Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/420957af-2baf-38ee-bcd5-ed29dc9e3702.roa
File:                     420957af-2baf-38ee-bcd5-ed29dc9e3702.roa (raw, json)
Hash identifier:          tZGfqEJhNjdsIkPRCj+0vNCBA4PJq81o/2z2bUExrIY=
Subject key identifier:   46:50:11:6C:BD:84:26:A2:14:E1:44:4B:C5:00:E6:DB:75:F6:57:9E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A7D160B12531E669031262500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/420957af-2baf-38ee-bcd5-ed29dc9e3702.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     20940
IP address blocks:        2600:140b:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:16:0b:12:53:1e:66:90:31:26:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=6643cbe6-261a-446f-962a-f2f488f73586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:ae:04:dd:41:e0:0e:6a:2e:0d:55:96:94:
                    1d:de:1f:cc:f8:6c:7f:a6:c2:f8:72:1a:b1:d7:30:
                    2a:48:00:86:be:2c:f5:c3:90:0d:2e:59:18:54:33:
                    7a:68:f0:07:19:a8:5c:7f:5e:94:55:2a:0f:3f:70:
                    e8:fd:17:24:86:da:9a:d4:7c:ef:42:63:a1:98:46:
                    01:fb:a9:6f:3e:3e:ef:ab:d0:f7:a5:44:13:4f:a9:
                    89:fe:82:3f:57:96:49:34:1b:7f:e1:72:fc:82:70:
                    cf:5a:9c:0b:20:ab:f3:aa:16:f7:08:17:cc:a2:2f:
                    a8:10:74:ab:92:a7:94:f5:34:36:6f:ff:cc:55:3d:
                    08:d3:c9:f1:1e:ce:ed:6c:48:10:e3:39:d8:df:ee:
                    c9:66:cb:61:07:f5:b2:d7:84:ee:60:56:5d:13:ce:
                    8e:16:17:8e:b2:99:81:7f:de:59:34:d4:d1:7b:49:
                    99:1c:bd:2e:4a:ba:2e:26:21:a4:9d:07:86:27:6d:
                    13:e1:aa:6d:e1:36:e5:ff:ac:3d:26:47:f1:82:3f:
                    ea:41:dc:a8:70:4c:f3:38:95:6a:1e:86:e1:73:f9:
                    6b:b7:8f:86:57:f2:dc:17:1a:50:0c:2f:83:f7:51:
                    f3:27:51:11:ef:c7:ed:4d:80:87:e2:93:2d:2c:30:
                    24:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:50:11:6C:BD:84:26:A2:14:E1:44:4B:C5:00:E6:DB:75:F6:57:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/420957af-2baf-38ee-bcd5-ed29dc9e3702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b7:60:33:75:4c:4c:42:90:8a:98:8c:a0:28:e8:cd:43:9d:
         44:d7:7c:7f:11:c1:c7:2d:99:ab:2f:2f:69:c9:e2:71:02:68:
         3e:b3:4b:30:dc:d7:61:b9:0c:1b:cc:3a:05:35:73:cb:a5:5a:
         83:5f:45:e1:55:89:56:14:30:fd:a3:11:35:f5:0a:83:71:a9:
         c1:04:1c:5c:6c:77:28:33:5c:12:07:d3:ff:01:fd:c1:92:44:
         88:ba:f0:ac:5d:f6:65:fd:18:19:56:50:a2:63:bb:8c:38:03:
         7c:0d:f7:a9:c2:d5:f4:95:47:c3:91:a6:5d:6c:94:eb:2c:f4:
         d2:73:4d:64:e3:e1:e7:c8:2e:a4:0c:3a:cf:6b:7e:d3:30:01:
         f5:7a:27:d8:73:67:c6:82:50:03:8c:7e:93:ff:8b:a1:b1:b4:
         08:b9:0b:cb:b6:67:3c:1c:ff:33:42:07:24:9e:14:ff:92:cc:
         94:e1:5f:5b:80:dd:24:f7:4e:53:fd:14:5b:f9:55:46:9e:80:
         b5:c9:da:70:84:c8:57:3a:58:e5:50:94:87:dc:f3:18:c3:3d:
         05:89:b5:56:41:b5:e4:1d:d9:1f:31:3f:e9:20:0c:bf:f1:f3:
         bb:ee:ed:ca:8b:e3:20:e7:49:f8:d9:0d:98:97:0a:69:d0:00:
         ec:16:90:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:46:13 2025 by rpki-client