Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e98050a-8268-38fe-9550-76441b8533c4.roa
File:                     3e98050a-8268-38fe-9550-76441b8533c4.roa (raw, json)
Hash identifier:          HxM9nPUOGjybB1qZbjSk03fuYQXkMzwvMhnHyKp6vVQ=
Subject key identifier:   CD:10:41:65:22:AA:EE:96:53:28:DD:04:FE:96:DB:5D:AF:37:D9:53
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6AF0958E81F807FEEEDDBDD0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e98050a-8268-38fe-9550-76441b8533c4.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     35994
IP address blocks:        2600:1407:6800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:95:8e:81:f8:07:fe:ee:dd:bd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=67c29b8c-2170-4175-9ade-0f827096d48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a5:81:a4:ed:1b:b8:6f:83:04:d3:12:a6:0e:
                    8a:1f:79:56:7f:1c:27:11:a7:43:f5:06:d9:37:9d:
                    9e:7c:bf:e3:62:7c:94:b3:16:91:3b:8e:a1:95:ad:
                    b3:4c:10:d8:c7:22:ba:52:b1:4f:cf:49:6a:46:a9:
                    3c:ba:70:97:96:db:da:e3:a0:e2:d6:29:81:4a:10:
                    f4:fb:2b:07:32:f3:06:5f:ed:9d:32:57:85:23:e5:
                    3c:a8:26:fd:b4:e7:e0:1e:10:ea:43:33:d9:69:a3:
                    94:0e:c8:5a:a6:bd:ba:9b:02:8e:99:4a:31:70:cb:
                    0f:f4:70:8f:22:9d:c9:2c:f9:af:b4:8a:95:0c:2a:
                    43:1f:5d:48:4c:94:80:c4:6a:82:52:74:ef:08:ff:
                    66:a8:62:81:51:28:ee:b5:c5:70:7d:47:f4:b1:32:
                    ba:1f:7c:36:3e:41:cd:2b:1e:e7:f7:cd:0f:68:c6:
                    bc:a7:e6:5a:13:7b:77:40:cb:18:b4:8a:22:71:10:
                    19:8d:82:f0:d4:8d:3a:82:fc:a4:00:95:5e:1b:98:
                    88:99:55:cb:5d:ef:bd:46:da:b3:a8:4b:3a:af:06:
                    eb:90:19:0b:08:ea:c5:8e:8e:fa:7a:e0:d5:ca:13:
                    7f:9b:eb:57:7b:6b:54:52:f0:c4:2e:63:88:e9:a6:
                    aa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:10:41:65:22:AA:EE:96:53:28:DD:04:FE:96:DB:5D:AF:37:D9:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e98050a-8268-38fe-9550-76441b8533c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1407:6800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ea:ec:1d:8d:05:d3:b0:3a:6a:7c:b6:22:bd:ac:9e:46:86:
         91:f8:57:92:85:22:22:78:17:4d:54:58:40:0e:23:46:e2:49:
         f3:6d:84:95:c8:24:cf:28:56:60:99:fe:03:84:3c:b6:88:54:
         97:cd:9c:80:89:4e:d0:52:80:eb:dc:9f:66:32:6f:e7:09:d2:
         b4:0e:5c:f4:45:7e:ca:03:18:23:b8:ef:d0:0f:fb:4c:c3:9a:
         cd:61:c6:8c:76:ae:74:72:80:cd:4f:35:19:14:55:7c:36:a7:
         fd:5d:33:0a:a7:4c:77:e4:66:97:ca:72:f5:44:e8:78:aa:7b:
         6b:66:60:0c:58:02:d9:a1:5b:c5:27:6f:bf:73:21:32:00:01:
         7e:56:33:3e:7b:52:b4:62:c4:0b:09:50:dd:50:06:69:81:e5:
         07:64:79:a7:65:6f:da:d7:f8:07:6c:f6:2e:4f:7a:a9:fa:3c:
         c3:04:11:c0:df:fc:5d:d5:f8:79:63:4a:5a:d2:44:aa:00:9b:
         15:ec:f2:a5:fe:6d:7f:66:6d:f2:5c:54:ac:d2:fe:b4:cd:75:
         2c:0e:bb:3c:09:a8:bd:2c:e7:b1:67:0f:e1:c9:3e:c1:02:6e:
         4b:b5:34:b8:a8:ca:c5:d6:47:3b:30:88:1f:ff:3e:e7:e2:34:
         8d:b5:6c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:02:33 2025 by rpki-client