Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa
File:                     5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa (raw, json)
Hash identifier:          TOXmjhxDts7CN6YnCQJqa058no9eVqapgnwEao8Pqi0=
Subject key identifier:   53:9B:70:3F:8B:67:4B:DC:74:36:D4:A7:F3:D3:22:F0:1E:9D:9B:25
Certificate issuer:       /CN=d6fb0d47-7125-4b91-9b01-2e308dad0d25
Certificate serial:       010D0C9F4328584A07D5363D76C48E30F0FAC380
Authority key identifier: F1:51:5C:12:74:E1:80:0B:3C:F8:ED:38:A6:09:04:6B:0C:6B:8E:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        2601:1700:e100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:36:3d:76:c4:8e:30:f0:fa:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6fb0d47-7125-4b91-9b01-2e308dad0d25
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=9994e6a8-9aff-45c3-a19f-26063c796993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:52:b6:57:de:15:d4:7f:6d:c8:28:03:4c:15:
                    2c:71:0d:09:c1:26:31:16:b1:e4:92:6a:c4:30:d9:
                    bf:39:fa:e9:d5:2b:5d:d5:5a:39:ca:09:cc:1c:38:
                    3f:bd:71:d0:c0:46:15:c0:4e:a8:ca:4b:5c:90:0a:
                    6c:d7:db:ec:d0:88:79:62:0a:54:8e:b7:32:c1:d6:
                    aa:30:71:c5:a4:3a:15:6f:6d:fc:42:45:bf:86:c9:
                    85:07:0b:99:61:8a:02:cc:6b:13:c4:3e:38:60:a8:
                    89:06:ba:e3:a1:3f:b7:d5:2e:d8:1f:a4:22:6a:82:
                    5e:ec:e7:c1:62:20:7b:e0:24:f7:ab:01:0a:4c:04:
                    f1:2b:49:4f:5a:d6:00:97:90:2e:1c:8a:75:f5:49:
                    cf:22:b7:e9:dd:82:92:41:9e:ab:d8:ad:0b:1f:1e:
                    03:f6:81:61:d8:e2:c3:7d:50:45:e5:ff:69:52:38:
                    a4:27:94:77:0c:d8:c9:c7:f4:a9:68:db:e4:2d:b9:
                    80:b6:94:53:81:76:51:75:64:0c:07:e0:2c:5a:fc:
                    d2:de:76:80:45:3e:53:25:8b:41:80:02:49:8c:34:
                    57:27:7e:19:30:2c:97:be:bf:79:0a:6a:72:f9:7f:
                    1b:53:16:c6:21:f9:e2:e7:22:a0:72:45:91:76:69:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9B:70:3F:8B:67:4B:DC:74:36:D4:A7:F3:D3:22:F0:1E:9D:9B:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.crl

            X509v3 Authority Key Identifier:
                keyid:F1:51:5C:12:74:E1:80:0B:3C:F8:ED:38:A6:09:04:6B:0C:6B:8E:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1700:e100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:5a:75:14:e1:d6:b2:8d:d4:85:f5:12:ce:5b:06:34:5e:e3:
         75:89:b5:7d:f5:24:7c:a2:76:1c:86:ff:2c:ea:c8:f0:87:da:
         22:62:f1:4d:6a:4c:86:5c:8a:47:58:f5:01:05:fd:2b:62:22:
         c3:ce:21:e6:51:b3:fc:f6:e3:2b:be:f3:cd:0a:d7:97:50:07:
         e4:32:d9:80:81:dc:4c:01:b3:c3:9e:0d:29:de:c9:dc:4f:3d:
         c4:c5:3c:86:fb:fc:25:30:d8:42:94:03:74:c6:5d:bd:11:88:
         02:e7:de:18:b0:3c:5a:4c:7f:8f:8d:97:5f:09:94:f8:8e:5d:
         34:37:e2:0a:2c:8d:18:ed:4e:0d:7b:14:b4:c9:b6:12:99:33:
         5b:cd:f0:33:03:d8:d7:96:88:3e:72:a5:b4:50:b8:d8:3a:e4:
         e2:c3:ba:1c:10:87:33:66:90:16:f0:f4:bf:e9:61:77:97:9d:
         70:52:1e:0d:1e:b2:95:dd:84:cf:a1:39:d5:9e:10:12:31:26:
         84:bd:7b:8e:a3:4b:69:0b:d9:f3:64:f7:e5:24:b3:45:59:48:
         89:02:10:f2:7b:90:4f:26:34:19:6c:83:5b:91:b1:89:87:dd:
         56:11:64:fc:cc:83:c0:04:ba:7c:e2:16:33:13:52:3d:89:4a:
         0d:29:2d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:59:08 2025 by rpki-client