Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf13e06d-8edb-3633-b421-010bb02f08ad.roa
File:                     bf13e06d-8edb-3633-b421-010bb02f08ad.roa (raw, json)
Hash identifier:          kYf0mceEh7RKZ6/RR0dSZo5uTTaTc7ptKAaQr4xT9bA=
Subject key identifier:   D9:43:05:89:D5:8B:42:21:F1:90:A2:68:DE:6C:F4:25:15:F2:6E:96
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A16F36C9BC72DF605C5C526C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf13e06d-8edb-3633-b421-010bb02f08ad.roa
Signing time:             Thu 05 Jun 2025 10:59:01 +0000
ROA not before:           Thu 05 Jun 2025 10:59:01 +0000
ROA not after:            Wed 03 Sep 2025 10:59:01 +0000
asID:                     20940
IP address blocks:        2600:1405:401::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:16:f3:6c:9b:c7:2d:f6:05:c5:c5:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  5 10:59:01 2025 GMT
            Not After : Sep  3 10:59:01 2025 GMT
        Subject: CN=ac96316e-e293-42e8-bee0-f65c39f03691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:97:e4:41:20:31:b3:ee:a2:4f:65:d4:95:ea:
                    2b:cf:ad:29:79:33:a2:c2:c9:e7:93:c6:91:ec:e1:
                    71:0c:95:f5:2a:1d:4d:49:76:fc:d0:03:81:ae:c6:
                    07:7a:b3:47:76:5b:a4:46:96:69:79:bb:c7:6a:c2:
                    99:b2:48:78:70:47:b4:4d:8c:8f:6c:0a:3d:91:71:
                    52:1f:bc:40:56:80:c0:e5:98:3a:b1:64:c8:b5:78:
                    d5:b6:31:9e:b2:b7:0d:28:db:db:9d:d9:63:ca:f7:
                    5c:74:e7:67:87:fe:fe:a7:69:d4:4d:d0:71:6b:d0:
                    66:88:af:c8:77:74:c7:b9:f9:ec:54:64:55:3e:af:
                    5e:4f:e1:ef:c0:57:eb:8b:39:50:8f:a4:19:ee:08:
                    61:f0:14:4d:51:1b:c1:0a:04:a4:58:3a:30:0b:87:
                    6a:0a:75:f6:b3:62:29:50:93:c9:2d:5c:06:d0:8f:
                    1e:73:35:c8:7e:21:de:2d:9a:0a:d5:5f:90:c1:83:
                    b8:2f:33:21:24:29:d0:4e:af:6b:1e:27:0e:52:12:
                    57:d7:67:b4:10:8e:d2:1c:eb:9e:8e:af:cd:81:22:
                    24:6e:55:30:71:e7:85:48:cc:ed:1a:7b:28:90:2a:
                    9e:d9:cf:ee:e4:69:21:49:07:41:9c:56:b2:64:7a:
                    7b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:43:05:89:D5:8B:42:21:F1:90:A2:68:DE:6C:F4:25:15:F2:6E:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf13e06d-8edb-3633-b421-010bb02f08ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:401::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:d7:7b:49:a3:bb:51:2c:c6:59:09:29:4f:8d:3a:ca:97:15:
         21:ef:cb:1e:07:f8:9f:af:a5:f3:b7:2b:69:7b:72:3c:6f:13:
         51:43:13:95:a2:82:77:91:f4:3b:31:06:2a:ed:af:ef:1b:ee:
         70:72:9f:ed:83:69:2d:02:47:f7:3e:7a:e3:b6:6a:bc:88:e3:
         68:26:f1:b5:f4:4d:6c:92:35:4d:86:66:e3:ec:3b:a8:81:7e:
         4e:25:3f:97:ac:74:bc:76:5f:a6:54:74:a8:07:f8:cf:16:33:
         b5:0c:3f:cb:fb:67:f2:06:17:40:2e:ea:89:41:0b:ad:6d:14:
         82:7b:d8:98:d7:23:0b:1e:cb:a2:08:05:3a:4a:e4:00:07:16:
         3b:cc:34:ac:ed:6d:b0:de:34:a3:cc:43:13:39:57:de:86:10:
         45:4b:47:62:a4:2f:16:1b:dc:2a:99:8b:57:71:ee:91:38:bc:
         8a:85:05:c0:c4:d7:54:69:d2:f6:16:e2:a5:68:30:4c:4e:04:
         e2:96:40:21:73:40:5d:94:5e:3a:ef:ef:b6:d3:a4:7a:f4:14:
         f0:8a:31:45:6e:b3:d8:73:c3:7b:6b:70:3f:49:ac:1d:90:81:
         a1:d5:47:5c:91:58:aa:da:67:be:68:b7:69:29:f7:7b:0b:d9:
         1b:f3:d6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:13:09 2025 by rpki-client