Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d110f90-28be-3457-8e60-9861123cb715.roa
File:                     9d110f90-28be-3457-8e60-9861123cb715.roa (raw, json)
Hash identifier:          niskmkw0a6oSeH016IzzqrKTk7tLLbgfqnb0D60oOww=
Subject key identifier:   21:BA:71:75:3A:D9:02:D1:F0:B5:F5:50:D9:32:26:8A:55:30:55:11
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A68261078D525CEA08E72D500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d110f90-28be-3457-8e60-9861123cb715.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     35994
IP address blocks:        2600:1406:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:10:78:d5:25:ce:a0:8e:72:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=e9e25519-cac4-46e2-b389-769bb4db50cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e3:9e:c1:ff:15:c6:c2:c6:4e:91:ab:97:ac:
                    05:b8:46:db:20:b1:e1:4b:0a:ca:b9:08:50:01:9a:
                    35:92:73:75:f1:e8:54:90:f9:35:19:d6:33:8a:0b:
                    92:62:7d:3b:10:5f:b6:c7:3d:a2:91:cc:a7:a4:7d:
                    c9:43:a5:1e:cf:28:cb:d3:2e:29:48:0b:1b:ec:d0:
                    73:ca:13:37:ae:1b:6b:98:a2:84:0b:27:81:11:7d:
                    f8:12:c6:b6:ef:3d:eb:85:79:cb:53:a8:7a:10:21:
                    41:9b:15:de:44:af:38:7d:f1:20:21:1a:48:2b:a6:
                    a9:c4:97:90:5e:17:54:2f:9d:fb:f3:27:25:e0:0c:
                    95:d9:a7:72:a7:e8:91:70:6a:ff:5c:a7:85:a8:d3:
                    b9:90:39:35:2d:05:02:9e:ef:00:bd:86:a1:41:b8:
                    ff:37:2d:54:84:e1:80:6d:99:aa:e7:8c:97:4d:59:
                    fb:70:6b:c4:06:a1:01:44:50:67:3f:6b:26:05:3b:
                    88:69:d8:42:9b:c2:df:e2:a5:df:d1:b4:9d:9e:46:
                    57:0a:13:34:aa:02:56:cd:1a:c0:fa:6d:aa:8b:14:
                    08:9e:b6:1d:f2:d2:1c:b3:3b:9a:46:14:71:40:60:
                    3e:dc:6d:41:e7:f0:8b:00:9e:93:79:09:a8:9b:07:
                    97:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BA:71:75:3A:D9:02:D1:F0:B5:F5:50:D9:32:26:8A:55:30:55:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d110f90-28be-3457-8e60-9861123cb715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:53:9d:dc:43:54:2e:ea:29:06:8e:74:b3:cf:a7:7b:a3:ab:
         90:44:ee:d0:e0:96:5a:65:d3:75:84:91:cd:ed:78:3a:5b:13:
         c0:09:f0:a0:c2:80:a9:a9:31:31:c8:d8:7d:ad:d8:79:63:4d:
         bc:90:c5:f9:37:f9:ae:76:e5:da:64:b0:c1:26:32:73:49:13:
         80:52:0d:a5:83:b3:f7:39:d2:e9:65:dd:f7:5a:90:31:d4:04:
         ae:0b:e7:b0:a0:92:a7:ae:62:9f:63:35:a9:37:5f:29:ee:8b:
         9e:e0:67:0c:9a:10:41:6a:a0:6b:7d:a5:f1:3c:b8:8d:dc:9e:
         7d:bb:8d:4a:db:52:01:e5:77:85:e9:78:f6:ca:eb:f1:32:7c:
         4f:56:b7:dd:ae:bc:b0:9d:d4:c7:bb:ca:e1:33:e8:e2:d1:e7:
         50:6d:dc:15:f3:a0:3d:36:3f:ef:b6:5c:24:cb:e1:2f:4e:61:
         75:f3:fb:4e:d2:12:3e:63:cf:3c:c8:f4:e5:2e:d1:d8:ae:f8:
         75:e3:f6:37:3e:8b:94:ee:a9:2b:95:58:b0:db:db:f3:3a:49:
         2c:ce:2d:aa:0d:9e:a5:ce:dd:14:09:b4:8a:d3:f4:69:4d:d2:
         d4:83:08:5e:bf:48:30:be:a4:f9:36:b0:56:7b:33:a9:b7:7a:
         f4:18:00:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 19:34:48 2025 by rpki-client