Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/615feb3c-18c5-3269-85a4-89d83ab6f067.roa
File:                     615feb3c-18c5-3269-85a4-89d83ab6f067.roa (raw, json)
Hash identifier:          3Gfo51v8BgxO41V1NwmkLLDlgf6zZA/7Tf2wCqLtSlM=
Subject key identifier:   56:50:54:6C:13:56:E6:21:21:8E:6F:DC:4E:5C:3E:8A:F4:EB:A6:3F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BABFD306B590DE209A4BD8480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/615feb3c-18c5-3269-85a4-89d83ab6f067.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     20940
IP address blocks:        2600:1415:7400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:30:6b:59:0d:e2:09:a4:bd:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=345033dd-63e4-4b62-9468-67bbee9e6667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3c:b5:f3:19:e2:f9:75:91:3a:12:e9:6a:e2:
                    4f:c6:b9:a7:7d:f5:46:30:91:2b:0c:6f:db:9b:a1:
                    61:2f:fb:98:96:84:7a:b7:2b:a8:ca:50:21:9c:2f:
                    b9:cd:67:2e:f3:2f:31:7b:cd:ef:0c:f4:15:0e:cc:
                    e4:0a:de:23:22:57:27:fe:d7:50:8d:74:11:c1:23:
                    98:7e:5b:e1:4e:54:84:e9:a2:93:2b:93:08:43:43:
                    ec:55:68:3b:4a:d4:e0:32:14:fb:02:9b:98:b7:8d:
                    2b:66:aa:74:35:86:9e:3e:0b:ec:83:5e:b0:06:34:
                    54:91:b7:10:28:c7:21:7c:18:cc:79:be:d0:3f:f6:
                    ea:40:21:45:ae:39:c3:89:30:ea:6a:cd:0e:9e:f4:
                    cd:35:27:6e:49:0f:4a:66:cc:9f:79:6d:76:9c:aa:
                    21:2e:ab:7d:d1:a5:36:1a:f7:24:8d:96:2d:e8:a8:
                    3d:a0:5b:fb:db:48:72:42:f4:5a:a2:e5:eb:c7:7e:
                    8b:60:63:d1:72:c9:0b:60:d3:e8:7a:a8:72:eb:34:
                    f0:69:76:a8:31:81:5b:21:7a:a6:db:f6:13:b8:b4:
                    5f:e8:d6:36:df:b5:7a:5e:d8:08:8d:ce:a0:1c:09:
                    25:d9:d4:89:97:8b:db:a5:33:9d:c4:bf:fb:97:08:
                    19:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:50:54:6C:13:56:E6:21:21:8E:6F:DC:4E:5C:3E:8A:F4:EB:A6:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/615feb3c-18c5-3269-85a4-89d83ab6f067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1415:7400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:2c:36:c2:0f:d6:9b:2b:eb:fc:ba:cc:66:10:e0:8b:65:d7:
         b9:c7:17:3a:6c:f5:92:92:ad:2c:40:11:6e:1e:e1:4a:21:b6:
         35:c6:c0:c8:5e:c3:b5:b8:dd:f4:11:b0:0b:13:09:cb:73:56:
         d4:46:de:15:70:d9:5c:b6:0a:86:1d:fb:c5:3e:a2:62:da:3d:
         8f:c5:14:fe:e0:98:7c:15:6d:52:83:ae:90:75:3d:3e:fe:43:
         b0:76:00:e9:b6:e8:2a:d9:ff:cd:c1:cc:6a:6b:71:3c:f9:05:
         c2:43:1b:13:12:f9:a4:f7:cc:21:f2:2d:8c:03:97:82:86:ef:
         19:cf:1d:ae:ce:86:51:47:5d:5c:d0:84:9c:0d:17:fe:f6:a1:
         a5:fc:8d:c8:b5:88:f9:ad:71:76:de:4d:cf:99:0c:69:6d:d1:
         50:ac:17:e2:3f:ec:b5:e2:bb:8c:75:b4:d1:fa:19:e7:ee:b3:
         5c:9d:80:2e:10:f7:b3:09:88:e4:a9:41:77:fc:5d:8f:08:36:
         69:61:82:31:ca:eb:47:13:8f:fe:22:80:2c:a4:bb:af:b8:46:
         3c:d3:e5:6a:67:f8:ed:51:87:e4:92:be:94:01:c1:39:8d:a4:
         0a:46:9a:0e:23:e7:0f:c3:41:19:6a:8f:13:8b:f7:45:fb:9a:
         17:69:99:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:18:52 2025 by rpki-client