:7f:a8:08:2b:67:98:41:4e:1d:
         cb:d8:ca:d0:10:22:3d:6d:08:64:35:af:41:9c:f7:7e:dc:1f:
         a5:1e:52:a4:ac:ac:ad:07:04:97:e8:b2:2b:91:ca:4a:3f:6b:
         b7:62:a1:00:87:41:14:57:56:be:df:e7:9d:ad:2c:a3:00:9a:
         f4:c9:6b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 00:05:51 2025 by rpki-client