Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8643d85-5f27-3f33-af9a-fdfd42ba84e5.roa
File:                     d8643d85-5f27-3f33-af9a-fdfd42ba84e5.roa (raw, json)
Hash identifier:          v7HXTDwIFhf/AlHoJuBljoMIvkQOr87y1CDlf5+fm2c=
Subject key identifier:   F8:75:C4:5D:DF:C7:17:98:27:7B:AD:ED:3D:E4:29:6A:21:E1:23:F3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5E60673B4F4DDFD31B0D5A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8643d85-5f27-3f33-af9a-fdfd42ba84e5.roa
Signing time:             Tue 01 Jul 2025 01:00:50 +0000
ROA not before:           Tue 01 Jul 2025 01:00:50 +0000
ROA not after:            Mon 29 Sep 2025 01:00:50 +0000
asID:                     20940
IP address blocks:        2600:141c:2800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:60:67:3b:4f:4d:df:d3:1b:0d:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 01:00:50 2025 GMT
            Not After : Sep 29 01:00:50 2025 GMT
        Subject: CN=aec65ed0-c0a5-4f23-b661-12761d3a129a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:07:8a:93:6d:7c:63:dc:c6:cd:f8:43:54:9f:
                    69:38:67:f5:26:f0:ff:73:f4:1f:02:93:a2:7c:ce:
                    42:12:7c:38:9e:95:00:53:65:90:ff:6c:3a:24:53:
                    48:cd:40:a7:2a:f4:a1:cb:f6:c2:14:c2:37:08:0a:
                    b9:8a:b5:29:a5:91:d8:8a:4a:d1:14:97:f2:6d:18:
                    ea:e3:64:d1:3a:ce:05:2d:3d:11:85:df:b5:70:ee:
                    38:d9:e7:65:19:9f:32:f4:27:a3:72:25:f8:3c:40:
                    08:f4:47:ef:aa:bb:77:3d:2f:7e:d4:c3:47:ec:59:
                    1e:da:70:d4:81:f0:cd:3d:71:b4:6b:ba:27:06:cc:
                    37:b4:17:3c:2c:07:2e:86:ee:6e:97:ce:ad:da:39:
                    0b:14:3f:fe:ec:67:dc:f0:b3:b8:74:98:3b:71:09:
                    c5:16:a2:f7:06:26:11:ed:c3:0d:59:f5:c4:0b:1a:
                    d1:e8:fa:cf:cb:61:7f:ea:26:aa:b0:a4:6f:a4:5c:
                    fc:17:f2:68:fe:19:cf:cd:d4:88:7f:91:32:71:ef:
                    fd:33:b0:79:e6:4c:6b:d1:20:a2:e2:13:ff:3d:3f:
                    8e:ed:78:97:f9:3b:58:70:02:c5:c5:fc:69:69:75:
                    b1:f9:8e:78:3a:ba:66:5e:7b:18:c4:72:db:8b:47:
                    3a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:75:C4:5D:DF:C7:17:98:27:7B:AD:ED:3D:E4:29:6A:21:E1:23:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8643d85-5f27-3f33-af9a-fdfd42ba84e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141c:2800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:90:37:ba:df:2e:01:52:1b:f7:e1:e7:61:6e:fd:dc:34:db:
         cb:ac:4f:d0:26:5a:8d:ba:81:cd:ab:33:3f:d8:a6:62:28:c1:
         ba:78:a3:f3:35:2a:b6:6e:15:33:b6:2f:52:a9:5d:59:32:60:
         0f:b1:00:c6:07:f8:0a:fc:2d:f7:d8:98:5c:14:ef:53:6d:52:
         34:b0:15:4d:9b:d0:73:13:aa:6c:c1:f2:cd:96:b6:b5:9f:5f:
         73:dc:08:83:f4:a4:e7:f1:f7:43:c4:ab:97:c5:ed:3e:d6:ba:
         7b:f7:ce:c2:72:d7:84:38:c5:ee:11:a7:57:50:96:f3:f4:11:
         a5:b1:8d:40:f2:de:9b:0d:6e:f7:6d:f7:da:85:94:a7:5d:27:
         f5:23:11:e2:8d:cb:d3:29:a6:71:00:81:2b:b5:4c:6a:ea:0d:
         db:4a:b8:1e:24:33:9c:8d:18:11:f6:21:c5:1b:ce:ed:11:98:
         a0:44:b2:3c:95:b4:6e:2b:40:8a:ad:a0:17:ce:79:8c:e9:ad:
         46:3c:23:16:0f:cd:e3:80:38:57:56:7a:50:19:4e:99:d2:e4:
         ef:99:d6:ee:3c:c1:7f:6e:e5:0e:19:04:d1:b1:c5:cc:cc:51:
         ee:85:bc:1c:2c:ce:87:5a:55:cd:f6:ad:c7:fc:3a:67:00:e7:
         6e:15:46:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:25:35 2025 by rpki-client