Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c006e98f-3ece-3757-bd45-4b1d0796733d.roa
File:                     c006e98f-3ece-3757-bd45-4b1d0796733d.roa (raw, json)
Hash identifier:          t2SxlerjcSBvc0GPouMKb5P583bQwGlqd8o+OEQeCPM=
Subject key identifier:   02:D2:F0:8A:65:58:2F:29:DD:B1:2F:1A:D5:2A:31:83:DE:ED:15:06
Certificate issuer:       /CN=c0ae1cff-309c-40d1-9760-3a89a481e998
Certificate serial:       010D0C9F4328584AAB26505CA710242DE845BA2D
Authority key identifier: 3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c006e98f-3ece-3757-bd45-4b1d0796733d.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     14907
IP address blocks:        2620:0:860::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:50:5c:a7:10:24:2d:e8:45:ba:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ae1cff-309c-40d1-9760-3a89a481e998
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=423db53a-4d96-4ebb-9c47-3a509d30cbae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f1:cc:2e:0d:59:65:e2:a8:c1:c2:e1:b0:c2:
                    0d:05:ad:94:2e:8b:5c:34:22:2f:5e:9b:22:5a:1a:
                    68:05:60:16:a4:ba:75:ec:db:12:90:9b:9f:17:ff:
                    39:b8:c6:c2:97:e8:11:e2:c8:b5:f9:f6:ff:4f:15:
                    d3:ff:1d:62:94:bd:0c:47:36:73:30:d5:0a:21:a0:
                    35:b4:c6:53:92:7e:1b:35:2b:e6:da:0f:1f:8c:76:
                    37:bf:bb:34:23:16:51:40:a9:9e:b4:02:c0:82:07:
                    47:d3:b8:eb:ee:7b:10:88:1a:de:91:4f:02:5b:94:
                    6a:64:1f:e5:6b:b6:03:51:1d:ed:0c:a1:0d:6a:0c:
                    dd:2d:2e:28:c4:7b:a4:d8:0f:d2:0a:92:8e:9a:d1:
                    f9:5e:45:6c:e6:e8:37:e0:71:f8:73:f0:a7:a6:97:
                    bb:c0:ff:b8:57:0f:2a:65:00:f0:8e:e4:6d:42:a0:
                    cc:45:98:45:95:a5:1b:99:b9:d6:57:74:c6:45:b4:
                    93:85:e5:a0:4f:d1:ae:c9:2e:35:8e:fe:68:8c:34:
                    51:a0:a7:08:47:3c:60:e6:30:e0:0b:08:8b:df:02:
                    9c:40:26:c9:0a:4a:5a:fc:90:46:de:df:a9:da:38:
                    40:1b:49:a0:4c:6e:6b:b3:78:05:0d:24:ab:b2:5a:
                    dc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D2:F0:8A:65:58:2F:29:DD:B1:2F:1A:D5:2A:31:83:DE:ED:15:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c006e98f-3ece-3757-bd45-4b1d0796733d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl

            X509v3 Authority Key Identifier:
                keyid:3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:860::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:13:f2:bc:56:5b:e4:e8:70:52:6f:01:a1:34:e3:8e:14:0f:
         ca:7e:f8:6c:a8:83:f5:37:46:0f:be:d3:87:4e:02:ab:5e:6f:
         e9:af:94:60:7f:a7:8c:a9:ee:5c:f0:b5:de:13:3d:4f:18:2c:
         7a:7f:40:23:d0:ef:7d:e3:66:50:96:a1:4e:88:ac:cd:da:4c:
         d6:2a:13:29:0a:13:20:fa:e6:1a:f5:1d:ec:7b:ec:29:75:b6:
         e3:28:50:21:a1:7a:55:12:4e:90:9b:50:fd:20:db:3d:24:9d:
         a8:9f:1c:16:23:71:25:1a:2e:0c:7a:fb:5f:08:81:5f:3b:2b:
         f3:fc:f4:fd:1d:f5:6d:45:cb:05:08:16:48:11:3c:bb:19:17:
         af:da:ed:f8:c4:a6:0f:a1:f9:0b:aa:92:9f:d0:a5:2a:de:73:
         dd:26:33:3c:24:f1:31:f0:af:64:6d:b1:3b:73:de:41:aa:45:
         a0:e3:05:d9:07:34:d4:17:9c:c2:26:25:c9:42:cb:9a:a6:54:
         98:80:ac:d8:23:3c:01:e1:e4:4e:1c:55:6c:5a:e7:7e:0b:d7:
         31:c6:92:54:bc:cb:57:bb:84:58:bf:fb:4c:0c:87:78:7d:2f:
         41:9d:5f:4d:a3:e3:63:58:78:60:c2:42:7a:7d:20:97:35:99:
         c8:21:bf:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:43:35 2025 by rpki-client