Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88dafe63-0da3-3de3-80bd-33bb99abfe5d.roa
File:                     88dafe63-0da3-3de3-80bd-33bb99abfe5d.roa (raw, json)
Hash identifier:          8F/PacPjFDzfD08QKhnnuouCkKZIClGOiKaKGMu5GKY=
Subject key identifier:   84:17:57:6C:F7:8F:76:5C:29:AF:97:F8:92:E2:26:19:A3:81:B2:1F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5F880AA97287E51595580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88dafe63-0da3-3de3-80bd-33bb99abfe5d.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:1402:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:f8:80:aa:97:28:7e:51:59:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=fbf2117b-58ba-457e-aa61-907e2581ad32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a3:21:f8:27:31:48:3b:af:03:1e:17:cf:e2:
                    0c:85:99:8b:3b:4f:9d:71:cc:04:34:10:eb:dc:b9:
                    d0:47:fe:fb:8e:f5:21:8c:30:0b:3e:32:12:37:1c:
                    e1:76:46:81:7f:a2:66:f0:ce:27:75:08:ab:8f:77:
                    c1:89:2a:a2:91:07:da:86:f4:ff:bd:48:87:ca:21:
                    b9:95:28:44:45:d5:c5:a1:d5:38:a3:fc:a0:4a:f9:
                    26:0c:e8:4d:c7:68:6f:87:06:9f:49:c6:27:5b:a1:
                    de:1e:2b:7a:b9:c5:12:cc:fd:ff:45:61:5c:73:51:
                    30:f2:f2:18:82:e6:43:d0:75:6d:ea:50:7f:92:55:
                    29:e0:30:ec:44:a6:f5:b7:53:49:d2:50:e0:b8:12:
                    ea:1a:20:91:13:8a:cc:b4:8c:61:e0:d6:b9:80:6f:
                    02:92:c5:68:fd:f4:23:4e:a8:a6:5c:99:4d:c8:cd:
                    1c:f5:d0:4e:ab:5b:b2:69:e0:3f:5e:ac:e0:ef:aa:
                    c7:21:69:37:17:95:65:26:0f:b3:80:e4:95:6f:bb:
                    c5:81:36:f0:5d:be:df:47:4e:44:8b:05:b9:c2:56:
                    1f:54:34:c8:86:1f:73:9d:74:d8:81:8f:db:ce:fa:
                    71:2c:c8:56:e5:d4:b9:d4:5f:82:87:0f:dd:9e:0f:
                    98:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:17:57:6C:F7:8F:76:5C:29:AF:97:F8:92:E2:26:19:A3:81:B2:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88dafe63-0da3-3de3-80bd-33bb99abfe5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1402:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f1:fe:d2:1f:e0:6b:35:e4:32:d9:03:5b:08:2c:cd:cb:46:
         ed:e4:62:2b:2b:62:bb:5e:68:a6:e4:05:cd:44:4b:09:43:04:
         4a:68:33:16:01:90:27:7c:c8:47:d9:51:9e:eb:23:27:28:da:
         e8:5f:d2:26:c3:92:de:cf:a0:32:d6:84:4a:0e:d6:7e:96:ef:
         5e:eb:9c:bb:65:4f:21:18:3a:7a:d1:af:80:12:66:64:4a:64:
         1a:5c:a9:10:cc:b5:c5:41:ce:db:62:b9:d5:09:26:e4:d9:ab:
         fc:16:75:01:c6:fc:2c:db:00:a1:36:fb:a0:50:ea:ba:87:5e:
         08:2c:c5:b5:ff:31:4a:df:3f:ab:b7:4f:8f:b8:c4:9d:df:c3:
         56:43:c7:7e:93:d9:5b:cd:1a:85:ba:64:6a:3f:b4:a6:a7:4e:
         02:f7:9c:61:20:1d:cb:f3:30:53:64:db:b3:85:1a:3f:a5:2b:
         25:38:73:93:be:b0:50:68:dd:06:00:00:ca:6d:8a:29:9c:b3:
         da:e3:76:70:8f:3a:3e:42:82:76:cb:8d:3e:ac:ee:4b:cb:b9:
         e4:63:a0:2c:b3:ec:37:7b:44:a2:a9:85:6b:8c:e2:48:ed:ee:
         f2:fe:d6:1e:92:f7:dc:a8:10:b9:c6:59:a9:c3:1c:78:cc:a2:
         79:bd:01:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:52:26 2025 by rpki-client