Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/558e8bb8-270d-3bec-8e35-a7411e2bc32f.roa
File:                     558e8bb8-270d-3bec-8e35-a7411e2bc32f.roa (raw, json)
Hash identifier:          7THpFFGxunR8QUU6N0e48DIawXEG+LNDaEtm7bMSlZU=
Subject key identifier:   8C:25:8C:55:DF:D7:4C:4E:98:33:A7:D4:73:C9:34:DD:05:6B:EB:3A
Certificate issuer:       /CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
Certificate serial:       010D0C9F4328584AC1D7BA81BB3F1BD592703580
Authority key identifier: 63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/558e8bb8-270d-3bec-8e35-a7411e2bc32f.roa
Signing time:             Tue 05 Aug 2025 16:06:26 +0000
ROA not before:           Tue 05 Aug 2025 16:06:26 +0000
ROA not after:            Mon 03 Nov 2025 17:06:26 +0000
asID:                     5400
IP address blocks:        2606:f100:d600::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c1:d7:ba:81:bb:3f:1b:d5:92:70:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
        Validity
            Not Before: Aug  5 16:06:26 2025 GMT
            Not After : Nov  3 17:06:26 2025 GMT
        Subject: CN=05299324-3805-4638-b5b5-b68c74b5b98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:0d:23:7a:02:a4:a1:31:5e:47:13:8e:6a:
                    4f:5a:a6:14:4b:18:c1:9f:94:8e:29:81:e0:f0:9c:
                    d7:74:a6:d7:c9:5f:95:0a:03:9b:81:3e:d5:d8:56:
                    e0:f2:19:b6:0c:41:76:d5:72:b6:24:ba:8c:f8:66:
                    47:bc:c9:fc:24:4c:64:54:02:f9:97:c1:f3:19:03:
                    c9:8a:e8:2d:f1:76:56:e2:ba:6c:cf:c7:d6:ef:4e:
                    90:f9:26:a4:59:e4:59:76:84:06:ba:e9:26:de:35:
                    0d:37:e1:1c:30:e4:a1:0c:93:7d:6d:ea:10:c3:b8:
                    b5:24:c1:91:86:7b:2f:ce:50:18:20:43:8d:bc:97:
                    b2:df:41:49:47:a9:3f:85:56:ec:75:e6:81:05:fb:
                    ec:38:6e:f0:1f:c0:93:c0:88:47:1e:c0:c3:39:ec:
                    53:89:83:fe:ae:34:c4:81:8d:4c:f8:19:df:5b:31:
                    db:2e:6c:58:da:e4:b9:5b:fa:23:0b:35:05:11:66:
                    1c:76:79:0b:86:93:f0:b2:9e:e6:57:4d:a0:33:53:
                    e7:05:f7:f5:b7:af:6d:74:53:fb:e7:ab:c8:49:fc:
                    c2:1e:72:a8:bc:a1:34:cc:48:bb:5b:49:29:e0:2b:
                    25:0a:f7:1e:5a:73:3f:fb:3e:c5:c6:c3:cb:8e:4e:
                    88:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:25:8C:55:DF:D7:4C:4E:98:33:A7:D4:73:C9:34:DD:05:6B:EB:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/558e8bb8-270d-3bec-8e35-a7411e2bc32f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl

            X509v3 Authority Key Identifier:
                keyid:63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f100:d600::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:41:dd:21:b5:07:22:32:50:a3:1b:21:69:ee:06:ad:d2:fc:
         f0:17:2b:b1:c5:c6:17:28:6d:85:13:bb:ab:43:ec:a6:f6:38:
         10:b0:49:d7:6d:76:9e:34:f3:e9:02:b4:b7:3f:f1:7a:78:09:
         f4:f2:d6:39:b6:e1:43:a4:ec:be:ee:53:66:33:72:60:11:2b:
         28:78:bf:7d:26:1f:f0:d9:50:14:ae:c8:ac:c2:5a:53:ef:50:
         2d:ba:52:1c:36:bc:f6:a8:9e:8b:ad:82:87:5e:9f:53:69:58:
         56:18:2d:b0:65:cc:d4:41:f3:c7:44:5b:0b:04:48:01:42:8e:
         3d:25:6a:a3:3c:f0:3b:9b:2d:e1:96:45:06:a5:1a:7a:b2:db:
         86:89:68:ce:5a:fd:55:d6:70:f3:bc:6f:be:57:6d:3c:9a:bd:
         c4:32:e4:78:b6:33:ed:ed:6f:87:d0:02:db:94:67:82:b0:19:
         13:0e:9c:18:f5:cd:fa:14:a7:4c:3b:70:7f:aa:9b:d7:27:1e:
         1c:dd:56:ad:53:bf:78:55:1e:aa:14:3b:c0:5d:f7:ec:39:45:
         7c:68:df:5e:01:94:e2:aa:1c:1a:ff:9c:c0:80:e7:be:40:e7:
         39:18:49:62:2b:01:1e:44:b1:bc:ab:4a:38:7b:4c:ae:0f:42:
         86:20:95:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:29:38 2025 by rpki-client