Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/964912ed-3821-3ff3-a627-e5e6d20f0506.roa
File:                     964912ed-3821-3ff3-a627-e5e6d20f0506.roa (raw, json)
Hash identifier:          R6gbKjLBQR2LVGA6y2FmQ6sN1hXkc36OZDWXI4pJ7VI=
Subject key identifier:   EB:29:B9:27:F3:B6:FA:66:81:43:03:54:D3:C7:0F:8D:AA:F8:82:79
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F4328584A9E961A121083DBC770010A80
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/964912ed-3821-3ff3-a627-e5e6d20f0506.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        2601:9200::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:1a:12:10:83:db:c7:70:01:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=76ae0283-0f08-479c-b3fe-37cb63546f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:72:92:fa:cd:d6:4c:5a:31:08:67:1d:3d:0a:
                    0e:1c:63:f0:25:c5:ea:70:90:ec:ce:20:4a:65:4a:
                    16:f2:0c:37:a0:09:59:ce:ac:17:ce:84:dc:89:e5:
                    c3:45:01:79:3e:9f:7f:5b:7b:68:b2:65:9d:98:93:
                    65:30:a1:e3:50:31:33:c1:4b:74:be:21:cc:77:8a:
                    de:fa:7e:6b:db:6e:e8:14:1d:2b:65:5c:14:8a:ac:
                    72:dc:3f:e7:48:07:48:32:96:5e:9f:83:07:f8:a3:
                    f9:7a:0a:6e:77:54:0f:55:5f:72:73:af:33:25:53:
                    92:ed:47:12:dc:3f:2d:f7:fc:cb:dc:9a:08:fe:7f:
                    5b:11:82:c7:11:09:fe:5c:78:23:a4:e6:f1:c9:c2:
                    0d:02:81:16:4b:96:c5:dd:3c:ed:04:f8:72:93:1f:
                    0f:24:ba:92:71:46:67:d1:68:34:56:eb:91:61:92:
                    69:58:f8:12:95:e0:fe:d8:63:3d:d3:4b:e2:ca:e3:
                    33:0e:ca:b4:03:59:b9:ec:a4:29:0a:98:b6:a2:f3:
                    09:2b:45:fe:a4:45:6f:d3:0f:b8:f2:2e:41:2f:ea:
                    5c:5b:9f:9a:c1:2a:f2:c8:58:eb:bb:47:f6:fd:30:
                    ff:fc:05:77:2c:3f:7e:12:ed:89:ac:46:90:ba:ec:
                    16:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:29:B9:27:F3:B6:FA:66:81:43:03:54:D3:C7:0F:8D:AA:F8:82:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/964912ed-3821-3ff3-a627-e5e6d20f0506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:9200::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:e0:69:ad:f5:46:bf:d1:95:51:2f:80:a3:c3:b5:f0:9a:fb:
         85:27:85:44:b3:5d:86:9f:37:40:c2:ca:22:84:93:ad:31:aa:
         f8:7c:18:67:f8:78:1d:19:91:a6:2a:49:1e:09:5f:6b:65:5d:
         0a:89:c5:69:7e:85:92:48:8d:b8:1a:45:5c:d5:65:e8:f2:dd:
         be:64:33:54:ac:fd:38:7d:ca:7d:ec:c3:49:66:58:e8:b6:97:
         d0:86:b9:d2:c5:6a:ba:20:88:a1:3d:55:54:1d:86:7e:4e:ff:
         a3:ca:65:ea:06:1d:a3:9d:56:93:93:ed:df:c7:66:25:74:d2:
         e8:6d:3a:cc:78:22:f9:66:3f:14:47:75:8b:9f:2a:88:16:0a:
         7d:1c:a5:ae:d0:de:9a:f4:04:0d:0f:62:e1:d2:a0:63:21:16:
         eb:98:0c:93:cc:00:38:70:81:d6:19:84:91:9e:db:73:43:b1:
         7c:47:da:6c:fc:98:03:e5:1b:58:c5:03:f1:90:7c:e4:87:e3:
         a5:06:15:9b:99:2c:ee:3a:05:5e:06:1b:ff:da:ba:99:b3:8d:
         04:6c:07:cc:03:f9:33:59:c5:be:3c:e9:7c:c3:8d:c6:1b:5e:
         25:01:2b:dc:11:08:d4:7b:7f:88:ac:66:88:44:33:9b:cb:1e:
         89:76:fd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:53 2025 by rpki-client