Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a37d3462-f756-3b6b-a807-22c3f937f7a5.roa
File:                     a37d3462-f756-3b6b-a807-22c3f937f7a5.roa (raw, json)
Hash identifier:          qAj0ulMpdDBbe4vgs6jgyslMkejDypQt8ikNwtDa6uY=
Subject key identifier:   C7:E1:72:7E:2D:85:92:8D:40:53:F6:66:D7:B9:24:F0:05:6A:DA:05
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5F1B36A54935793908040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a37d3462-f756-3b6b-a807-22c3f937f7a5.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:140b:c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:f1:b3:6a:54:93:57:93:90:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=99ec03fd-ac03-452e-a269-c57bc5d0d3bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:9d:92:90:b5:1d:2f:42:02:a7:11:d5:1b:
                    58:12:8d:b0:f0:c9:73:08:80:a4:c6:cf:94:6c:b1:
                    8f:82:a4:8f:7d:20:3c:ee:52:c1:46:2d:b9:24:2f:
                    44:b2:1b:26:63:09:73:fc:f9:3b:19:58:06:1a:5a:
                    b2:ec:73:cd:e5:bc:8c:98:02:e3:f5:7a:5d:9e:a3:
                    75:b3:72:d5:22:75:eb:31:8d:34:b6:3b:63:7f:33:
                    8e:47:2e:09:d2:a2:df:a4:4e:e4:76:0a:51:57:26:
                    12:0f:66:57:75:55:51:18:6e:bc:67:e0:a0:d2:d5:
                    1e:ea:2a:93:8c:28:d5:26:9f:61:5f:02:68:be:f1:
                    12:f5:9b:8b:fe:a5:62:32:8e:17:5a:39:ab:5d:2b:
                    93:a0:71:29:e1:00:65:a4:1a:a7:49:8a:47:27:4b:
                    30:eb:ff:7b:b5:fa:75:38:d0:e7:48:c8:d4:61:74:
                    6c:54:3b:7b:cf:b3:eb:0a:3e:f8:72:04:5f:6a:0a:
                    9e:0c:51:ec:34:f6:06:d4:41:0c:d0:d2:ae:20:b1:
                    90:ce:32:0b:17:43:f8:2e:b0:71:8b:a0:f0:e1:f9:
                    7c:06:14:9e:6a:5d:e7:5d:0d:2d:57:1b:ec:d2:f9:
                    b1:c3:2c:72:92:ed:37:4e:1a:58:2c:ec:01:85:6d:
                    c2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E1:72:7E:2D:85:92:8D:40:53:F6:66:D7:B9:24:F0:05:6A:DA:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a37d3462-f756-3b6b-a807-22c3f937f7a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:0c:fe:87:4a:3a:43:23:2c:98:03:aa:eb:2f:c4:b0:21:79:
         73:ed:18:44:4a:17:4b:d2:89:89:01:88:11:3b:cb:ee:35:ba:
         3e:7e:e6:03:de:ef:b9:34:3c:cf:6b:7c:1f:58:87:b2:c9:4c:
         a5:9b:96:4a:e4:06:9e:6a:b4:b6:b3:d1:95:0b:90:4b:e4:6c:
         4c:01:e5:d2:4f:45:b3:63:89:f6:2c:50:63:6f:22:77:39:f6:
         61:22:1c:8c:7a:73:dd:db:a2:cc:9e:1e:ab:37:a9:3d:3d:81:
         af:b7:c5:e7:87:74:42:56:03:37:7c:a9:dd:73:e6:8d:3d:65:
         2e:89:77:e4:b1:4d:0e:82:e3:7c:78:bf:0f:58:b0:bc:e3:69:
         13:90:56:b0:26:0c:c3:67:1d:37:dd:17:a9:79:52:88:1e:f8:
         8a:8f:73:e4:c2:66:fd:66:15:dc:e2:39:b1:50:a9:30:49:0d:
         a2:a7:9c:d4:3f:0e:1a:0c:65:eb:63:d8:a3:49:e2:cf:3b:37:
         88:e2:5c:1a:1a:75:b2:4b:8a:3d:89:5b:a9:5e:a5:06:03:ba:
         7b:1d:42:5a:aa:34:d9:c5:4a:a8:5a:ce:6c:dd:f7:3f:e8:4b:
         2a:52:ea:79:6e:06:f3:77:25:9a:1b:95:f5:38:7d:d8:72:c6:
         d7:ff:d1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:31:41 2025 by rpki-client