Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/9ba9b769-b77e-317b-9a12-10b19dcf02d5.roa
File:                     9ba9b769-b77e-317b-9a12-10b19dcf02d5.roa (raw, json)
Hash identifier:          OmeqOAUFaTQLrdeelq1qYYNNznKfBLa/NFlwapZY6jw=
Subject key identifier:   69:44:73:D9:85:8F:16:4E:03:49:1A:DC:97:87:BB:01:1B:BF:77:41
Certificate issuer:       /CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec
Certificate serial:       010D0C9F4328584A7E7B580891EF8DBA89893D00
Authority key identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/9ba9b769-b77e-317b-9a12-10b19dcf02d5.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     63072
IP address blocks:        2605:1740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:58:08:91:ef:8d:ba:89:89:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=a660e587-93c0-4f27-b454-97b05bbc0f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:74:15:2e:52:7a:1f:27:be:d5:0e:d4:f7:a8:
                    55:f6:c6:55:bc:9f:04:ea:a6:e3:b9:23:6f:3a:67:
                    87:da:fc:fb:9b:f5:e6:19:5c:30:0f:5b:88:ea:09:
                    46:f3:cc:f8:6c:c7:2a:ca:1d:ab:88:a9:50:4b:4b:
                    29:79:a1:fe:90:c6:1f:b2:ec:13:40:0c:be:f7:ba:
                    15:fd:6e:89:55:f2:29:ad:aa:52:9b:24:af:b0:74:
                    fe:29:ea:d2:5f:0d:04:fe:48:4b:1b:1d:d5:ed:93:
                    f9:ea:31:88:ea:e5:72:ee:81:6c:be:48:6d:8e:f3:
                    84:fe:b9:76:5d:ce:44:b3:a9:b1:f5:d1:5d:c9:f9:
                    21:77:00:a6:da:94:9d:c9:19:fb:5b:ab:92:50:99:
                    ea:04:65:48:9d:98:a9:77:7c:6d:7b:df:e4:46:06:
                    b6:c9:be:59:d6:33:9c:b4:5f:df:1b:9d:9e:ed:0c:
                    5d:bb:d7:a6:a6:85:e9:fe:88:1e:e8:97:d2:6c:be:
                    c8:ee:05:2a:96:23:da:57:76:92:0a:a4:d1:1b:e0:
                    84:14:3d:af:7a:43:12:10:a7:d4:59:b7:a1:14:0d:
                    e7:09:70:cc:83:ab:cc:64:2c:12:fe:01:0b:86:88:
                    bd:ed:0c:04:41:3f:6b:f8:dd:ca:13:0c:d8:ad:59:
                    3f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:44:73:D9:85:8F:16:4E:03:49:1A:DC:97:87:BB:01:1B:BF:77:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/9ba9b769-b77e-317b-9a12-10b19dcf02d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl

            X509v3 Authority Key Identifier:
                keyid:D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:a4:54:9c:aa:2e:50:57:3b:7e:86:3c:6e:e1:7d:f5:47:e6:
         2e:2d:68:52:df:41:10:96:07:27:53:c0:dd:45:f2:c9:d0:a1:
         e3:e2:c3:b8:41:06:86:6c:f1:7b:26:a4:a1:ce:7b:db:78:0c:
         47:82:b0:64:9b:77:c3:91:80:8d:44:f3:1c:61:ea:5b:30:06:
         5f:5f:82:af:14:03:ce:ba:04:59:6d:50:e4:08:da:57:8b:0c:
         4b:4e:3b:e3:f9:6c:3c:e3:c6:92:28:5f:6f:63:51:f7:e3:d4:
         4c:da:9a:13:fa:d3:7a:1a:ff:a2:1a:aa:e2:18:96:ff:c8:75:
         3c:80:19:aa:56:4c:07:03:d4:1c:da:38:1a:59:27:05:81:77:
         45:41:6b:8f:e7:75:25:74:78:5b:e8:9b:86:8a:5f:42:41:36:
         59:8d:f8:fc:5e:c5:9f:04:9e:bb:6b:9d:89:19:61:f9:d0:f7:
         50:e8:b6:31:cc:91:06:63:d6:0a:4b:6b:0f:d6:f3:80:3f:a6:
         c3:68:41:07:a0:30:c4:0c:bb:c4:62:c1:87:b2:16:32:e7:c2:
         e0:f6:e3:de:9c:1d:11:62:4a:3a:7f:59:50:52:66:0a:12:3a:
         a4:71:14:df:34:54:9b:6b:9c:99:62:ee:c4:9e:14:9a:78:e7:
         74:67:6a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:11:15 2025 by rpki-client