Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5cfdcbc0-fbca-43c8-b97b-aa4a6ea74da1/69189645-54ec-386a-9629-31a6193c7947.roa
File:                     69189645-54ec-386a-9629-31a6193c7947.roa (raw, json)
Hash identifier:          qH3OGIxKSi743z0n3i4br8ldBqCleRNdy6znFiVBsbg=
Subject key identifier:   F2:D3:B5:81:88:4A:E9:A8:40:76:00:25:38:02:E8:BA:81:26:0F:D6
Certificate issuer:       /CN=5cfdcbc0-fbca-43c8-b97b-aa4a6ea74da1
Certificate serial:       010D0C9F4328584A9A6634A815E0D5360C5D3080
Authority key identifier: 6A:2E:5A:9E:0E:44:9A:53:0B:4F:EC:73:63:1E:9C:86:4D:D2:09:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5cfdcbc0-fbca-43c8-b97b-aa4a6ea74da1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5cfdcbc0-fbca-43c8-b97b-aa4a6ea74da1/69189645-54ec-386a-9629-31a6193c7947.roa
Signing time:             Tue 22 Jul 2025 13:01:03 +0000
ROA not before:           Tue 22 Jul 2025 13:01:03 +0000
ROA not after:            Mon 20 Oct 2025 13:01:03 +0000
asID:                     400958
IP address blocks:        2607:a840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5cfdcbc0-fbca-43c8-b97b-aa4a6ea74da1/5cfdcbc0-fbca-43c8-b97b-aa4a6ea74da1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5cfdcbc0-fbca-43c8-b97b-aa4a6ea74da1/5cfdcbc0-fbca-43c8-b97b-aa4a6ea74da1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5cfdcbc0-fbca-43c8-b97b-aa4a6ea74da1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:66:34:a8:15:e0:d5:36:0c:5d:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cfdcbc0-fbca-43c8-b97b-aa4a6ea74da1
        Validity
            Not Before: Jul 22 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=bafdc210-ab26-4766-adb5-c102e9a78a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5f:60:eb:31:59:cb:c9:20:35:c2:3c:d8:ba:
                    6d:56:9d:24:a7:ee:5c:5d:fb:fc:05:4e:d4:7d:98:
                    85:1e:cd:7d:b6:0f:8c:90:77:a2:5f:d2:58:b3:b3:
                    23:bb:cb:ae:ea:39:7a:c3:fc:c6:73:63:3c:88:fa:
                    b1:a2:0d:e4:41:da:12:ac:a4:3a:a6:87:42:60:8f:
                    45:b2:e3:1d:ca:8e:3e:21:1c:22:a0:e7:94:af:7b:
                    17:ec:1a:c5:6b:8d:e5:4e:db:75:18:65:a8:a2:35:
                    e9:c3:1c:3e:bb:b1:a9:ee:96:b1:de:64:8d:67:04:
                    39:77:0f:9b:b3:a9:0c:27:59:88:8f:11:8b:82:c3:
                    63:7a:e7:5f:1d:06:31:a4:da:13:8c:21:0f:6b:8b:
                    83:37:ce:39:9f:86:02:20:9e:06:d7:a0:c4:49:0e:
                    17:36:13:98:b3:53:6e:33:28:93:f6:39:aa:c1:9a:
                    85:aa:ec:e0:b7:23:d1:36:76:dd:31:b6:2a:e7:4f:
                    09:d2:ee:88:df:63:8c:d4:3c:e9:e0:bd:e9:b9:a8:
                    ab:27:08:7c:a3:95:34:f2:d2:3f:e1:9d:84:ca:e9:
                    93:70:d7:83:f9:e4:48:28:1b:07:78:19:c1:2f:98:
                    67:d2:68:da:72:86:a3:fa:6d:20:da:8c:dd:bf:eb:
                    ae:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D3:B5:81:88:4A:E9:A8:40:76:00:25:38:02:E8:BA:81:26:0F:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5cfdcbc0-fbca-43c8-b97b-aa4a6ea74da1/69189645-54ec-386a-9629-31a6193c7947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5cfdcbc0-fbca-43c8-b97b-aa4a6ea74da1/5cfdcbc0-fbca-43c8-b97b-aa4a6ea74da1.crl

            X509v3 Authority Key Identifier:
                keyid:6A:2E:5A:9E:0E:44:9A:53:0B:4F:EC:73:63:1E:9C:86:4D:D2:09:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5cfdcbc0-fbca-43c8-b97b-aa4a6ea74da1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:44:4e:f9:4e:67:6b:cf:c9:18:ee:23:d1:a1:f3:4b:64:c4:
         7f:71:aa:53:2d:ee:50:49:96:b1:2d:7b:37:14:37:37:bd:3f:
         76:dc:bf:62:af:56:1a:10:52:d9:bc:33:34:1c:cf:ec:7a:8d:
         c5:12:9d:70:b2:72:20:31:30:c6:2e:e5:23:2e:56:84:4a:6a:
         d2:86:a4:47:1f:65:6e:a8:96:a4:28:e2:14:89:52:4c:eb:15:
         0d:2f:7f:27:62:c2:2c:51:00:78:a4:e1:95:3a:1c:03:49:d9:
         21:54:a4:fd:d0:27:8e:04:05:6d:60:3f:5f:49:55:f3:6a:46:
         ba:a9:82:37:35:bd:48:90:ea:4c:95:a6:bd:19:e0:a2:28:c1:
         12:ad:75:ee:6a:93:aa:97:08:e7:f4:af:c1:71:63:0c:24:9a:
         a7:4d:79:c4:40:1c:ce:ca:53:4e:b0:d7:aa:ff:eb:a6:74:5b:
         9f:e1:08:86:e8:87:c7:68:a7:46:a8:e8:cc:2c:26:1c:38:ac:
         b7:88:6c:7c:3b:cc:f8:96:3c:9a:1c:c5:ce:cc:9c:3f:02:42:
         1d:cb:7c:d6:42:4a:37:fb:de:6e:37:a9:00:74:75:87:ab:e4:
         65:40:9a:4c:1f:60:73:84:ea:43:16:36:ef:66:61:ac:56:34:
         f9:ce:7d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:45:18 2025 by rpki-client