Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a4e7e46-def0-3878-a646-3b772e5c426f.roa
File:                     4a4e7e46-def0-3878-a646-3b772e5c426f.roa (raw, json)
Hash identifier:          Zhivjq6SR69p2JwMeYC30qGB8pOjNtxaLK5k2WgNse4=
Subject key identifier:   9C:EB:DE:C1:6C:B8:0E:A8:01:7B:BC:4B:4D:86:C2:89:A7:0F:84:48
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6AF095B8CA4E6ECCF62BC930
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a4e7e46-def0-3878-a646-3b772e5c426f.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     35994
IP address blocks:        2600:1407:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:95:b8:ca:4e:6e:cc:f6:2b:c9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=758e5c15-9a7f-466d-98d6-40363c567f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7e:13:bb:d1:c9:dd:c8:eb:7b:76:d2:4e:c4:
                    40:aa:c4:ef:23:4e:a9:04:57:69:92:ca:18:a3:93:
                    49:2e:f2:1f:11:ce:f8:2e:a0:0b:86:0d:40:68:d4:
                    93:87:7d:6b:cb:1b:46:94:6b:94:98:23:f0:c2:62:
                    70:3d:d2:2a:8a:93:3f:c0:fd:fd:cb:a4:a1:24:0d:
                    c0:9b:0d:2c:f4:26:5b:ee:cd:2e:94:64:09:c8:87:
                    76:ed:e6:cb:7f:1d:12:82:4a:2d:27:4a:43:ed:21:
                    78:26:22:c3:ce:06:e4:80:9a:0f:9d:6c:0c:3b:e9:
                    cb:43:24:07:44:f8:15:b9:95:45:05:5d:70:2c:8f:
                    9f:fd:2b:92:7e:66:f5:c8:b0:0e:cf:8e:df:82:ba:
                    b6:72:e6:aa:c5:c2:be:1e:cc:b2:46:bf:15:db:25:
                    35:a4:06:2c:52:38:a9:15:d8:df:d6:a1:0c:72:d4:
                    b2:e1:19:d9:37:08:a4:61:e5:21:b3:95:65:6d:e2:
                    c6:f2:58:28:72:62:3e:5b:3e:34:d5:56:de:d5:1f:
                    80:73:3e:b7:48:f1:df:b5:f2:c7:a3:0f:32:0e:6f:
                    d0:4a:9e:ea:87:ce:4b:84:60:47:4d:e3:d2:44:65:
                    f8:a7:1d:ce:f8:25:4c:f5:e5:66:e7:fc:8e:41:6a:
                    25:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EB:DE:C1:6C:B8:0E:A8:01:7B:BC:4B:4D:86:C2:89:A7:0F:84:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a4e7e46-def0-3878-a646-3b772e5c426f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1407:b000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:87:65:f0:9c:55:bf:14:73:8d:94:b8:2c:a1:90:98:76:7f:
         90:f8:43:e9:db:41:23:e3:9b:84:43:69:ad:fa:23:72:9b:82:
         34:01:19:0d:55:b4:61:9a:0f:11:d2:ea:4b:d5:b3:49:b3:fa:
         99:07:97:b0:e1:2a:c4:f4:29:bd:55:2c:2d:11:e5:ab:a8:d9:
         40:8f:3a:2f:ec:a9:1e:29:50:43:d2:24:4e:a7:ea:38:3a:74:
         05:87:ed:a2:93:aa:38:ba:a5:60:e2:1c:3a:c9:26:72:30:ea:
         75:18:de:04:c1:31:19:ec:78:f7:3f:88:a5:25:2e:67:1c:a8:
         8a:7b:e3:bf:3d:c1:0b:bc:7c:66:80:52:b8:c7:a9:80:32:f4:
         a8:31:74:0f:95:b2:00:db:ff:d1:c4:e5:80:8d:62:9b:e4:84:
         e3:a1:ee:8c:72:34:5e:41:07:ff:4c:07:7f:9a:e1:3d:9b:fd:
         e7:6b:4a:1e:01:7f:7e:e8:6e:3a:04:a7:32:3a:88:50:65:f9:
         f5:6e:62:a7:bc:17:cd:12:a3:a1:dd:34:f7:a9:d3:33:12:69:
         ac:46:b0:eb:7f:74:bf:4e:f2:ea:29:8b:f3:6f:48:29:8e:5d:
         63:41:24:10:79:05:7c:5c:46:95:e7:3e:a9:da:d0:e4:1e:70:
         04:f3:d9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 19:30:40 2025 by rpki-client