Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0cd10b2b-b090-3f14-996e-19a04b88a216.roa
File:                     0cd10b2b-b090-3f14-996e-19a04b88a216.roa (raw, json)
Hash identifier:          5z0LGBQn6j1e9vevjXNehZZOkdY4A9Uvxmv0h9CA6Uc=
Subject key identifier:   AF:46:67:84:C3:FE:C2:70:13:C5:2E:F3:35:E3:D1:FE:2B:6F:D6:D0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BB45D409C64058F06E59F9380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0cd10b2b-b090-3f14-996e-19a04b88a216.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     20940
IP address blocks:        2600:14a0:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:40:9c:64:05:8f:06:e5:9f:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=5c862a08-1677-4e61-b838-a49e13d50e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:82:8d:76:55:09:4c:32:ed:99:09:20:26:5f:
                    18:52:03:df:cf:0f:de:5e:91:74:a0:06:fe:31:89:
                    3e:97:db:a8:5a:53:b6:21:54:0b:dc:4e:64:01:5f:
                    ad:d2:af:09:5d:18:8c:40:cf:8b:5e:eb:97:34:7f:
                    62:32:d7:7e:51:17:3c:74:59:40:0f:e7:7d:13:a4:
                    c8:c8:26:51:9e:63:23:7f:0c:e9:a5:99:5e:24:46:
                    6e:86:6b:0f:7b:e0:d4:de:d1:fa:99:b2:13:5e:ec:
                    7f:09:96:4a:22:b4:72:ba:6a:6b:8b:aa:34:f1:c8:
                    ef:da:b1:df:12:07:64:24:2e:90:cd:70:68:01:2a:
                    b0:84:06:fb:a3:46:db:d1:96:0c:7d:03:13:d5:df:
                    44:e2:49:83:68:e5:23:82:22:47:4c:30:3c:9e:6e:
                    36:6d:de:af:70:db:8a:7c:a8:f3:ec:1a:fa:8b:03:
                    35:70:2c:27:20:15:af:9a:3e:33:f1:d8:b7:de:e9:
                    85:fe:8a:99:3a:24:27:23:c9:99:34:67:b9:28:da:
                    95:cd:23:ff:83:bc:ae:28:4f:36:49:74:02:7b:9d:
                    aa:69:9f:d1:22:7f:70:7f:c3:3f:b5:55:a7:f9:bc:
                    09:b8:af:ec:ba:93:5b:d7:24:86:8e:87:34:b8:34:
                    86:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:46:67:84:C3:FE:C2:70:13:C5:2E:F3:35:E3:D1:FE:2B:6F:D6:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0cd10b2b-b090-3f14-996e-19a04b88a216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:14a0:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:91:95:df:63:ad:a9:53:de:44:12:19:c5:68:3a:41:4d:7a:
         87:74:68:39:9b:2c:73:fd:6a:a0:86:2e:88:a6:74:79:39:7f:
         28:f7:49:70:9e:56:bc:97:8e:56:90:db:75:c0:f4:e7:87:a3:
         14:77:90:66:b5:44:7e:b6:6c:4a:c8:c5:ea:f2:bf:3b:5e:b8:
         4d:d2:b0:f4:d6:08:56:90:2c:cb:36:8c:fa:a6:15:0d:67:df:
         de:22:78:3c:b3:c6:c9:ab:58:64:02:5f:3d:e8:f6:1b:d7:63:
         08:b1:97:2e:f2:1d:27:ae:20:a1:18:20:b9:ce:a0:06:1a:bc:
         60:d2:8f:87:41:e3:48:3a:65:9a:45:da:8e:e8:80:1c:3b:de:
         b9:d5:6e:67:7d:53:b1:63:c5:1d:a4:91:76:f2:8c:3f:53:7c:
         1d:47:8d:12:41:f0:db:91:ed:1c:b8:5b:f3:0b:bd:f7:cb:c8:
         8a:a8:d9:0c:86:a1:a0:cb:c4:a8:3a:51:3a:fd:0f:23:9f:2a:
         66:9c:40:89:8a:53:51:15:50:91:34:d6:7f:52:f6:1a:d6:40:
         9c:61:f0:0e:2c:d2:f1:79:bc:f4:59:37:74:b4:08:20:d9:27:
         b3:b7:49:59:f6:b7:dc:38:58:5e:e2:60:74:ae:30:ba:50:d3:
         3b:f0:73:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:52:31 2025 by rpki-client