Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/d972ee7f-61ee-31e1-8931-5ca676557d95.roa
File:                     d972ee7f-61ee-31e1-8931-5ca676557d95.roa (raw, json)
Hash identifier:          2FyWxPGAOx5rNMI9wp5QsUlaYWAyiCqd1v38Qx6yqU4=
Subject key identifier:   CB:11:A3:B3:8D:C9:12:05:E1:34:E3:17:F8:62:5B:C3:74:BC:FF:A0
Certificate issuer:       /CN=2ecd23d0-396c-41fa-8f41-cd10a4083dbe
Certificate serial:       010D0C9F4328584A7D16037F3C74096864D9F880
Authority key identifier: 94:96:70:EC:F0:FA:E8:1A:15:46:3A:23:77:AD:AD:9E:46:AF:E1:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/d972ee7f-61ee-31e1-8931-5ca676557d95.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     11942
IP address blocks:        2606:200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:16:03:7f:3c:74:09:68:64:d9:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ecd23d0-396c-41fa-8f41-cd10a4083dbe
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=2b34c8a6-699d-4991-a0eb-dc76e4254beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:82:3c:29:90:74:5d:a1:67:d1:50:6c:e1:fd:
                    bc:e1:50:95:f4:0c:53:14:8a:bb:96:c2:1c:4c:4c:
                    55:d5:d7:0d:53:0e:fb:0c:ab:bc:f8:06:ae:51:08:
                    68:fc:cf:b1:8b:19:f3:4d:92:48:8e:f8:1b:4a:82:
                    32:c9:3c:3b:d2:f9:b4:4c:44:f6:7d:11:3f:d0:3c:
                    f4:f5:3d:7c:98:12:02:32:e1:a2:31:e9:b4:6f:5f:
                    00:46:39:d2:95:db:6a:bf:ba:f8:aa:b7:60:ec:55:
                    9f:72:3b:0c:eb:98:da:ef:7e:66:a4:cb:92:d8:f9:
                    cd:c0:ef:db:8f:0c:e3:bd:4f:d7:0e:de:aa:3e:00:
                    ff:89:20:0c:21:56:8e:cf:69:7d:ef:f3:23:c2:b8:
                    4c:05:4f:b2:44:cd:49:48:5b:2d:74:92:0a:1a:b0:
                    cd:80:7f:1d:cb:76:9c:a1:a0:14:bf:d9:89:2f:ba:
                    95:13:c5:f6:5a:76:f9:1b:9e:be:88:e3:a6:cc:9f:
                    9d:4e:17:a8:bd:08:f9:67:e5:2f:42:0d:1f:87:ff:
                    d7:18:5a:64:d3:c0:5a:c1:30:4e:ba:9c:34:d3:58:
                    e0:b3:2c:c9:50:31:53:c2:89:fe:c6:fe:d8:b7:bb:
                    74:24:23:5a:22:82:dd:85:c9:45:30:57:e3:1e:57:
                    4d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:11:A3:B3:8D:C9:12:05:E1:34:E3:17:F8:62:5B:C3:74:BC:FF:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/d972ee7f-61ee-31e1-8931-5ca676557d95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.crl

            X509v3 Authority Key Identifier:
                keyid:94:96:70:EC:F0:FA:E8:1A:15:46:3A:23:77:AD:AD:9E:46:AF:E1:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:99:bb:61:5b:df:c2:1b:5c:be:3a:27:25:60:3e:af:8e:4b:
         71:4e:dd:3e:13:3a:99:8e:63:9b:36:66:68:b4:e4:64:f8:be:
         fc:6a:95:c7:52:47:5b:5e:cf:4a:53:45:d9:4f:5f:62:f1:ec:
         d0:58:a6:a0:44:82:f6:9a:ba:43:a5:3f:a7:db:75:5b:3b:9d:
         62:bf:bf:e2:ed:5b:3c:2a:1f:14:dc:12:47:2b:61:e7:bb:6c:
         a1:93:24:49:00:4e:13:bb:91:09:eb:f9:b3:c2:d2:3c:ea:d8:
         f9:10:bd:85:17:15:bb:6e:f2:b7:f6:07:66:53:6e:7b:09:20:
         36:b2:29:93:09:62:c7:a0:ab:de:a5:00:d0:5a:e2:38:2a:9d:
         3f:5a:c6:72:20:c5:34:07:b8:f6:da:c1:a4:41:d8:5e:29:57:
         a8:ec:74:af:ba:99:6c:05:fc:d6:5c:65:f7:ac:60:bb:d1:e0:
         f7:82:e7:13:af:82:ad:d8:8c:84:9d:7b:5e:9d:e8:9b:8f:c9:
         a1:3b:6d:48:38:ac:c9:91:c5:6b:1e:e7:25:ac:d9:50:73:71:
         ad:50:b8:68:66:ef:51:58:d5:3c:8d:74:70:d3:c1:19:20:82:
         bb:bf:87:9b:6e:3c:e5:a1:5d:c7:af:e6:2b:2e:67:1d:51:4a:
         7e:57:5e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:43 2025 by rpki-client