Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/6216c9cb-a038-37d4-9b6e-66b74218cccb.roa
File:                     6216c9cb-a038-37d4-9b6e-66b74218cccb.roa (raw, json)
Hash identifier:          yWe9HzDyMr0ghP3oQxehPOn8u/H26QojRWZwilWxEHU=
Subject key identifier:   D1:A0:72:F2:AB:8D:70:40:BD:C3:8C:15:F6:5A:17:AC:EB:61:EE:1A
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F4328584AC0163DF2EB88123F8CAD1F70
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/6216c9cb-a038-37d4-9b6e-66b74218cccb.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     19257
IP address blocks:        2605:1880::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:3d:f2:eb:88:12:3f:8c:ad:1f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=d474f232-ee0a-4633-9a92-54c2b2f3b607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1e:32:40:6b:4b:8f:6b:c1:f8:ec:78:80:2a:
                    22:61:12:25:38:9e:3e:0e:c8:34:68:38:97:64:1c:
                    0b:22:b0:91:5f:62:10:3b:f6:10:a1:af:64:8f:a9:
                    9c:e1:ea:d8:40:f7:f6:c5:a7:2b:ca:68:bf:e5:77:
                    fa:c3:6f:6b:38:de:f5:d3:6e:71:65:8c:c9:37:61:
                    da:10:b5:ce:de:ab:f9:8f:38:6b:aa:95:dc:87:ea:
                    4a:30:71:0f:ad:51:69:aa:21:1a:b2:02:f4:1f:d8:
                    86:74:57:c4:24:7c:de:ad:19:6c:12:e0:a6:3e:54:
                    bb:63:63:30:83:2b:82:d0:f1:55:17:c2:51:f2:b8:
                    65:8b:fc:9b:14:8a:ab:3b:d1:12:de:60:87:22:ea:
                    47:27:ee:a2:87:15:aa:6f:0a:aa:2b:52:1d:72:ce:
                    c7:ac:5c:73:e2:9c:cf:86:16:36:70:01:94:68:d9:
                    21:87:54:28:37:5c:b5:57:af:e6:28:16:99:bf:5f:
                    93:c3:4c:4a:bb:ff:c2:34:7d:22:7e:84:0a:90:7c:
                    0c:99:3b:05:3e:bc:52:c8:a6:01:e4:64:fc:18:61:
                    b5:9d:92:90:2f:a3:7e:c8:e4:68:06:4a:b3:d3:b3:
                    c6:fd:2e:2f:b3:cf:81:82:89:9b:90:e0:93:6b:24:
                    7b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A0:72:F2:AB:8D:70:40:BD:C3:8C:15:F6:5A:17:AC:EB:61:EE:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/6216c9cb-a038-37d4-9b6e-66b74218cccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:b3:9f:d9:61:bf:cc:91:9f:bb:6e:2f:44:4f:ea:35:90:64:
         1a:f8:d9:87:92:17:c6:94:45:43:72:41:50:8d:2f:fe:0b:b8:
         a8:01:33:d0:a0:83:21:87:97:8e:5f:10:47:d1:bd:44:4d:02:
         3e:68:b3:d5:6e:b1:6d:66:23:da:46:41:c9:f0:37:c9:42:cd:
         1d:0b:eb:ff:d4:2b:59:03:07:3d:44:a7:74:21:6a:74:6d:f1:
         c7:44:69:b0:b2:01:19:de:64:64:56:ad:c4:25:8c:cc:da:3b:
         5a:0f:2d:2e:89:69:6b:b2:14:b9:42:02:91:da:99:89:9f:2e:
         7a:c0:e3:e0:68:79:02:c6:79:b0:d4:1f:87:d6:e3:27:9c:44:
         40:40:f6:eb:ad:8d:9b:cf:a8:eb:82:3c:1a:2b:5f:8f:27:9a:
         20:a6:d5:49:41:ba:9f:9c:3a:00:86:01:e5:24:e6:23:5c:c5:
         42:e9:20:ba:0e:57:69:14:86:99:d7:2c:20:f8:8c:26:a0:e0:
         dc:fe:01:d8:1c:37:e8:f4:33:30:7f:fb:29:e6:a7:11:2e:c7:
         07:99:0d:fa:49:2d:78:0c:5d:50:da:49:d8:f7:db:89:5e:71:
         f5:cd:e3:fa:a2:c7:ef:9b:b4:ad:09:0b:d6:5d:5b:c9:88:fb:
         65:3b:59:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:11:56 2025 by rpki-client