Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60470b9f-d4de-36f5-ae92-7133da86cc9a.roa
File:                     60470b9f-d4de-36f5-ae92-7133da86cc9a.roa (raw, json)
Hash identifier:          r7z0FrKWcvNwddiqyn16ECPHYUjrSG5BB1qroXphWv4=
Subject key identifier:   6B:F9:61:2B:FC:EA:35:B6:A4:8E:98:BF:52:40:BA:D9:37:46:DA:13
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B4D11E6C62D28A156FF92E8C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60470b9f-d4de-36f5-ae92-7133da86cc9a.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     9498
IP address blocks:        2600:140f:3a00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:e6:c6:2d:28:a1:56:ff:92:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=8318ef2c-991d-483a-bc4d-a9d3856507b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f7:e7:66:1e:ec:c7:b4:37:ce:cb:6c:0a:fe:
                    be:3e:00:eb:ff:96:d8:e0:d9:11:d2:6e:8c:48:90:
                    ec:65:1c:de:48:3d:81:a4:0f:c8:98:ea:a2:1e:df:
                    a1:00:db:07:2f:e8:f2:c0:f2:91:31:3d:93:84:f0:
                    64:3d:c8:2c:91:1e:72:b6:73:ef:f7:c6:14:4b:ee:
                    bb:26:68:7a:9f:c2:e5:54:e3:f2:65:7a:c8:e8:c9:
                    45:e5:08:e3:d6:0c:1a:fd:68:03:2a:59:a8:0a:69:
                    44:78:e3:18:0e:c6:a0:ae:ab:57:0a:9d:f4:f9:f5:
                    b3:37:07:6c:d1:9b:0c:20:15:d6:26:19:31:2c:da:
                    d0:ac:ad:e7:81:70:c8:51:5d:f5:94:2e:2e:09:f0:
                    c6:ae:56:1c:81:da:53:8c:0e:dd:6d:a0:25:1c:7f:
                    c5:3d:53:4e:73:85:50:a1:97:72:19:50:5d:47:53:
                    ed:d8:1e:a8:85:1c:82:30:9b:0b:70:c4:61:b2:a9:
                    43:73:5e:86:e2:2e:37:38:cb:42:e9:5d:1d:82:68:
                    ae:8c:7a:74:c4:1c:7f:3b:ed:f0:e6:21:e5:d0:cc:
                    de:64:b9:9d:a8:07:14:c2:46:21:1b:98:4a:2b:3c:
                    4c:5b:77:a0:72:3e:9e:26:e5:b0:9d:de:60:aa:75:
                    cf:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F9:61:2B:FC:EA:35:B6:A4:8E:98:BF:52:40:BA:D9:37:46:DA:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60470b9f-d4de-36f5-ae92-7133da86cc9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:3a00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:bc:14:31:1a:a7:1e:87:2e:0a:59:69:a5:c6:e6:3a:1a:c4:
         70:37:24:3a:ff:d1:d7:8c:b4:5f:fd:d0:09:b4:a6:6e:f8:4c:
         22:27:07:af:bc:2c:d4:58:cc:f8:ba:e4:6b:1e:33:ba:e9:c0:
         50:23:e9:10:d7:8a:dc:84:2e:d6:6d:b6:75:0d:eb:c2:68:64:
         aa:07:36:c9:06:48:ac:1d:b1:69:47:aa:df:2f:4b:85:bf:72:
         96:89:66:90:94:a6:37:4a:b7:9c:82:63:cb:a6:b1:68:33:27:
         c5:aa:02:d8:58:0b:f8:4e:5e:e4:bf:07:98:c0:f7:7f:12:55:
         a7:e2:cb:7c:b4:5a:90:a3:65:cb:fe:88:5a:41:12:9a:15:d1:
         c5:7b:3b:f7:fc:68:18:01:dc:46:3c:60:49:1c:d8:d8:f0:58:
         02:3d:8b:60:74:af:66:93:af:73:c5:b8:87:31:cf:2f:65:a6:
         83:02:a9:e1:23:a2:6e:98:c2:8a:5c:05:8d:44:f9:c7:5c:bc:
         01:74:3a:28:b4:09:22:53:e5:e5:18:4c:f2:1a:50:37:4f:a6:
         05:5d:11:76:2c:60:a2:3b:41:83:ea:63:a0:ba:e6:7d:2e:75:
         81:21:45:18:b7:d4:09:5a:3f:3f:91:83:2e:2c:2d:e8:22:8b:
         99:c3:69:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 04:41:12 2025 by rpki-client