Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cc493bd-2dbc-30e6-b5b8-cd57c82c9dee.roa
File:                     8cc493bd-2dbc-30e6-b5b8-cd57c82c9dee.roa (raw, json)
Hash identifier:          yDK5FppbuoNYcRd0NOVRuoO3HirTGZYT16Z54cpFp5M=
Subject key identifier:   E2:0D:EC:53:26:C2:49:10:24:81:FA:38:7D:ED:8A:B2:1B:CD:BA:BF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5F2160F4327EA74A64AF0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cc493bd-2dbc-30e6-b5b8-cd57c82c9dee.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:140b:b800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:f2:16:0f:43:27:ea:74:a6:4a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=947b69b5-67be-45f5-a7bb-3b7ce28beba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:92:76:86:3c:1a:c0:12:0e:89:df:bd:cf:16:
                    8b:24:98:a0:35:0f:9a:7d:7e:90:74:b8:d9:c5:f5:
                    c0:f7:e7:ba:27:8f:0a:26:fe:5b:27:bd:a3:86:9d:
                    54:da:8c:52:a7:da:8b:48:3c:c4:c9:22:68:3d:1c:
                    71:94:7e:f6:06:6b:ba:6e:6f:4b:87:d0:09:32:a6:
                    55:6a:a3:4c:0b:99:e5:48:42:dc:a3:70:a2:39:66:
                    90:9d:35:ff:8e:72:07:c3:5f:52:71:bf:2f:52:7c:
                    d6:bb:9f:55:86:6d:b6:63:f2:ee:24:f0:b6:73:25:
                    6f:dd:34:53:98:07:0f:32:6c:68:e0:76:40:9d:4d:
                    22:a5:b8:42:77:2a:32:3a:09:ad:e4:37:ce:ef:73:
                    1f:c9:c8:fa:ca:f0:89:7d:bc:08:2b:77:09:ce:ef:
                    d8:c5:51:e0:78:b9:ee:f3:d9:4c:75:7a:96:57:a4:
                    37:07:4b:bd:f7:a8:e3:0f:4a:ea:2c:43:ea:39:c6:
                    a4:82:32:1d:9c:00:33:dd:bd:6d:0b:f1:a4:2e:18:
                    4d:c1:d0:97:ee:31:da:14:c2:15:75:8e:98:c9:3f:
                    7e:47:ea:ba:f0:18:c9:00:b8:5a:17:c7:81:7f:fb:
                    2e:4e:bb:68:ab:5a:f8:0b:30:c4:1e:b5:bc:3b:cf:
                    61:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0D:EC:53:26:C2:49:10:24:81:FA:38:7D:ED:8A:B2:1B:CD:BA:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cc493bd-2dbc-30e6-b5b8-cd57c82c9dee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:b800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:d7:36:b4:7d:25:dd:16:af:4d:b5:4d:bc:e6:c0:d6:4f:40:
         39:48:ad:d8:ab:2f:cb:75:21:21:da:96:50:db:7b:e7:63:2d:
         43:ab:e8:15:16:d2:f0:57:50:b6:dc:d7:7c:0e:db:4c:1e:c3:
         44:39:27:7f:4c:d8:4d:a1:56:dc:1e:03:12:1f:f4:f4:8e:c0:
         18:76:9e:d3:31:53:26:b4:9c:c0:89:23:32:f0:4c:90:28:05:
         08:6b:b0:42:73:43:4b:d1:dc:26:92:83:cc:af:10:5b:92:6c:
         18:ed:24:31:4a:04:6d:4c:ee:88:19:1f:b3:5a:52:de:f0:71:
         81:e8:1a:36:b6:d0:ef:5e:6e:c9:d7:9d:05:59:c5:ee:64:a4:
         39:40:6c:4b:f4:54:1b:2b:6e:4e:c6:10:51:b5:a8:4a:bc:8a:
         c7:ac:2e:eb:c2:2b:a8:5c:7f:f4:93:55:72:d3:0f:da:8d:23:
         14:46:14:ae:9e:da:91:70:51:84:5e:cf:a5:8e:0b:cd:4a:43:
         b6:8f:bd:fc:b0:83:ba:71:46:e0:2b:a4:83:62:40:70:52:12:
         6e:ad:ee:72:d8:59:c2:83:de:4c:87:d9:fc:30:06:ec:f9:fa:
         72:e7:4b:23:df:de:66:97:db:9f:bd:f7:88:3e:5e:fe:eb:02:
         5a:ae:a2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:34:17 2025 by rpki-client