Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4f2b9af-f07f-375e-a846-eab9ddf1f280.roa
File:                     e4f2b9af-f07f-375e-a846-eab9ddf1f280.roa (raw, json)
Hash identifier:          VSt+dnlYgXbpKMq4R4ItqoeG37ZOpt4fhNRhLAw86o0=
Subject key identifier:   B2:E1:10:68:3E:05:B0:EB:E6:5C:9E:5F:3B:8D:16:7A:BE:E2:C8:45
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5F4A3E16C69D83022F980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4f2b9af-f07f-375e-a846-eab9ddf1f280.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:141b:d000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:f4:a3:e1:6c:69:d8:30:22:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=86848048-58ad-4e49-8e58-ae1f5714eea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:88:12:82:ca:52:69:89:8d:6c:6e:89:5b:
                    e4:5a:7d:69:52:1c:e8:27:56:6b:a1:d7:f9:5e:2e:
                    5b:a9:68:88:4d:f2:06:4e:87:cd:d8:89:fb:a3:90:
                    6c:7d:01:92:51:a4:a1:0b:8d:4b:e1:f8:63:86:a3:
                    c5:c7:3a:2b:3e:57:66:bc:56:fd:96:76:21:22:2f:
                    e7:31:b8:34:29:4e:7c:64:80:af:71:0a:21:8e:c4:
                    f7:ef:26:ab:5c:57:dc:aa:83:1d:ae:90:ab:5f:28:
                    22:c5:62:8f:f5:f9:40:73:61:4e:f7:2f:10:f7:31:
                    6c:45:ee:56:82:59:87:fc:1d:ad:fe:91:c7:3d:e3:
                    d2:3a:43:9e:66:20:e8:27:f0:90:6a:02:3b:60:f2:
                    f1:4f:f1:81:9d:c2:35:be:0a:df:d7:ba:e5:9f:43:
                    59:c6:1b:03:6d:73:a0:fe:fd:21:9f:6e:50:ab:c7:
                    21:3c:8c:bc:a2:0a:c9:e8:ff:00:20:29:3f:52:53:
                    92:68:9c:7b:84:66:49:d3:95:dc:5c:e5:a7:c1:8d:
                    54:d6:94:8d:b3:c5:18:a5:38:ba:75:91:c6:35:c1:
                    25:5a:76:5f:50:19:a2:a6:5a:bd:36:0b:e1:2d:b7:
                    8d:00:86:f4:5c:12:9b:d0:89:4f:50:07:2d:9a:56:
                    4b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E1:10:68:3E:05:B0:EB:E6:5C:9E:5F:3B:8D:16:7A:BE:E2:C8:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4f2b9af-f07f-375e-a846-eab9ddf1f280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:d000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:fd:7c:47:08:84:d1:ce:0b:4b:3c:71:4d:a4:a4:e6:e4:13:
         b6:75:67:30:fc:8c:b5:0e:e8:d2:eb:4b:da:28:3d:06:14:d4:
         f0:6b:06:64:26:cf:85:46:03:f2:c4:e6:0c:72:87:10:36:2f:
         79:4c:ab:3e:f6:cc:73:fd:7c:56:d1:fc:16:3f:10:06:99:b5:
         e6:40:24:83:6e:40:b6:f7:99:96:7a:43:7e:cc:a4:42:9d:4e:
         c4:7d:41:2d:f7:e4:c8:70:81:c9:97:a4:6c:4b:b2:4f:02:e5:
         75:f8:82:47:50:ae:4c:d5:dd:f5:cb:8f:ca:23:46:d2:f1:99:
         69:33:cf:8d:03:d3:7c:f2:a6:da:10:d2:e6:ea:08:74:e8:27:
         17:c3:90:fe:dc:45:ee:b6:49:d3:fa:82:15:1b:a9:c9:c4:54:
         0a:b2:9a:86:cf:4b:15:f5:f6:3d:d9:ff:93:70:8c:3d:81:c9:
         94:a3:ed:c1:f8:63:d9:07:4f:c7:bd:db:38:a1:eb:4f:2e:c2:
         42:fb:7d:4c:90:e6:27:37:6c:b4:95:9d:8d:91:1d:c9:a3:6b:
         e5:9d:6d:b6:16:e4:b9:74:35:bf:51:1d:05:e4:b1:82:f5:2a:
         c4:06:51:b5:d8:81:12:6d:0e:ea:6d:1d:1c:6b:2e:9a:51:27:
         ca:8b:af:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:26:17 2025 by rpki-client