Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97cc0d0a-fd43-3299-a30e-14d20ccdc906.roa
File:                     97cc0d0a-fd43-3299-a30e-14d20ccdc906.roa (raw, json)
Hash identifier:          DqpKlirz9nwZBEGQEtBuXwTjIo0WHS/y2gr7+CB1BkA=
Subject key identifier:   70:10:03:7B:04:30:B9:8E:DC:6C:70:CB:42:9D:29:88:E8:19:8C:64
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6C55EA28B280204592882200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97cc0d0a-fd43-3299-a30e-14d20ccdc906.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     9498
IP address blocks:        2600:140f:fc00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:ea:28:b2:80:20:45:92:88:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=7a4e5abb-b765-466c-a5c0-0c82a3c3b584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:66:13:18:76:90:81:b3:13:8a:b7:4a:f5:a6:
                    d1:00:79:a1:5f:1f:29:8e:38:83:27:ec:ac:97:35:
                    69:f0:a5:d0:a0:92:07:51:b9:18:06:61:4b:12:2e:
                    1e:dc:98:e8:6b:46:4c:93:ce:e0:96:30:fd:47:8d:
                    d9:43:33:76:7b:fc:f2:24:16:d9:bf:08:b3:99:44:
                    7c:cf:e1:a2:9c:ba:3c:d3:34:37:f9:dd:fe:0d:09:
                    7d:c8:5f:cb:66:06:26:55:2e:bf:17:68:b3:1f:37:
                    06:ea:d0:9d:b8:88:3f:bc:b3:bd:50:69:5e:c6:2d:
                    d5:b7:82:98:ad:0a:66:b1:0e:c0:6c:da:37:70:83:
                    af:76:3d:b4:a1:60:a5:77:b9:3b:71:ea:2d:83:1d:
                    dc:8f:e1:92:fa:80:dc:4a:f1:66:57:5d:4a:4c:a4:
                    14:5c:46:ca:6d:b8:66:5e:c5:33:21:36:ba:c0:f6:
                    c8:f2:a7:e7:a3:7b:b2:36:40:c5:0c:fd:e7:89:3d:
                    88:c6:d8:97:66:87:6f:7c:2e:93:51:a3:77:c0:d8:
                    bd:8b:cc:ce:cd:2f:12:42:19:33:7d:91:d8:c1:ea:
                    63:4e:4b:0c:34:ab:04:f2:1e:2d:79:2e:2d:a3:6e:
                    38:d1:8e:a1:d2:17:7f:88:a3:43:7d:d2:8e:e6:d6:
                    a8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:10:03:7B:04:30:B9:8E:DC:6C:70:CB:42:9D:29:88:E8:19:8C:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97cc0d0a-fd43-3299-a30e-14d20ccdc906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:fc00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:39:d3:c4:bc:16:95:eb:2b:eb:de:a4:19:87:8e:c7:b0:62:
         60:cf:b4:47:26:2a:da:ea:df:42:a0:2c:d9:fe:58:be:08:cf:
         ff:e7:9a:db:a1:16:6e:0b:41:0d:19:fc:52:d6:54:ee:04:cb:
         1c:82:4a:82:b1:d7:b2:12:74:26:5a:eb:60:c9:57:fd:b7:ee:
         b4:9b:2a:73:ed:fe:f4:04:e9:78:e5:a8:f3:f6:b9:01:98:03:
         9c:b8:82:1f:65:3e:27:f1:ad:ff:76:65:1b:29:d3:a8:37:2a:
         0a:eb:32:9e:8d:53:e9:3a:54:9f:1b:1b:78:cd:4a:79:c0:32:
         54:b9:51:4f:89:b9:e2:1a:29:69:48:6b:c3:c7:75:09:99:1c:
         f1:f8:52:54:e8:a3:86:48:b1:eb:2c:a4:40:95:df:14:7f:ca:
         62:e3:67:23:ab:de:ac:d7:4a:a1:36:82:be:21:8c:36:70:5f:
         3e:c5:a0:aa:8e:a9:99:09:02:df:e2:c2:e7:77:21:9a:e3:62:
         9c:c1:85:a8:19:0d:34:58:ab:23:d3:59:ef:25:4d:c7:56:d0:
         d4:b4:53:94:69:85:c6:11:cc:a7:ae:c1:e7:0c:05:d7:19:f8:
         6f:98:85:fb:dc:de:ad:36:37:38:95:e2:1b:88:e8:10:53:45:
         ad:22:42:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:30:17 2025 by rpki-client