Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f55854f-54cf-3a71-8f91-226fede7eaa0.roa
File:                     4f55854f-54cf-3a71-8f91-226fede7eaa0.roa (raw, json)
Hash identifier:          +lFkuBYMfbZ7MEkCwnlPBvoS2teo3tyQxTAfptg67xk=
Subject key identifier:   52:7C:B0:96:19:AA:67:78:CA:2A:83:E4:CE:0C:FC:09:02:B7:32:73
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5FABEBF5A2EF47897D580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f55854f-54cf-3a71-8f91-226fede7eaa0.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:1408:16::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:fa:be:bf:5a:2e:f4:78:97:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=e7e5e8fc-2fba-46d7-9624-bf06dd7d290d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e7:a4:a5:6a:30:8c:1c:e7:33:26:d2:6d:57:
                    84:68:f1:0f:2b:a2:47:53:51:3e:2b:d2:ec:56:a7:
                    0f:d1:f8:21:82:10:c1:4f:3d:3a:37:d9:38:99:a0:
                    32:5e:f4:45:bf:20:bf:63:69:7b:c3:b7:e9:2c:04:
                    23:af:7c:d7:4c:93:78:61:a4:8e:1d:fa:ad:90:05:
                    52:94:5a:ab:0f:93:59:bb:b9:06:0f:1a:c8:94:ed:
                    18:34:74:73:c7:31:4f:3f:85:73:1d:08:0c:d3:4f:
                    ef:e7:0f:93:c8:8e:fe:f3:99:e1:f6:e9:da:f3:a7:
                    d5:aa:83:cf:fa:5e:7a:bd:d5:4f:14:fd:80:5c:4b:
                    21:10:09:8f:a9:8c:ef:d4:81:b1:cd:cb:10:72:ea:
                    d5:5f:d3:42:db:d1:7d:e4:88:cd:57:6d:ff:a4:b0:
                    9a:e6:cb:55:b4:25:16:34:37:b7:67:b7:f9:f4:68:
                    63:56:4a:fe:14:85:78:00:a1:5b:81:fd:91:f0:64:
                    0f:ed:44:2d:21:35:52:8e:40:7e:45:d5:a0:38:3c:
                    c0:62:2c:5e:e9:ed:3d:34:1f:d5:cd:52:d9:50:0d:
                    e3:ac:70:51:7b:d8:fb:a7:9d:bf:29:f9:0d:15:8d:
                    d0:39:f2:c3:79:07:b3:84:16:38:ed:82:ea:90:78:
                    15:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7C:B0:96:19:AA:67:78:CA:2A:83:E4:CE:0C:FC:09:02:B7:32:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f55854f-54cf-3a71-8f91-226fede7eaa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:16::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:07:c7:5f:43:b4:ad:95:7a:03:f3:62:b1:0d:f7:47:87:38:
         3f:6f:ba:d1:15:74:2a:66:d2:fb:ab:d0:e2:8b:a4:bd:94:f7:
         74:20:b3:8c:82:a2:e2:2f:95:61:23:fc:87:b2:72:2a:7a:81:
         b0:f0:be:4f:db:b3:51:a0:3c:dd:b2:68:be:2f:c7:21:9f:b1:
         1a:02:da:13:27:c4:70:d7:bc:89:fe:45:b2:72:5e:a9:7e:61:
         ba:c1:ca:2c:7a:ba:fb:06:eb:30:fb:a2:eb:7f:a2:cf:04:ac:
         66:b0:1d:a7:c7:27:83:f7:29:86:90:fc:b3:5c:be:c8:3e:a0:
         13:71:cf:8e:bf:78:62:ad:bd:2d:55:df:41:c3:d5:f5:21:15:
         06:78:48:55:84:19:37:d8:57:c7:93:28:a5:06:58:6a:8f:e7:
         2b:80:29:2d:6f:30:c3:c0:87:c1:fc:9b:78:06:81:1c:f7:6a:
         4d:4d:a8:44:b1:ff:26:78:83:a2:7c:96:7a:e9:7e:60:a9:cb:
         95:d1:98:81:56:1d:f9:8c:44:82:df:38:f3:4b:fd:12:97:06:
         2f:0f:4f:23:9a:55:c7:bb:50:f4:1f:65:7f:fe:1d:27:8e:d1:
         de:70:5a:2e:d3:20:46:29:0d:8e:28:c5:3d:15:e5:81:87:5e:
         23:29:74:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:40:59 2025 by rpki-client