Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb443575-901c-3558-9b50-76ec37af099e.roa
File:                     eb443575-901c-3558-9b50-76ec37af099e.roa (raw, json)
Hash identifier:          hEyi+4PDVJTVrdA4OWxi5/8O1gTGxqfoNcizdUHdSmg=
Subject key identifier:   02:A6:1C:90:17:03:3A:8F:69:F1:1A:77:43:5B:C7:28:BC:03:14:2B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5F2EDDA437548631FE980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb443575-901c-3558-9b50-76ec37af099e.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:1415:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:f2:ed:da:43:75:48:63:1f:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=4fe3bcf0-e2ee-4593-b5df-29c49c3bd3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:70:b9:44:7d:44:4a:5a:b5:c4:cc:64:f8:65:
                    80:59:cc:65:3c:40:dc:03:61:d7:1a:32:f3:45:c1:
                    0b:1f:d2:a7:60:1b:3d:c1:d8:43:e5:c4:56:3c:d9:
                    fb:19:99:8a:39:67:2e:04:ff:8a:d9:62:c6:3f:66:
                    6d:3d:56:88:c9:5c:56:da:88:50:b2:6b:7e:2e:f6:
                    e7:56:db:dc:94:eb:e4:d8:10:f1:cc:35:ee:34:c9:
                    1a:29:28:d2:60:67:89:9d:9e:16:d1:25:8c:14:98:
                    45:6d:b6:38:e1:0e:2b:68:24:d0:30:f3:67:c1:13:
                    d8:03:37:b1:e2:b6:e9:b8:aa:93:63:0d:40:07:69:
                    7b:48:d0:9b:a1:90:66:5a:07:a0:a3:29:5b:e9:f8:
                    38:79:07:e0:2c:cf:11:ec:e9:a0:a1:e1:5c:bc:8b:
                    d2:4b:ae:3b:97:e4:dd:9b:74:bf:3a:af:85:b2:06:
                    8f:36:13:6a:f5:00:78:c4:c8:ec:2f:02:a0:37:dc:
                    1c:6e:de:40:18:ae:eb:74:87:92:9a:a2:bb:b3:53:
                    6f:83:7c:94:05:5e:9b:fb:ac:8d:2d:ee:fb:70:9a:
                    46:f9:10:d6:09:41:0b:e3:b5:da:9d:39:8e:d4:0c:
                    a4:8a:1b:eb:ac:33:64:79:ff:22:9f:97:ea:0e:ba:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A6:1C:90:17:03:3A:8F:69:F1:1A:77:43:5B:C7:28:BC:03:14:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb443575-901c-3558-9b50-76ec37af099e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1415:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f6:46:db:b2:d0:95:5f:72:df:fa:aa:61:3c:a5:ee:c1:96:
         5e:f5:a6:26:e6:c9:ce:2b:c6:c9:b9:05:a5:7d:6c:c6:f2:da:
         be:b1:1b:c9:34:45:ac:45:3c:da:92:e2:23:c0:ed:57:25:2a:
         a3:36:9a:21:a5:f4:ff:4f:92:d4:96:c1:ea:5c:2a:64:40:9f:
         83:23:72:69:a8:bb:e1:a4:c0:9a:16:57:b9:78:77:70:f4:ae:
         b2:2b:0d:61:50:48:7e:0e:69:aa:b9:0c:1b:03:71:9d:ef:d2:
         de:a9:90:a2:07:2a:dd:1e:8b:8e:1a:28:f7:f6:87:0b:dc:0f:
         5f:59:f3:05:bf:3e:8d:ab:63:a3:87:f3:67:ab:c6:22:ed:07:
         f6:cb:c5:5f:4d:0b:e6:d5:86:7d:e9:8f:b5:57:5b:02:8e:a5:
         88:eb:b1:18:76:e1:11:8c:3e:4d:82:3d:98:07:75:38:77:54:
         e8:c2:f3:ff:a2:5b:dc:96:fb:de:dd:33:37:8e:78:a7:11:30:
         7f:e9:43:91:38:b8:bb:bb:cd:aa:ce:7e:2b:a6:43:c6:b7:8f:
         e2:81:75:62:28:04:59:81:4b:db:88:c5:9f:05:4a:14:e9:e1:
         bd:53:84:bc:e0:b3:92:bc:ff:96:19:02:9b:11:6b:f3:8b:85:
         17:1e:fb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:23 2025 by rpki-client