Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be124edc-3475-3887-b977-89592b130bc3.roa
File:                     be124edc-3475-3887-b977-89592b130bc3.roa (raw, json)
Hash identifier:          CGPxae9FFG/ACCZlFFzBVWP0mO8BaBldjRI8NjDyiV0=
Subject key identifier:   59:25:E6:00:BE:A2:C3:39:27:8E:71:FA:2A:B1:7E:79:CD:57:78:C9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6DBB50DEE75D9B1681F2CF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be124edc-3475-3887-b977-89592b130bc3.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     52376
IP address blocks:        2600:1419:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:50:de:e7:5d:9b:16:81:f2:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=ee4f41f6-9f41-44a6-92ee-c4278dad7140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a0:dc:d9:1b:cd:50:26:e0:b3:4b:ee:19:72:
                    cd:68:e5:52:4e:24:dc:ad:66:11:b2:c5:66:c2:3a:
                    57:de:59:c8:ed:7c:4d:6a:3d:d4:0b:a8:03:9e:4b:
                    9c:55:d3:ca:c7:05:d0:7e:2a:35:b5:92:dc:03:c6:
                    8e:9c:51:73:14:ad:5b:27:ba:9a:60:b1:54:78:8b:
                    f2:4d:05:af:82:86:dc:25:cf:d2:9e:01:2e:0f:cd:
                    f1:e4:7a:95:72:a7:17:76:a1:80:ce:42:83:6d:60:
                    96:3b:cf:ec:d2:12:06:02:69:4d:62:a9:38:8e:2b:
                    e1:f0:a9:47:ae:c9:93:9c:dd:ef:37:ee:0c:ae:93:
                    78:fd:7d:f9:66:33:9f:b4:7a:34:db:df:b9:db:70:
                    75:10:c7:c3:c9:5a:d2:b1:52:0f:e7:19:48:f9:5b:
                    2e:e4:ca:2c:72:d1:11:ce:d5:cb:21:81:f0:40:b0:
                    47:12:61:66:e4:dc:81:cd:7b:62:c7:fc:7a:06:03:
                    1b:e8:26:84:1a:c1:76:ce:f5:4b:94:03:c6:a7:fc:
                    be:f2:30:bb:40:fa:22:c5:3a:cb:ea:a1:c5:ae:1a:
                    8d:79:87:82:c8:21:7a:83:9e:f5:56:01:41:64:6a:
                    46:09:4e:3d:73:21:8e:5d:b2:69:40:23:c7:33:50:
                    5f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:25:E6:00:BE:A2:C3:39:27:8E:71:FA:2A:B1:7E:79:CD:57:78:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be124edc-3475-3887-b977-89592b130bc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1419:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:26:5c:72:c6:cd:56:9e:f8:5c:22:e7:26:61:e4:c4:27:46:
         aa:67:a4:e5:aa:3a:5a:ae:d1:16:55:59:72:8a:0e:c3:30:ab:
         95:2b:35:fa:3d:f0:4c:3e:1a:d3:48:89:22:71:30:d1:22:28:
         a6:52:6c:4b:81:fc:37:4c:68:93:45:c6:59:49:68:4a:32:78:
         28:c9:38:27:eb:70:2c:8f:ec:2b:b3:9c:1b:b0:a0:4b:0e:35:
         81:04:da:46:09:08:75:eb:1f:e5:71:a4:d3:4f:37:29:fa:20:
         8f:38:70:a5:63:e8:26:0c:34:82:21:48:18:84:6a:48:a7:91:
         06:79:15:50:02:9e:6a:44:4d:50:2d:38:ca:2a:f1:af:d8:34:
         da:72:8d:c9:2f:f4:09:96:f0:a1:ce:58:46:06:29:70:1c:d0:
         76:10:6c:4f:4e:fb:94:eb:81:36:a8:61:79:2b:5a:27:77:56:
         4d:31:9a:85:6d:74:9f:25:90:37:8c:0c:de:88:b2:84:e0:e1:
         01:54:a9:e8:b0:c4:85:3c:31:17:34:df:5f:71:c4:65:2c:4f:
         e8:4e:c2:7c:6e:d2:de:4c:4a:a8:63:b8:db:9d:97:e3:09:34:
         e0:c1:39:7c:44:f0:ae:e7:06:d8:c3:fe:79:02:44:a3:51:0d:
         e0:ed:d0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:06:24 2025 by rpki-client