Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b62b8a1-5c7e-3e2c-999f-cb5c7d97fa87.roa
File:                     9b62b8a1-5c7e-3e2c-999f-cb5c7d97fa87.roa (raw, json)
Hash identifier:          yxh58/Bu8RK4w1khlB2B0k6Y8BcClTkkQvoFoyPUQ1I=
Subject key identifier:   D0:53:48:F3:FB:51:BB:41:22:1D:55:34:1E:A7:C6:9E:BE:94:33:03
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BA39D02F78935F71F4E86F580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b62b8a1-5c7e-3e2c-999f-cb5c7d97fa87.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     35994
IP address blocks:        2600:1406:47::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:02:f7:89:35:f7:1f:4e:86:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=f4095839-7f46-4252-bf2c-2597fde54d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:40:59:98:93:7f:c1:4a:f7:b1:85:15:7d:d0:
                    da:9b:98:22:58:b0:11:24:6d:7a:9a:05:d0:71:bd:
                    71:32:86:4a:b9:9a:a1:58:d8:eb:48:00:bc:1f:cf:
                    09:f2:88:10:fd:8f:b4:20:42:dd:f6:07:58:d6:6f:
                    13:60:ba:23:ce:25:ab:c2:b4:da:7a:fa:8e:fe:4e:
                    fe:b2:a6:f7:bb:80:9e:e1:b5:35:37:e4:b8:31:32:
                    91:be:e6:64:5a:af:9c:78:ef:4b:c3:de:ab:ec:63:
                    56:ab:04:95:33:73:dc:fe:5d:a2:ee:c3:72:a2:1b:
                    9f:b9:3d:b5:71:f0:e1:85:ff:75:9d:a1:24:fd:2e:
                    1e:3e:10:f2:8a:57:83:68:cd:c0:8c:7b:c2:e6:ff:
                    c4:03:6a:01:92:a9:40:d9:26:3b:3d:87:0c:64:dd:
                    50:09:63:93:88:f9:df:1b:6a:de:8b:c7:83:d8:80:
                    99:e6:c3:37:a4:f0:32:61:1f:ac:2c:fd:c7:2d:92:
                    1b:eb:97:58:54:72:a3:b2:6b:1a:c3:7e:66:43:4a:
                    a1:ed:70:15:c3:e2:ad:a9:7f:85:bc:a9:ca:66:2f:
                    e1:d8:16:e6:4f:0c:b3:7e:f0:f6:be:07:69:9b:10:
                    94:98:ac:73:b3:c2:e6:ca:da:f8:e5:97:c3:18:6b:
                    75:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:53:48:F3:FB:51:BB:41:22:1D:55:34:1E:A7:C6:9E:BE:94:33:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b62b8a1-5c7e-3e2c-999f-cb5c7d97fa87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:47::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:7f:ae:88:ed:c5:3b:c8:54:d6:a8:a8:22:00:ee:97:bf:ec:
         90:d6:02:70:0d:87:10:d4:a3:6c:7a:50:71:57:5e:28:5b:03:
         e2:4c:c0:e0:88:0d:48:8b:24:1f:97:f5:ed:ab:9a:c7:08:17:
         01:1b:d4:d7:e4:f4:fc:ad:bc:5b:b0:96:07:47:f4:12:27:2a:
         22:8a:fa:42:50:0c:f2:10:ba:6a:aa:ef:be:51:57:38:ac:31:
         e0:c4:49:39:88:15:3f:82:0c:72:58:ec:f3:bf:63:aa:9f:a3:
         45:a8:f4:0b:aa:fd:64:a7:1f:ba:b4:a1:8d:79:89:8e:9d:61:
         4c:b4:31:22:03:fa:25:bb:6f:2b:4a:76:18:0a:a4:43:3e:d8:
         6f:39:88:e7:5b:50:be:a7:e8:90:0f:0d:0d:de:b0:38:5e:63:
         aa:0a:f8:80:70:a5:94:d2:27:02:98:fe:9b:5d:9c:cf:99:c2:
         2e:65:37:a0:ab:00:15:a4:61:38:a5:1e:5c:50:52:af:d3:0e:
         e0:c8:aa:77:c4:7a:29:92:ca:8b:d9:ad:65:ab:99:c0:64:22:
         84:f4:7f:25:a1:90:5c:0b:c0:04:30:db:62:ca:62:55:81:f9:
         81:81:8e:e1:6e:e6:bb:2c:42:69:3c:af:a1:ce:77:82:82:fe:
         e7:90:0c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:56:49 2025 by rpki-client