Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/915f93a1-daed-3066-8e1c-ecdc1b050eeb.roa
File:                     915f93a1-daed-3066-8e1c-ecdc1b050eeb.roa (raw, json)
Hash identifier:          aJEFaFKLEKBjjKJW9Xe7+uqfSlIbqZKqvW5C8XaiSi8=
Subject key identifier:   1E:7E:B6:BC:D1:C9:A5:F1:4D:43:61:B0:2E:43:E9:6F:5D:09:E3:0C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AB91B917E74120CD82658F080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/915f93a1-daed-3066-8e1c-ecdc1b050eeb.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     33905
IP address blocks:        2600:1480:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:91:7e:74:12:0c:d8:26:58:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=8cda7927-2a20-45fa-9e2b-7826aabf1a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7b:8b:b5:57:b1:52:3c:63:52:82:83:17:bd:
                    c0:09:65:4a:1a:70:98:56:31:30:bc:b9:74:a8:9f:
                    dc:90:3b:73:cb:7e:70:dd:c4:5b:f4:e6:0e:da:98:
                    a6:2e:1b:ff:5c:cc:80:67:b5:d7:d8:92:5f:e9:a6:
                    e1:b1:3f:20:7d:8d:d1:63:39:10:4d:1b:48:77:07:
                    80:bf:91:37:fc:e0:da:8e:7d:7b:3a:53:fe:32:4a:
                    e2:68:e7:70:7c:62:8a:64:f5:17:f4:e6:c5:35:e9:
                    92:d5:c5:a8:12:a9:c0:da:6e:db:e9:ac:dd:c6:ad:
                    31:e3:d8:ae:73:1b:6d:e9:92:a4:2e:aa:bf:c8:11:
                    a4:69:45:24:a9:78:f0:89:6a:94:d4:07:ff:92:b2:
                    f6:7b:b9:c4:9a:05:ab:27:f1:cb:11:fe:8e:96:55:
                    91:a7:a3:14:7f:bc:f6:89:0a:8a:4b:86:3d:a6:fc:
                    94:d6:b7:d6:ed:df:20:66:a7:1d:08:47:70:f6:3f:
                    f8:60:65:44:35:67:90:b5:f9:c4:22:49:41:e8:a2:
                    88:3e:b3:61:cc:91:6a:41:7f:76:5d:47:a1:5a:de:
                    01:04:87:7a:54:90:8a:89:6a:3b:c6:6a:32:1c:4e:
                    6e:3b:dd:29:8f:a2:e8:64:83:a5:f4:81:11:2b:f6:
                    1c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7E:B6:BC:D1:C9:A5:F1:4D:43:61:B0:2E:43:E9:6F:5D:09:E3:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/915f93a1-daed-3066-8e1c-ecdc1b050eeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1480:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:51:76:96:15:05:a4:26:d6:cc:99:23:9a:96:e5:dc:88:98:
         0a:b1:12:c2:c9:d8:7f:ef:fc:3e:dd:32:93:c9:f6:4a:f5:92:
         1e:37:7e:0a:d1:ea:40:fa:4f:69:b7:aa:70:4b:a4:2b:56:9a:
         ab:23:b5:66:e7:b1:53:2f:a5:42:e9:5f:4a:ec:7a:dd:d6:2e:
         b0:6c:0a:24:bc:38:00:49:e8:6b:23:45:e4:2e:99:6f:66:23:
         b8:ac:35:60:4c:d2:06:44:ac:b8:8d:dc:57:f2:89:97:9d:5a:
         5f:f7:80:92:be:71:7d:37:d3:5c:ea:62:70:fb:83:9c:32:65:
         95:17:cb:dd:68:f4:d3:b1:a7:cb:70:5c:3b:98:4a:0b:b7:42:
         b7:40:a8:8b:91:71:e3:87:85:be:4c:67:c9:f1:65:18:b5:51:
         b4:62:0c:ba:50:29:6f:31:0e:13:a1:9c:e5:89:12:ea:e7:72:
         27:cc:10:c9:24:92:57:c0:ad:7d:cd:79:64:c1:fe:df:95:3f:
         54:0b:33:9c:d2:95:b3:0b:bf:74:94:6a:4e:95:1d:92:8c:f4:
         82:36:b5:0f:17:36:5f:fb:e6:ce:34:98:37:74:09:6f:45:01:
         c8:12:a5:1c:48:3c:03:6c:a6:1d:f3:47:90:80:55:76:5b:ee:
         0d:08:fe:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:37:21 2025 by rpki-client