Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fad129ed-ed90-357a-a489-a3c2a006b9eb.roa
File:                     fad129ed-ed90-357a-a489-a3c2a006b9eb.roa (raw, json)
Hash identifier:          ilpv5tMEcYSo/sQ5DJbq2d8H6tJLbhik1t49bBfUkn0=
Subject key identifier:   87:82:8B:69:C2:82:B8:9B:72:B1:5A:48:F3:15:F5:8E:F8:85:88:12
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B99D7AEB36CE50ECE409F8A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fad129ed-ed90-357a-a489-a3c2a006b9eb.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     34164
IP address blocks:        2600:3c1f:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:ae:b3:6c:e5:0e:ce:40:9f:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=5edb2b3f-e208-4112-925b-163084c41809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3b:15:fe:d4:97:56:55:e2:6b:77:02:e9:17:
                    56:0a:d3:6b:7d:38:92:c4:a2:0a:18:c1:96:91:58:
                    a1:00:16:26:04:c5:1d:aa:70:21:1f:4f:40:b6:fc:
                    fc:3c:b4:fc:e7:6e:f0:f0:20:be:82:03:9f:be:bf:
                    ca:0e:12:a3:a5:99:44:03:31:6f:5b:db:eb:32:41:
                    46:a3:f5:46:5d:9f:b5:53:09:c2:64:6d:6d:9b:40:
                    8c:c9:f4:23:66:72:67:e8:31:dc:b3:07:64:11:65:
                    1f:72:27:9f:de:ac:f3:8e:cc:9f:5b:0a:ae:b9:cd:
                    d0:65:eb:77:f4:54:4b:76:cb:cc:bc:34:02:6b:00:
                    47:9a:b5:f5:cf:b3:46:fa:93:ab:f1:d9:e1:6a:aa:
                    1f:c8:99:8b:a8:c9:fa:ad:3c:de:84:00:a0:9b:9b:
                    30:e3:3c:7a:b3:10:93:86:52:17:52:b6:42:48:01:
                    d8:e5:2c:bd:b4:0a:7c:8a:ae:82:e6:e4:7d:eb:f7:
                    0d:38:7a:7d:a9:be:84:34:40:8b:62:95:1d:72:26:
                    f7:69:da:86:28:50:e6:53:9f:fb:c4:89:46:ad:04:
                    cc:73:e6:b1:a5:92:2e:26:25:34:2e:fb:7b:17:35:
                    d9:dd:b9:16:d0:18:ee:eb:dd:f7:dc:70:86:2f:80:
                    32:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:82:8B:69:C2:82:B8:9B:72:B1:5A:48:F3:15:F5:8E:F8:85:88:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fad129ed-ed90-357a-a489-a3c2a006b9eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3c1f:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:6d:66:d3:40:a5:ef:18:97:13:84:52:89:b0:60:b9:52:67:
         89:f5:ba:45:94:be:2f:e7:bd:83:5e:1e:de:e5:6a:50:80:c1:
         27:a3:93:f5:35:9d:38:36:4e:f0:36:11:c3:90:58:50:9b:0f:
         02:4f:58:3a:8d:0e:58:a0:41:8d:52:8b:1a:22:9f:09:e4:f6:
         36:0a:09:73:9b:6a:d5:89:73:c4:c6:96:d8:f3:81:72:d8:ef:
         47:f3:38:59:e3:16:a1:f0:94:d5:32:db:39:eb:a9:8d:71:1c:
         c8:c5:d8:e6:1d:91:8e:90:32:95:4f:18:52:3b:77:17:1d:47:
         62:25:11:82:50:13:ba:a7:58:8b:2a:5e:6d:1e:d1:c8:4a:0a:
         0b:1e:65:3b:7b:94:be:7d:6d:89:46:13:ae:f5:5a:3e:ce:73:
         8a:88:0f:6d:d0:bd:7c:1d:f1:9a:cb:7d:d3:07:9b:13:2a:c1:
         9c:bf:d9:39:bf:b3:da:25:38:54:49:d4:69:0b:01:ff:f9:a1:
         8d:63:7d:60:af:a8:cb:f3:99:84:62:57:72:d9:79:a7:f2:d7:
         d5:c7:1e:99:ed:9d:44:ab:40:be:55:5e:c5:b0:db:79:bf:f7:
         94:02:3f:93:5b:19:8f:9e:8d:fe:ad:f9:72:b4:16:42:88:7b:
         c7:9d:ea:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:19:10 2025 by rpki-client