Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a54dad5d-42c0-379e-87a2-bf06f3eb7413.roa
File:                     a54dad5d-42c0-379e-87a2-bf06f3eb7413.roa (raw, json)
Hash identifier:          yxlsQO2PW//MVyAyWPwrL0CxO/psFNvvJD8lF/yOpdg=
Subject key identifier:   D9:F1:B4:9B:EE:46:52:83:14:EF:1F:14:1C:BB:3E:1B:DC:FA:B0:78
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5F4DA9844AC45CE637400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a54dad5d-42c0-379e-87a2-bf06f3eb7413.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:141c:1800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:f4:da:98:44:ac:45:ce:63:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=68d22375-5c7a-4801-aaab-1f9012570b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ce:b7:51:50:81:37:68:b1:fc:43:dd:52:64:
                    0f:b4:10:bc:f6:fc:dc:0f:70:82:98:92:0e:1c:1f:
                    c3:d6:88:c2:0b:b9:b7:6e:96:65:d5:83:ac:d1:8b:
                    31:51:dd:e5:4e:a6:36:39:45:c2:2e:1e:8a:40:c5:
                    b1:c0:99:20:41:bb:b8:90:18:61:86:54:d6:4b:45:
                    20:03:64:bb:d9:25:a5:26:46:05:62:18:53:38:9d:
                    2d:83:58:80:52:bb:a2:7a:a0:01:d2:86:ce:99:5e:
                    65:83:dd:61:0d:87:e1:b5:c6:71:44:e0:51:02:4d:
                    6d:f0:dd:50:86:9e:a9:29:ae:9f:f0:24:74:92:95:
                    cc:a0:d1:70:2d:29:e0:9a:10:3c:cb:a2:9c:0d:51:
                    6f:61:71:bf:33:7e:de:6e:d3:55:b9:15:a0:ba:78:
                    bb:56:a9:30:1f:39:96:cf:96:0d:fd:53:8c:b3:ca:
                    e1:1d:ec:09:e7:ba:74:41:c0:cd:98:01:63:e2:be:
                    b6:f4:8c:83:e1:9d:95:a0:67:ba:72:4b:ee:96:90:
                    c0:9e:87:97:b1:23:7e:09:f6:72:37:66:e6:aa:17:
                    0e:90:f8:82:d0:33:d1:6e:f2:d8:49:42:d4:75:10:
                    ef:ff:81:22:1b:28:54:ac:26:2c:2e:83:d8:51:c6:
                    a7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F1:B4:9B:EE:46:52:83:14:EF:1F:14:1C:BB:3E:1B:DC:FA:B0:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a54dad5d-42c0-379e-87a2-bf06f3eb7413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141c:1800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:1d:f4:5b:2e:e4:c7:b9:0f:85:08:e5:8b:be:75:c7:4a:49:
         06:e5:ee:3e:8b:19:17:01:0b:b1:1e:81:67:58:3c:5e:58:d0:
         9d:2b:52:ba:7d:09:08:5f:d6:ed:d2:8c:c2:bd:e6:7f:70:51:
         14:e4:8e:62:1a:62:49:64:4d:16:7d:79:a5:76:0f:d5:2a:26:
         5c:f5:5c:89:d9:07:52:9d:7c:db:30:63:81:93:f9:d0:1e:a4:
         b4:67:71:61:86:a0:3d:67:27:75:0d:60:87:fc:26:15:8e:9e:
         b7:bc:62:1d:b7:08:9c:2b:93:95:b7:45:aa:a4:62:c3:02:1e:
         f6:f7:2e:5e:1f:67:f0:d2:37:70:78:b6:f9:00:77:c7:31:cd:
         40:ed:df:10:26:a7:1d:3c:e4:d7:ec:39:a0:d4:fd:0c:1e:de:
         42:9a:86:e5:f2:9d:60:90:4d:83:c9:dd:87:f5:5c:48:bd:b2:
         d0:16:1c:cf:72:97:2d:2f:97:8e:e5:36:7f:4b:1b:2d:71:41:
         95:62:2b:6f:44:8a:fe:53:f2:f2:58:34:08:e0:2c:1a:14:3b:
         aa:dd:4a:e2:1c:6e:77:97:10:1f:22:62:51:0c:39:9c:56:af:
         fe:06:7f:0f:57:30:7e:fd:05:67:7f:d2:ad:38:fb:b0:de:40:
         ae:06:5e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:33:41 2025 by rpki-client