Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6ceabaa-8948-3b30-881d-ca93fdc22ea0.roa
File:                     e6ceabaa-8948-3b30-881d-ca93fdc22ea0.roa (raw, json)
Hash identifier:          KT0nJkqv7v/Ffb9bC2DArpxmkcb2q8TkZSv6+QC2yw0=
Subject key identifier:   3D:B2:89:8D:C9:41:6B:48:02:11:C0:50:F3:67:D7:47:3F:D1:B2:98
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6C55E7BC8098D61BA65A8280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6ceabaa-8948-3b30-881d-ca93fdc22ea0.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     24203
IP address blocks:        2600:1417:3000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:e7:bc:80:98:d6:1b:a6:5a:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=31d725f5-f275-47c0-93ad-a2310fff37d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:d5:4c:b6:a9:0a:c3:50:56:14:de:da:db:
                    b7:ed:d1:36:6f:5c:d4:1a:06:bd:89:67:3d:4a:9a:
                    dd:e4:14:d9:76:83:8b:19:dd:47:54:3a:44:8f:d7:
                    3f:3e:c7:08:70:e8:cc:2c:b8:29:0b:62:f3:b6:77:
                    6f:02:52:23:48:5f:43:42:90:77:bd:f1:0e:57:8d:
                    8c:3c:96:ef:cb:f4:0b:26:f4:1e:e0:09:5c:77:c5:
                    75:aa:e8:67:ba:79:7a:c6:9f:70:a1:58:f0:1c:c8:
                    eb:61:80:ee:5a:f3:29:24:0f:33:1f:e9:4f:9b:f3:
                    03:27:08:27:b4:c1:79:8f:9f:a6:d1:36:66:8b:df:
                    fb:d7:f4:ad:01:3a:c3:bb:aa:20:df:96:91:99:f5:
                    8b:b9:e8:5b:7b:dd:6e:9f:ae:02:90:44:c6:b7:ee:
                    aa:d4:01:03:9d:76:49:07:b5:03:df:35:ae:09:46:
                    4e:dd:6b:10:01:12:15:00:08:eb:3d:44:fb:75:06:
                    01:a6:18:0c:68:ee:87:7f:d2:56:fb:0d:a6:a7:8c:
                    8c:32:c8:0e:e1:8b:05:a8:30:8b:2f:23:88:61:2c:
                    c3:bb:ec:00:b9:ad:99:1c:c8:bc:ed:58:ba:da:66:
                    15:93:74:9b:1f:a1:90:46:3f:76:cc:e2:bb:f0:5f:
                    da:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B2:89:8D:C9:41:6B:48:02:11:C0:50:F3:67:D7:47:3F:D1:B2:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6ceabaa-8948-3b30-881d-ca93fdc22ea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:3000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e0:bc:e0:5a:3b:08:c1:96:e1:80:4d:c3:7c:85:cb:14:e7:
         6c:61:4b:56:66:68:b4:ba:2a:31:cd:c8:30:16:fa:f5:fd:14:
         7d:2b:21:0f:ac:00:e6:ea:53:0b:49:aa:f9:68:9b:40:48:27:
         48:f6:2b:d0:de:83:1e:26:59:94:72:9a:c2:10:4e:59:64:29:
         70:c1:09:56:ce:4d:d0:5a:8c:41:93:86:58:bc:e7:bb:d6:76:
         48:4c:47:a1:b3:a9:b2:eb:74:96:5e:70:80:24:a2:03:95:5f:
         b0:73:75:fb:fa:6d:3d:af:7e:d6:8f:07:5a:c6:74:36:8e:51:
         91:af:c2:16:b4:df:57:f1:ed:a9:81:ce:8c:63:37:e7:db:a8:
         f8:1b:85:be:0e:14:df:e2:06:63:5b:1c:54:f7:ff:49:fb:2e:
         6f:2b:ba:58:2b:25:06:1f:08:bc:b3:3e:69:f9:5b:1a:01:f2:
         9f:8e:92:7d:5c:cd:28:94:19:5b:60:99:95:f8:f9:0f:47:38:
         fb:aa:51:c1:9f:50:e5:0c:bf:d3:3e:80:d7:ee:eb:a4:16:09:
         5b:c5:2e:86:9f:b7:4e:9a:57:f4:f9:4f:91:6c:38:32:53:5f:
         7d:57:a3:f4:a9:f6:39:e2:86:29:95:a5:e1:d0:45:c8:33:f8:
         2b:1c:b5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:48:03 2025 by rpki-client