Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d26c3804-e085-3629-922f-ac44a211053f.roa
File:                     d26c3804-e085-3629-922f-ac44a211053f.roa (raw, json)
Hash identifier:          1SgXB9/FXKh0MwvdJi5ni0IeesE7jAlOFsGZHjTxWR0=
Subject key identifier:   5B:0C:F0:1E:A3:E8:8F:23:73:6D:05:C8:15:6F:12:7F:BF:5D:B3:64
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A68260DB193DE82820A77FEB2
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d26c3804-e085-3629-922f-ac44a211053f.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     20940
IP address blocks:        2600:1488:5fc4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:0d:b1:93:de:82:82:0a:77:fe:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=0308b22a-0363-4de8-b34c-242ef33422af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a6:2e:69:43:40:1f:9a:4f:74:f1:48:bf:0c:
                    11:88:5c:2a:14:25:e0:fe:c6:c4:cc:ed:e1:e4:2e:
                    fb:61:e8:c5:4b:a2:c4:c6:81:03:e7:d6:46:ae:7d:
                    42:ad:d1:8c:c2:0f:1f:8f:7c:f4:be:c6:80:a0:2c:
                    bd:60:74:27:2b:ae:52:f7:ee:2b:23:ca:37:90:81:
                    63:6e:86:8e:34:27:3d:13:d0:db:ce:4a:9c:2f:56:
                    95:69:b3:05:5d:e5:0f:d6:51:2f:ee:35:83:7e:a6:
                    88:26:14:f3:eb:ea:5d:4c:1f:43:80:9c:45:96:64:
                    2f:45:b5:8f:ab:b7:76:6b:f8:27:c1:dc:c5:2c:d3:
                    de:86:b7:cb:f5:9b:ee:22:cb:82:41:4f:ec:ef:8e:
                    a7:20:4a:06:0b:c6:b6:07:1f:83:a8:09:16:32:e2:
                    e8:7f:e7:5c:20:66:dd:01:96:4c:71:c5:fa:9f:b4:
                    24:af:78:3f:3b:33:26:82:40:bd:08:45:41:b4:5d:
                    98:09:f3:33:46:6e:b2:3b:b6:c4:ba:04:a7:d9:49:
                    58:98:72:b3:72:1c:5b:21:b4:40:ec:66:52:1d:9b:
                    c9:49:f3:41:1f:0d:26:8c:34:06:23:14:9c:4b:d5:
                    6b:d0:4c:f0:15:59:ab:3c:3e:fe:c6:0b:a2:a9:53:
                    80:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0C:F0:1E:A3:E8:8F:23:73:6D:05:C8:15:6F:12:7F:BF:5D:B3:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d26c3804-e085-3629-922f-ac44a211053f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:5fc4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ee:24:92:e2:f4:aa:ad:5e:88:c5:33:ba:fb:e7:3e:17:d2:
         ed:fd:cf:c5:37:0f:3d:9d:9d:f1:e5:71:aa:c9:85:1c:63:5e:
         78:45:9c:e0:86:37:d9:b1:cd:db:ad:28:8d:55:72:78:1d:9b:
         08:5c:bc:de:79:40:ff:d3:92:3b:95:90:b8:12:54:02:93:dc:
         e3:fc:44:af:ed:2b:45:4b:cf:15:cc:80:cb:20:ea:9f:42:a3:
         08:93:20:98:b6:74:ed:ca:4e:47:4a:8f:c8:9b:50:af:50:68:
         92:e4:51:79:77:43:3d:17:26:d1:f9:dc:2e:3a:9b:22:4b:60:
         7e:19:b9:96:b6:f5:0e:25:e9:41:10:e9:24:cd:17:83:5a:94:
         c9:e1:13:75:13:e2:87:e0:6e:ec:07:88:26:5f:55:ce:62:1e:
         1d:56:21:a1:34:c6:fb:a6:c6:55:de:f3:55:91:fb:f0:24:f7:
         4e:45:02:7e:85:eb:c0:4d:ed:df:38:8e:89:1f:38:f6:c6:a7:
         cb:3f:1d:da:a3:56:fd:5e:70:4f:44:bb:a8:34:b2:dd:64:5f:
         0f:bd:b4:24:06:b4:dd:2f:66:11:e7:06:0f:4a:ad:d3:b5:a8:
         39:1a:08:e0:55:93:6a:4d:df:2d:0f:3e:1e:fb:c1:2b:e0:2c:
         1f:d2:4f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:34:59 2025 by rpki-client