Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c7459c1-c518-3322-ac7a-b66760e04f5b.roa
File:                     1c7459c1-c518-3322-ac7a-b66760e04f5b.roa (raw, json)
Hash identifier:          Az6aLKRQRbNL6hXC/eV6V48tHZA03rxlBZJAUBZ7ZrE=
Subject key identifier:   1E:21:06:5E:6C:BC:C6:EB:FE:DC:61:47:5B:2D:45:B5:9F:E9:C6:19
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B99D7A1FC12C5D8CA30D6F5E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c7459c1-c518-3322-ac7a-b66760e04f5b.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     43766
IP address blocks:        2600:1417:2400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:a1:fc:12:c5:d8:ca:30:d6:f5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=e112cfb4-16db-445a-a007-d5f293b5b124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:57:04:f9:22:28:9c:b1:e3:9f:0d:fb:77:
                    cd:a9:17:49:66:1f:db:25:17:66:6d:71:01:d4:09:
                    d0:9c:93:d6:e3:a8:06:90:5c:78:d5:1a:0c:3d:8f:
                    a9:a1:78:be:6d:33:de:2d:af:01:e7:a9:6d:e9:e7:
                    b8:d5:39:a3:45:31:ac:47:43:4a:a7:fb:c4:67:55:
                    88:d2:d7:1b:25:a8:96:95:12:df:9f:72:a7:09:9b:
                    e0:6d:64:28:d3:c5:71:77:3f:e6:c6:7b:79:e3:8c:
                    b4:12:31:8a:e7:7e:8c:34:5c:16:55:74:28:77:2a:
                    2e:9f:f1:92:14:50:c6:68:42:93:67:6b:c3:11:89:
                    cb:5d:4e:3c:53:50:c8:92:7a:81:b8:02:88:7f:38:
                    b8:74:02:1d:f2:35:0e:ea:9f:4b:75:df:1e:66:e0:
                    ff:43:df:37:4e:6d:61:3a:8d:5f:9c:58:b4:34:0c:
                    44:5e:68:4c:77:28:f3:ed:1a:6f:29:0a:6c:56:3b:
                    c9:a6:da:c5:7b:32:45:9e:61:25:bb:de:b6:37:76:
                    be:f7:8f:64:ec:c8:6b:c7:4d:f1:d1:59:03:a5:93:
                    6f:5d:9f:cb:54:74:12:1c:b9:78:1b:f3:26:86:ec:
                    00:54:c8:68:be:86:86:f9:88:22:51:9c:b0:ee:25:
                    61:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:21:06:5E:6C:BC:C6:EB:FE:DC:61:47:5B:2D:45:B5:9F:E9:C6:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c7459c1-c518-3322-ac7a-b66760e04f5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:2400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:6e:89:40:0d:de:5b:3a:21:7e:9e:f4:69:1d:e0:79:6c:19:
         e1:a8:92:00:d3:64:59:71:00:9d:28:8a:e9:a0:66:cc:3a:4d:
         1d:d7:71:b5:f4:b2:2d:b4:3b:cd:1f:13:16:f5:3c:4c:4d:1b:
         05:a6:bc:49:06:ee:4c:44:b2:5b:41:84:ec:16:1a:e1:95:8f:
         7f:b6:8b:13:ab:33:66:08:73:6c:f8:ca:20:06:7b:1c:f5:69:
         fd:29:18:d0:0e:18:de:91:4b:9d:d9:31:e6:3e:e4:8f:c0:85:
         ea:46:a1:d4:0a:56:2e:2e:33:08:14:5d:4c:1e:41:7e:b4:7f:
         0c:66:4a:40:ba:32:21:78:5f:cc:a3:07:3a:27:b9:aa:de:9f:
         67:5f:ee:e8:28:39:37:be:a9:de:c1:5e:a9:37:6f:fd:fe:4b:
         9d:8e:12:05:49:b3:77:b2:2d:1a:cd:c2:ba:35:fe:00:fd:e0:
         25:14:47:51:65:6e:28:3f:77:91:4c:87:01:a6:fd:80:e3:e0:
         eb:6e:7f:e5:74:24:1a:4f:9a:93:d6:98:e2:bb:30:75:be:e8:
         e8:cc:0d:b5:7f:5c:89:c0:17:8e:db:21:30:0c:93:fe:5e:11:
         6d:bd:0c:c2:af:15:d3:cf:42:1f:1a:52:c3:fe:87:11:28:dd:
         fb:e3:8c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:33:00 2025 by rpki-client