Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6aaad683-79f6-35a2-a574-00d76e7571ea.roa
File:                     6aaad683-79f6-35a2-a574-00d76e7571ea.roa (raw, json)
Hash identifier:          3kd1H6vrv13e0sUmoZYZr9U9z7c2MyX0OkH9ZC6iKYQ=
Subject key identifier:   96:3C:C4:2B:0F:4A:51:53:30:7B:CA:BA:8A:B9:1A:EC:9E:D3:69:19
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584AADF12552664AABB0DB829860
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6aaad683-79f6-35a2-a574-00d76e7571ea.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     16696
IP address blocks:        2606:4280::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:25:52:66:4a:ab:b0:db:82:98:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=f5ad6d1e-736d-4886-a026-12c3d5a244de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:b1:a9:ef:b9:b2:2f:6e:79:56:85:e1:67:
                    3a:8f:f6:8b:cc:9d:e7:90:16:6f:bd:3d:5f:eb:2b:
                    a6:64:73:b4:7c:3e:e2:92:a0:30:cf:34:9d:90:cf:
                    5e:2d:f0:e5:03:39:53:76:d6:66:71:94:47:5b:b9:
                    0b:7d:cc:1c:2a:7e:8f:0e:d1:3f:f8:c9:c5:00:86:
                    ed:f3:de:1f:fe:07:36:01:ee:b6:d0:9b:34:3b:7d:
                    b1:ad:19:1f:32:26:84:b3:97:11:4e:86:91:0e:0d:
                    4f:07:23:b4:60:a2:ef:97:ee:09:2f:89:59:f5:8b:
                    d0:16:a1:6e:c4:85:9d:ed:0a:d5:a4:03:b3:74:6a:
                    64:b3:3b:bc:01:0e:a3:45:cb:e8:30:e1:25:8a:a4:
                    c8:32:04:8b:94:bc:5a:ed:c4:f9:7f:a4:60:0f:ec:
                    c1:95:ea:ae:76:9f:c2:70:93:c8:86:4f:a1:30:94:
                    b3:a4:f3:d5:2b:38:f0:de:f2:e1:4c:60:26:d1:a0:
                    3c:34:b9:c8:69:e8:46:8a:e0:fb:5f:43:f0:9a:b6:
                    78:0b:e6:0e:5a:04:35:bc:92:ff:32:9c:79:1e:44:
                    77:4a:c2:04:57:de:14:d7:09:d2:d3:f1:62:2f:19:
                    d2:e0:e5:98:ca:47:3f:15:ca:6c:68:1f:a0:ef:70:
                    92:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3C:C4:2B:0F:4A:51:53:30:7B:CA:BA:8A:B9:1A:EC:9E:D3:69:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6aaad683-79f6-35a2-a574-00d76e7571ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:6e:0a:2f:62:69:6a:eb:85:49:c2:4e:d2:93:fc:d1:bf:26:
         3f:b3:9c:5a:96:e7:6e:65:8b:c8:a6:28:12:1f:16:c7:bf:a9:
         6a:96:43:f0:29:d8:d2:22:82:55:d3:32:a3:a6:7d:04:59:2f:
         2e:ea:b5:d9:60:20:13:1f:f7:8c:e1:db:43:e6:ea:28:fe:55:
         d2:7c:d1:a9:81:db:98:cb:3e:a3:4f:28:77:14:e2:b8:b0:01:
         ed:f7:8f:51:e7:25:8f:4a:a9:f5:1b:87:dd:e0:5e:be:82:d8:
         c2:f7:52:81:da:06:b4:33:89:16:00:50:90:a0:81:ba:15:38:
         77:59:fb:e6:89:5b:e6:c8:ae:b3:ad:3a:cf:1b:ba:c5:32:0f:
         60:7a:74:95:2d:7c:c6:47:a3:54:5f:80:5a:86:1d:13:92:52:
         35:45:f9:b2:c9:7b:ee:a7:c6:b2:ca:82:0b:99:3b:35:6e:88:
         45:12:0a:95:cf:1b:3d:1e:06:f0:71:a9:ba:3d:a1:8a:07:ce:
         00:be:b8:b9:df:03:4e:b0:6b:9e:a4:d6:44:8a:3b:61:55:3c:
         39:76:f5:47:ee:e5:ef:a8:ff:ab:98:e0:fc:5f:2f:9f:cd:18:
         44:4e:c0:51:39:44:83:3e:a8:46:82:f7:a7:9b:4b:84:07:fb:
         d6:13:bf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:03:49 2025 by rpki-client