Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6750b242-1d67-3df0-9cf0-33e160d36855.roa
File:                     6750b242-1d67-3df0-9cf0-33e160d36855.roa (raw, json)
Hash identifier:          krEZ6+EBJCSzSqIEQxpwS6JnlHc3bi6X+U37ckyBraY=
Subject key identifier:   A3:7B:12:6A:E8:17:92:20:05:5A:77:3E:C1:35:7A:55:38:5B:4F:B2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A68260F082F58B275501F70B1
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6750b242-1d67-3df0-9cf0-33e160d36855.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     20940
IP address blocks:        2600:1488:a320::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:0f:08:2f:58:b2:75:50:1f:70:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=b355aecf-86fd-4c41-a50b-580bf956a34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ac:5b:da:d9:44:89:d9:09:1b:d9:a1:86:99:
                    05:49:01:5f:6c:54:ab:10:0b:ed:5f:ed:82:b3:81:
                    47:db:10:ac:6a:84:70:d4:9c:39:e7:25:fd:d6:b6:
                    77:4d:2c:a7:c6:9f:ec:d9:8a:0f:8f:15:81:e8:4f:
                    f2:b4:35:8a:a7:4a:ed:79:3f:6a:42:fa:82:f5:e3:
                    ae:32:9d:79:61:1a:58:a5:93:fe:d8:65:2e:4e:4b:
                    4d:e0:6c:40:15:1b:4c:72:f5:e4:35:b4:af:65:e6:
                    8a:ac:f2:98:9b:67:b3:e1:68:f1:39:fd:33:69:7f:
                    08:94:c4:d9:d4:49:c5:d5:aa:12:55:ca:62:cc:1c:
                    93:ca:96:aa:02:89:3c:36:5c:c5:52:6a:31:5d:60:
                    13:22:de:34:15:a5:42:ff:0c:5b:81:76:d1:1e:fc:
                    21:97:3c:d4:9c:7d:97:62:1a:96:26:92:7e:96:7a:
                    9f:f7:67:b2:02:cb:0f:7f:04:f9:8e:c4:8e:fd:08:
                    e2:71:2d:2d:7c:5f:e2:d7:9d:c4:d8:ac:3f:2a:d2:
                    97:2d:3b:56:f7:60:31:54:f9:f8:5d:01:bc:bb:54:
                    d3:9f:5a:2f:46:d4:22:40:69:e1:3e:01:fd:1f:ab:
                    53:39:36:fb:db:2d:72:21:f5:29:45:22:4a:b6:bf:
                    ef:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7B:12:6A:E8:17:92:20:05:5A:77:3E:C1:35:7A:55:38:5B:4F:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6750b242-1d67-3df0-9cf0-33e160d36855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:a320::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:93:43:2b:48:4f:91:98:87:83:eb:98:86:8a:3b:ff:63:96:
         b8:bf:14:3c:10:3e:8e:a9:21:e6:9b:e7:43:b2:f1:57:6e:70:
         2d:ba:a9:62:d3:da:77:2b:fa:21:98:d0:0e:62:97:56:ba:d3:
         f1:c3:09:d7:d6:a0:37:db:a0:c8:c3:1c:74:64:37:ab:f9:1f:
         3e:a5:3a:01:4d:3d:99:76:84:a2:9d:51:6f:88:3b:45:4e:85:
         4f:4d:5a:31:db:1a:62:85:c4:10:39:56:05:31:32:18:e0:ca:
         bb:de:66:39:5a:d2:26:2c:2c:52:bc:be:9d:8d:8a:08:9f:5d:
         2a:5c:c3:6f:6f:ee:7e:17:b8:16:4a:79:fe:c0:38:d1:5c:a6:
         dd:39:f3:32:98:55:7f:59:72:9d:ea:f3:69:e3:1e:1e:7d:d9:
         b1:b0:08:5b:28:bd:57:a6:bb:c8:f7:a3:cf:b3:82:8a:51:7f:
         5d:da:16:d6:d5:c9:ee:e6:41:70:93:41:80:c6:a3:f3:30:7a:
         bd:54:53:ad:14:44:fc:d3:ed:f5:39:96:43:cb:5e:7d:0e:34:
         f9:21:1a:93:17:64:7b:e5:ca:05:62:94:60:7a:23:b9:45:f0:
         c2:7e:c8:d6:6c:ea:a0:02:92:2c:5a:83:46:56:99:f9:8c:bd:
         b3:f7:25:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:44:33 2025 by rpki-client