Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/5423c03a-697e-3ed6-9dca-a727e4820c14.roa
File:                     5423c03a-697e-3ed6-9dca-a727e4820c14.roa (raw, json)
Hash identifier:          Muqvon6OvzaE2SEP+QDjQkENFj4nTQ4djVobuxdBVfI=
Subject key identifier:   5A:88:94:86:39:86:27:8F:3D:AF:01:F4:F3:9A:3E:3F:94:6E:4A:8B
Certificate issuer:       /CN=bb69a441-76b7-4b20-a411-7a618bd61bcb
Certificate serial:       010D0C9F4328584AB220D78D4A05E181C8BAF140
Authority key identifier: 09:46:D0:A7:31:C8:12:1B:5F:66:60:53:4B:90:0C:BD:5D:9D:15:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/5423c03a-697e-3ed6-9dca-a727e4820c14.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     32338
IP address blocks:        2605:6280::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:d7:8d:4a:05:e1:81:c8:ba:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb69a441-76b7-4b20-a411-7a618bd61bcb
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=09f7114d-04bd-447b-aa92-95e1a2dc8353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a1:70:5b:ed:f8:0e:ab:78:08:3b:8a:ea:ba:
                    19:1e:c5:49:73:17:03:11:80:68:a2:f3:da:9f:99:
                    ba:7e:41:df:58:0c:fd:46:5a:c8:3e:51:17:cc:58:
                    05:0b:d2:a4:ab:55:b8:4e:45:66:20:35:b5:73:cf:
                    21:94:d5:ca:4e:1b:2f:de:cb:d4:65:90:6d:a6:fe:
                    12:35:96:e2:8a:44:f0:32:91:64:c5:65:6a:6f:57:
                    08:f6:31:91:06:02:2f:5a:9e:42:12:b5:00:54:37:
                    52:96:f8:53:5e:92:ba:95:95:8a:d6:a8:a3:93:54:
                    57:7e:3e:ef:58:0d:ff:60:ec:ac:80:ae:e0:ef:42:
                    2f:e4:55:6f:2c:77:b6:f6:fb:67:df:80:2c:73:57:
                    f6:33:1a:69:2e:b0:ae:f6:3c:ae:ed:71:34:b8:24:
                    73:95:be:c1:fb:46:de:36:a6:36:ab:60:d1:e0:72:
                    bd:e9:91:ee:d0:89:0a:97:e6:d6:41:04:d0:a7:2e:
                    fa:ac:bf:20:9a:52:81:97:05:a6:55:39:4c:a6:80:
                    1a:df:7e:0f:49:c4:39:7c:cb:74:7a:e2:00:fa:77:
                    49:c2:c7:e7:12:86:f4:88:c1:60:2e:a0:b7:6c:b4:
                    d9:d0:1a:91:2b:ef:07:65:c3:c5:9f:7d:02:be:b3:
                    d7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:88:94:86:39:86:27:8F:3D:AF:01:F4:F3:9A:3E:3F:94:6E:4A:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/5423c03a-697e-3ed6-9dca-a727e4820c14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.crl

            X509v3 Authority Key Identifier:
                keyid:09:46:D0:A7:31:C8:12:1B:5F:66:60:53:4B:90:0C:BD:5D:9D:15:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:24:10:c5:09:4e:ca:dd:3c:35:de:c1:65:6b:7e:d7:d0:2c:
         8e:fb:3e:0e:ac:02:d3:e1:66:5a:46:15:49:5b:8f:87:8e:7a:
         57:4d:6e:cf:e2:3d:be:90:e5:83:b5:96:c2:71:23:dc:26:50:
         fd:b3:02:6c:d9:7c:d5:59:65:b5:e8:17:93:11:5e:24:ac:6b:
         64:35:39:f7:6d:4d:38:70:2f:6d:02:e5:a4:67:2c:b2:07:af:
         6d:85:a9:76:e3:70:bb:93:d6:86:03:81:87:9f:84:5b:12:8f:
         cf:9a:90:ab:20:5f:3b:72:ec:59:cd:64:2d:c2:aa:1b:ab:54:
         93:28:77:2a:25:f7:02:25:ce:10:8b:ea:73:af:24:0e:75:98:
         8d:58:45:ac:49:86:d9:9b:39:8f:f0:6c:9e:2d:e3:4a:20:34:
         1c:dd:a8:ad:b7:ab:d8:66:9f:67:09:0b:eb:9a:77:04:aa:2f:
         96:47:0a:71:ae:1b:30:44:b3:71:ea:ec:6a:2c:3b:2b:44:ad:
         08:57:d8:12:85:6c:b1:1f:44:09:ab:73:79:d9:18:91:a4:07:
         c6:66:22:74:23:05:83:9e:6c:0e:fc:4b:26:3b:b2:6b:10:0c:
         a8:1c:0f:80:65:83:ae:32:8e:a4:08:be:34:5c:9d:f2:dc:7f:
         a2:fb:46:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:13:39 2025 by rpki-client