Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf210f25-dc54-37eb-bdc1-a5858c6263f3.roa
File:                     cf210f25-dc54-37eb-bdc1-a5858c6263f3.roa (raw, json)
Hash identifier:          OfqxnNYYWj7oezlkli7NkpUatEn85cJVfiVVcrMHWh0=
Subject key identifier:   8D:D9:4B:26:7F:44:43:A9:51:8A:6E:25:00:DE:00:EF:72:CA:D9:60
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5F6972302674DB10B4B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf210f25-dc54-37eb-bdc1-a5858c6263f3.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:1403:d400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:f6:97:23:02:67:4d:b1:0b:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=a7c974ed-17dd-4f6a-95b3-41cb1127318f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:70:6a:31:b1:59:11:7c:07:73:d9:70:07:37:
                    01:ad:98:c7:d0:dc:95:36:db:46:03:4d:4c:84:64:
                    4b:16:1e:7a:f2:39:95:f8:4e:c9:fb:3c:df:14:43:
                    8c:07:ee:1c:6c:b7:c6:2a:18:19:2b:d8:ff:20:88:
                    a6:a1:89:2a:a5:8c:94:2c:c9:97:66:88:c3:81:70:
                    09:a1:16:f8:e2:9b:9a:e2:f3:34:12:6b:09:ff:de:
                    ea:ba:d5:01:66:d4:66:64:04:31:ff:14:a6:f6:6e:
                    e0:bb:68:3f:e7:aa:ad:8f:23:71:69:4b:cb:91:09:
                    38:84:54:4a:b1:c4:50:b6:70:7d:e3:0a:66:05:b3:
                    4d:4e:e3:eb:81:36:6c:0c:02:7d:ef:9b:48:c2:df:
                    df:ba:4d:3b:9d:89:06:09:13:a1:33:f3:e5:7e:ed:
                    19:6f:39:42:f8:6e:45:e5:b2:1b:71:21:07:c5:51:
                    f1:26:10:9c:f5:bf:30:c1:a5:d1:dd:da:83:3e:9c:
                    51:69:b1:71:f1:b8:28:f9:0c:ca:fa:fd:9a:75:5f:
                    ad:8f:6b:bb:78:45:b8:12:dd:76:b7:ff:26:4a:64:
                    6e:56:13:5b:fe:ac:df:54:6e:c4:7a:bb:5e:1e:2f:
                    2c:7a:88:08:2c:6d:f7:56:fa:66:bd:ce:74:3e:2b:
                    d7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D9:4B:26:7F:44:43:A9:51:8A:6E:25:00:DE:00:EF:72:CA:D9:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf210f25-dc54-37eb-bdc1-a5858c6263f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1403:d400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:55:f0:c9:6d:bf:f3:a4:ad:b9:d7:a6:4e:e8:d2:3a:e2:f9:
         f4:d2:20:b1:b6:26:7b:c4:aa:2f:81:5f:7c:98:42:bc:7f:eb:
         a5:33:d8:99:32:39:53:57:03:d3:fe:51:57:d8:9a:00:ee:59:
         ad:57:86:3b:50:f3:d3:8b:b4:80:83:d4:38:9a:31:4a:63:11:
         25:ba:b5:2f:a7:b8:e9:6c:e9:2e:8e:72:19:92:6a:92:e3:4e:
         10:85:81:3c:5b:9d:ee:e8:29:fa:89:e2:88:a3:66:02:19:c3:
         a0:fc:fc:ac:ae:e4:5d:26:84:96:b7:57:97:23:b5:7e:24:8a:
         9b:15:05:af:5d:b1:70:4f:62:2c:09:06:28:9d:1c:50:c7:07:
         9c:fa:5e:52:da:d4:e5:57:ec:e0:a8:bd:74:c2:09:a1:39:48:
         05:99:77:55:ba:ea:3b:b7:07:fc:fd:7d:5d:96:de:fd:6f:4b:
         c7:95:30:4c:63:35:c5:94:4a:1a:9e:ca:91:d5:c9:3e:91:c4:
         56:d9:81:b1:0e:84:4c:6f:e2:37:4c:fc:5e:3f:41:b8:97:40:
         d4:a6:22:43:39:e5:32:fb:8e:14:c5:e0:1e:d1:76:8c:93:8a:
         c2:22:98:c9:a8:b9:69:00:97:7a:0a:7f:ae:81:df:98:e2:ad:
         a7:b5:b0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:46:13 2025 by rpki-client