Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84eba876-e4f9-3e85-8d59-fe8ada3735f4.roa
File:                     84eba876-e4f9-3e85-8d59-fe8ada3735f4.roa (raw, json)
Hash identifier:          DMUbC4t6bYVQ6XsYrfkPZdFbGakz3QB8tS8GRCfKfG4=
Subject key identifier:   3B:85:A8:FA:AA:59:EE:B1:04:A9:B4:13:C8:50:89:C7:97:15:34:B5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5F12B60D02E0F068DE280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84eba876-e4f9-3e85-8d59-fe8ada3735f4.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:1408:4c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:f1:2b:60:d0:2e:0f:06:8d:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=2db99540-9518-496d-a968-9eca38a838ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9c:02:a9:08:8f:dc:20:82:4d:3f:cd:24:4d:
                    64:ce:b7:e6:ba:3b:1b:67:c9:0c:88:9d:de:e9:a9:
                    17:c7:76:3e:a3:47:19:7b:13:56:d9:35:48:92:06:
                    8a:2b:08:b2:d1:f3:85:bf:7b:b1:84:bf:b3:ab:3c:
                    3b:47:22:8e:2e:d3:c4:39:95:e8:4a:a0:b4:d5:1b:
                    27:7d:fd:b5:6d:7d:29:5d:99:48:d8:e0:18:72:9c:
                    05:98:8b:65:fd:95:57:af:9b:c4:37:34:e6:36:b8:
                    8f:79:6c:80:13:07:36:ac:33:90:9b:dd:7a:13:55:
                    34:77:a4:44:68:77:3e:2f:ce:98:16:2a:3a:f2:1d:
                    16:14:66:ea:8c:6f:e1:a7:0c:c7:84:90:83:45:d6:
                    1e:01:4e:ef:de:f8:62:e1:cd:35:a5:70:bf:8e:c1:
                    90:f0:72:5a:9d:41:a1:c9:4d:c0:34:ac:c4:91:9a:
                    b7:31:22:c4:d7:b5:fa:7a:14:ee:bd:e2:0f:b7:59:
                    69:16:6a:a3:11:ba:2d:06:bb:40:d8:e3:7d:d8:45:
                    66:10:61:e8:29:ee:24:ed:4b:57:63:a7:e8:9f:fd:
                    3b:c4:c2:8a:7e:c1:dd:e1:87:cf:59:69:66:5d:24:
                    7a:38:87:2d:d8:2c:e7:72:e1:01:80:35:33:d5:3c:
                    46:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:85:A8:FA:AA:59:EE:B1:04:A9:B4:13:C8:50:89:C7:97:15:34:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84eba876-e4f9-3e85-8d59-fe8ada3735f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:4c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:6c:20:e1:c0:73:de:9d:02:2c:73:90:43:fd:25:77:80:c6:
         9f:2e:0a:40:b7:41:bf:ca:1c:02:df:c5:bb:25:22:2e:f4:f6:
         d3:d8:18:59:d7:69:b5:c9:a4:51:8c:36:68:e7:ac:23:5b:df:
         de:e0:7e:24:f7:6c:b4:a5:de:2a:97:2b:18:7b:48:98:25:e4:
         9e:58:1d:7f:d1:28:7f:c4:a9:bc:04:49:d5:b7:6a:47:52:30:
         88:9b:aa:a5:23:ff:a1:ed:3d:67:de:dc:76:b2:32:50:38:0d:
         0a:d8:2a:5f:ae:35:ad:14:69:d7:f4:9e:2b:c2:00:6a:49:86:
         9a:cd:c4:99:df:52:28:71:2e:17:19:41:77:d0:f0:c8:08:2b:
         78:a5:59:4a:56:b6:04:12:d1:37:57:8e:ac:4f:d4:97:a8:60:
         9f:28:3f:3e:d1:3a:6e:da:3a:8f:50:a2:b0:ec:e3:35:53:42:
         64:9d:fe:8b:7f:08:ca:c5:cf:ea:2e:2e:83:14:9a:33:bf:9b:
         91:f1:6a:b2:fe:27:f0:60:55:8b:0b:c7:a5:92:0a:3a:4b:c3:
         2e:5d:5c:40:9b:09:30:13:7f:cd:c7:a7:6a:59:ec:c8:44:f4:
         0c:02:b8:e9:b9:0d:35:72:2b:ef:e4:68:9c:ae:67:ef:cb:d6:
         31:44:2c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 00:04:15 2025 by rpki-client