Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a76a7aa-93bd-3d9d-b89c-f560507b3c99.roa
File:                     9a76a7aa-93bd-3d9d-b89c-f560507b3c99.roa (raw, json)
Hash identifier:          bWyNIxC4VvTT+tGmA2n/y+jHtvd8p+FGLCOwwcw3QqM=
Subject key identifier:   30:99:D1:67:67:2A:38:4D:D3:28:AA:6E:29:E0:85:BB:1A:56:F6:F5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ABD4B762A27549E4DF4816B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a76a7aa-93bd-3d9d-b89c-f560507b3c99.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     0
IP address blocks:        2606:6c00:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:76:2a:27:54:9e:4d:f4:81:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=886d0e23-0d8c-4c12-aa45-1e60da7497ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f0:d5:2b:2b:06:cb:0c:22:8f:d5:36:4b:39:
                    62:8a:d6:84:9d:2e:f6:3f:32:f0:12:10:80:c7:3d:
                    a4:5b:ca:4e:c2:77:62:0a:3a:34:19:94:3a:c4:88:
                    72:e3:c4:39:04:dc:2d:96:93:f1:c9:8d:1e:40:0b:
                    1a:4e:ed:2a:74:be:40:21:5a:c4:d8:b0:d5:d0:1f:
                    f7:db:4f:39:92:29:df:1c:07:ea:58:5a:61:7d:02:
                    e6:68:06:4e:3c:6c:c7:d2:f7:63:94:52:b9:4d:ff:
                    92:2a:b6:d6:ab:f7:b1:e7:88:81:e2:1f:74:16:99:
                    d3:0a:54:68:2d:fa:8a:13:65:53:ee:c6:a1:b4:b2:
                    7d:6e:96:8b:34:4f:6a:59:5b:27:cd:81:82:c0:af:
                    9b:90:88:95:3f:e8:6d:3a:47:0c:3f:31:23:bf:1a:
                    fe:87:be:97:04:a3:7c:7a:dd:7c:dd:b3:d5:42:93:
                    93:82:82:9a:0f:d3:2b:eb:c3:9f:f5:f0:68:52:a5:
                    ea:e9:ca:db:71:89:3f:2c:87:9c:c7:08:4c:b9:86:
                    03:89:f7:b0:44:53:d6:d2:bb:a5:fc:f4:5f:73:ca:
                    a4:61:2a:8a:fe:73:ec:12:6a:b5:39:54:e0:6a:52:
                    b2:dd:7e:16:0f:4d:8c:12:82:99:c9:2e:43:cb:7a:
                    df:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:99:D1:67:67:2A:38:4D:D3:28:AA:6E:29:E0:85:BB:1A:56:F6:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a76a7aa-93bd-3d9d-b89c-f560507b3c99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6c00:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:7d:3f:81:f0:51:97:bb:88:98:f0:a2:29:ab:06:2c:c5:a8:
         e5:96:33:74:64:d1:e9:e6:c4:74:2f:15:00:6c:8b:9d:ab:fa:
         7b:2c:d6:71:6f:a8:b1:d7:ba:55:25:f9:87:19:f4:5a:c6:e9:
         8a:55:23:40:5b:30:84:9f:93:14:8e:bc:d2:88:0f:60:58:08:
         92:94:78:de:f8:b0:39:d4:d6:8c:6f:28:7e:7c:94:4e:28:78:
         e7:d6:13:0b:2f:2f:70:f9:37:fd:cf:71:b6:be:89:ba:a2:65:
         55:a9:bc:99:d4:9d:5b:d2:38:36:0c:66:47:fa:37:bd:61:ff:
         bf:09:d8:1c:34:13:c7:d2:21:20:cc:af:b9:67:37:dd:70:d6:
         11:a9:ed:7b:a8:5e:55:c5:59:44:c0:78:fa:a2:c4:81:cd:cf:
         e2:20:97:e4:60:63:66:39:69:f6:1e:93:a1:6a:96:f2:9d:6c:
         39:6a:00:bd:be:2d:00:ba:3a:b8:41:f4:7a:c2:e2:1d:8c:10:
         d6:13:a1:05:c8:d8:eb:a9:dd:39:f9:fd:e4:f3:d2:0d:1c:e2:
         31:ff:9d:3c:dd:ef:4c:0b:09:d4:94:98:a1:4c:eb:95:1f:fa:
         15:1d:33:4a:c1:c0:38:eb:15:69:73:d0:98:e7:a4:15:18:04:
         dd:a2:2c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:42:02 2025 by rpki-client