Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0c58921-2ac7-37cc-8d52-6e36c74a64f6.roa
File:                     b0c58921-2ac7-37cc-8d52-6e36c74a64f6.roa (raw, json)
Hash identifier:          FEUvMubKfK+iem/wM7A1YhD5iGTFK3M63+kyfm6GmQs=
Subject key identifier:   68:FC:E6:CA:36:5E:3D:15:3B:A5:4C:92:52:83:0F:42:A7:8F:D8:CF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5FB15FDD7C9E1E474BFD0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0c58921-2ac7-37cc-8d52-6e36c74a64f6.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:1408:9800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:fb:15:fd:d7:c9:e1:e4:74:bf:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=07b4ee02-2213-401f-b05c-72d629e4c777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a6:12:74:af:23:ea:1c:09:c5:c6:35:32:39:
                    8a:93:45:43:03:53:8e:d1:d0:ec:94:a4:2e:47:ed:
                    0c:e7:11:5b:c3:6c:f5:7d:f7:c0:58:a3:87:b9:fb:
                    d5:78:6c:09:e5:e2:a6:80:19:a1:b0:13:41:36:f3:
                    04:02:de:47:d8:0a:d4:b3:40:b7:79:c9:0c:3d:f2:
                    13:e5:19:5a:85:ab:9c:15:62:10:a0:3f:e5:42:01:
                    68:91:4a:72:61:9f:dd:16:83:dc:10:c3:6b:a1:51:
                    88:30:f8:c8:ef:59:1c:20:f5:12:2e:ed:06:dd:d5:
                    a2:63:bf:9a:d7:91:5f:3b:3a:f4:20:ba:62:77:75:
                    81:48:af:eb:7f:5a:10:a6:53:99:3b:bf:df:1c:0a:
                    4e:bd:b5:79:fd:2d:1c:1a:c6:42:e2:dd:0c:ab:95:
                    81:ad:5a:55:47:71:f3:5a:90:2e:dd:3b:f3:17:af:
                    35:c2:99:eb:c8:f1:d6:0f:79:3c:7a:ce:6f:ee:f1:
                    63:fb:6b:e2:5d:64:1d:fe:63:ba:0f:cc:b0:87:43:
                    0b:4c:7c:56:cf:72:4a:42:36:4e:ee:51:9f:b9:7a:
                    ce:20:b7:80:8d:82:68:db:4d:91:23:6d:e6:79:64:
                    59:67:5e:82:9e:21:fd:e9:90:7e:0d:c9:6e:13:b4:
                    7b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FC:E6:CA:36:5E:3D:15:3B:A5:4C:92:52:83:0F:42:A7:8F:D8:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0c58921-2ac7-37cc-8d52-6e36c74a64f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:9800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:97:5e:fc:19:31:07:93:cf:71:db:2e:78:ea:a6:e0:02:ca:
         d2:61:7e:68:8e:25:58:84:79:de:ce:e9:6a:35:a3:0f:ce:fe:
         94:db:6b:a1:c5:0e:4e:2b:3e:e2:ce:a8:a9:13:39:95:a5:e3:
         3a:be:44:e8:e0:a3:00:6c:7d:09:d1:fb:47:e1:41:1d:02:b9:
         9e:75:88:cd:de:b6:3e:3a:8a:97:5c:9e:38:95:fd:d3:87:cc:
         93:ca:a6:f2:38:53:d1:48:2c:18:50:96:02:51:09:75:6b:9b:
         99:1e:31:76:a5:c4:cd:2e:65:cf:ae:dc:2d:79:dc:57:23:9e:
         90:0b:ef:74:bd:21:18:f1:b4:e0:27:cd:cd:f2:9a:7e:18:a9:
         72:ad:c7:82:49:dd:e8:4f:12:b2:01:c7:ba:d9:9e:75:58:df:
         60:1d:ce:bc:42:fb:f3:28:14:de:9a:3e:96:2d:d3:65:78:04:
         c2:e3:db:dc:ec:81:50:4d:df:aa:bd:5d:f3:d5:55:88:01:69:
         56:1a:69:24:45:cd:b2:93:c4:d4:ca:a5:f5:00:e5:58:86:62:
         8e:5c:31:f6:af:29:12:12:86:a1:04:00:9f:82:fb:91:48:50:
         75:fb:de:d5:b2:c4:11:1f:89:89:e8:ab:4a:32:57:90:75:af:
         ef:5d:86:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:33:38 2025 by rpki-client