Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7fbf155-86ef-344a-a744-a1b335719c37.roa
File:                     b7fbf155-86ef-344a-a744-a1b335719c37.roa (raw, json)
Hash identifier:          lFNpBvAmpLlbRdOpvAMlVZilchxrFhUMpixq0JYuYy4=
Subject key identifier:   C2:D9:86:75:CB:1F:F9:3B:21:8B:E1:BC:BA:31:56:7C:87:39:1B:91
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5FA44BD15432F048FB2D0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7fbf155-86ef-344a-a744-a1b335719c37.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:1406:b400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:fa:44:bd:15:43:2f:04:8f:b2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=1623e429-9c70-4438-9ea9-020c2c830519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:55:df:ed:8a:17:49:85:f2:36:ae:a2:79:74:
                    ed:e9:dc:76:bc:aa:28:a5:84:f2:ef:73:24:64:31:
                    d9:46:7e:65:43:ba:c4:5d:f8:7e:57:a7:b3:b7:96:
                    4c:a8:f6:8a:63:33:7e:13:ab:92:f7:53:6a:a0:ca:
                    f0:b8:61:26:d7:8a:50:21:f1:35:a3:5b:8a:a8:16:
                    c5:22:3b:0a:11:bf:b4:64:2f:63:e9:59:9b:79:d8:
                    a1:5a:e7:88:31:ae:02:cd:23:af:d4:96:32:30:f3:
                    a8:18:77:f9:2d:9e:32:ad:14:7b:44:58:94:1e:2e:
                    df:f9:69:e0:c8:81:77:c9:94:cb:c9:76:b9:49:e7:
                    b1:b5:8b:ce:eb:1a:4a:be:c9:10:b7:f5:50:4d:c1:
                    5f:c8:f3:90:54:6e:8d:73:d5:64:55:80:07:09:c1:
                    5e:58:89:fc:34:05:5f:4d:9e:d1:99:ed:30:e5:15:
                    0c:34:c2:3e:fc:17:b6:e9:7b:3f:1b:94:6c:99:34:
                    85:d4:98:98:cb:38:6d:1b:e2:70:88:70:e7:46:7f:
                    c5:75:33:91:68:6f:3d:e5:86:b7:7e:37:60:13:a6:
                    14:83:ea:85:62:26:b0:d7:1b:b4:82:bf:d1:cd:54:
                    e4:36:1b:8d:2e:bd:ff:89:b2:c6:74:74:3c:02:87:
                    b3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D9:86:75:CB:1F:F9:3B:21:8B:E1:BC:BA:31:56:7C:87:39:1B:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7fbf155-86ef-344a-a744-a1b335719c37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:b400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:75:bd:a0:2b:a9:b3:53:ae:81:55:1a:a7:8a:4e:8d:13:4d:
         88:08:87:15:02:b1:96:fa:b2:33:ee:82:2f:16:f8:d7:1f:2e:
         3e:c4:ed:4b:e5:d6:3c:fb:de:51:a3:df:a8:94:ce:60:0b:a6:
         cf:35:0f:67:3d:b7:8e:53:07:9b:62:ea:6c:df:72:1a:b9:17:
         91:b2:76:8b:ec:ee:fc:eb:77:43:d0:8a:96:2c:c3:45:45:5f:
         98:38:03:92:af:b0:ea:25:0b:cc:34:45:75:1e:1f:9c:0e:14:
         98:d5:a9:79:c8:7b:62:d9:29:b1:b1:88:fb:e6:75:d5:f5:bb:
         ca:ab:23:06:f4:a2:03:7a:59:ec:c5:7f:b9:47:0c:a5:52:44:
         7c:ee:bb:ca:97:8a:9f:dc:a5:f7:3c:4f:c7:34:51:10:8d:f2:
         61:b2:5e:e6:39:6d:3b:de:4d:2d:a7:4f:95:7d:9f:9e:56:8a:
         db:10:01:59:29:3e:3a:d2:d6:d0:d0:96:b0:1d:5d:ee:f4:ed:
         c2:87:93:c1:5d:07:49:93:07:7c:c7:b0:6a:a3:33:8c:91:e5:
         c2:49:f3:a1:de:62:e7:28:c1:6e:c5:f5:8c:e0:9b:9c:33:e5:
         b8:dd:c7:c1:f0:d6:99:38:b0:b9:9b:a3:d8:65:27:2c:cd:ca:
         a6:17:49:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:35:50 2025 by rpki-client