Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a011f064-8735-3fec-8335-2c245b916a73.roa
File:                     a011f064-8735-3fec-8335-2c245b916a73.roa (raw, json)
Hash identifier:          rfU5cWfX2ClCIT8SiJ+2aHBmHGmp1XsRij7rwuGMR1s=
Subject key identifier:   FC:6A:58:4C:4B:2F:DB:1F:A1:2F:CA:B5:E0:5F:0B:75:DC:C1:C2:47
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A68263EF0241A51ACD42FBC30
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a011f064-8735-3fec-8335-2c245b916a73.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     20940
IP address blocks:        2600:1488:c010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:3e:f0:24:1a:51:ac:d4:2f:bc:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=9034e472-26dd-443d-bf51-af6dcd868279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:73:9a:03:d6:74:d2:f4:3e:a2:a2:07:dc:73:
                    a5:03:d2:b5:5a:ea:5a:40:c6:ff:10:20:81:e1:15:
                    0f:98:41:06:c6:f2:4c:3a:b1:b7:ef:ea:84:d3:1a:
                    6c:03:25:dc:26:1b:59:7b:3b:b7:2a:c1:84:77:e9:
                    1b:22:e5:a9:98:b6:db:b7:ff:cb:81:5c:67:73:87:
                    bc:fb:ee:bd:0c:3e:2e:4f:ec:2e:d9:6a:c8:59:5a:
                    d6:b3:e4:91:88:4f:14:3e:87:d3:c3:59:8c:16:79:
                    34:29:30:13:a4:a5:d9:6d:85:7a:78:90:73:fb:38:
                    b8:7c:9b:26:6e:08:2c:c5:73:90:d1:c9:7c:80:e1:
                    37:4c:e2:d0:75:f3:76:48:73:95:36:73:8f:ea:63:
                    e0:d3:58:6e:c0:7b:71:c4:b4:7f:d1:16:67:e5:4d:
                    d2:a5:84:26:96:67:76:3c:a3:6d:bc:c9:18:5a:f6:
                    2b:53:cc:a1:7d:89:20:14:5f:88:f4:3c:da:8f:a6:
                    45:99:30:06:02:d6:88:a1:02:aa:a6:f9:1c:f5:99:
                    f2:0a:66:59:23:c0:3c:94:ed:42:32:39:5c:d8:b2:
                    a8:75:2a:66:ed:1d:20:9b:49:2a:c4:95:76:8c:1a:
                    3f:81:2e:9d:a9:ca:ff:e8:13:49:61:de:ac:2f:fc:
                    03:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6A:58:4C:4B:2F:DB:1F:A1:2F:CA:B5:E0:5F:0B:75:DC:C1:C2:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a011f064-8735-3fec-8335-2c245b916a73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:c010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:fa:2c:eb:08:9c:6d:44:b7:26:f3:11:5a:6f:83:5b:75:ac:
         b2:88:14:4a:b7:39:57:4d:cf:24:86:87:05:f4:10:6b:e1:df:
         87:51:0e:ad:f5:11:4c:26:70:68:fd:62:10:8b:34:43:f9:2c:
         0b:d0:d4:27:63:41:c3:4f:cd:37:11:ae:f4:d5:09:12:11:d0:
         cf:8e:3e:6c:0f:34:71:fc:f2:6a:4e:ea:5e:80:2c:c8:f8:7c:
         42:d5:98:0f:d7:02:51:83:ec:9a:ec:6e:1a:9d:17:d8:4c:38:
         a5:0b:44:a1:bd:22:ab:e8:85:55:d5:e2:7c:53:99:a2:9e:f4:
         bb:b1:10:a5:07:08:fe:09:65:ef:5e:c2:e8:57:b3:38:3e:07:
         c3:42:26:f4:f5:b0:10:77:5b:64:f3:b0:32:15:36:ea:f3:b8:
         b5:52:70:b7:6a:0b:cc:66:0d:09:3c:d3:41:99:8b:7b:e7:cb:
         df:67:b9:46:0d:17:3a:ea:27:0d:41:1c:4e:d7:ba:b5:21:9f:
         22:fe:c9:35:03:7f:91:f8:2a:b7:ee:7f:c3:18:67:92:e7:f5:
         9b:99:f5:e4:d4:35:49:1d:3d:de:71:4d:32:ac:be:2c:1c:0e:
         ca:51:d9:c1:61:e3:7c:9b:90:ea:7c:8a:21:a5:33:da:15:63:
         e6:e4:35:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:06:29 2025 by rpki-client