Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2bf642a2-d07c-3c1f-84d7-221096477507.roa
File:                     2bf642a2-d07c-3c1f-84d7-221096477507.roa (raw, json)
Hash identifier:          KD5XQ/eKEf5OL4QHOu/EtEK1t79PKD2dudJv5r4J1eI=
Subject key identifier:   6F:5C:1A:8E:AD:7C:3C:6A:E8:86:C1:51:CC:3C:A0:DA:C5:57:37:40
Certificate issuer:       /CN=f6414b99-bb9f-492a-a1ac-935a49935d9d
Certificate serial:       010D0C9F4328584A6825FE7B23EA2701CED5FB40
Authority key identifier: 5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2bf642a2-d07c-3c1f-84d7-221096477507.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397122
IP address blocks:        2606:9080::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:fe:7b:23:ea:27:01:ce:d5:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6414b99-bb9f-492a-a1ac-935a49935d9d
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=c23ece1f-5b54-49bd-8276-2ca07edb160b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fd:00:72:47:c5:b3:ce:7c:f6:34:2a:03:37:
                    f7:d2:38:f4:b7:5c:4f:5e:e4:00:90:ca:60:e9:6f:
                    72:61:a0:33:07:8e:50:be:9b:cc:40:49:70:05:7e:
                    c7:4b:4f:25:b4:b8:07:9c:4b:08:e9:31:4f:21:b7:
                    53:68:9f:25:54:21:dc:66:0d:6e:a0:26:7a:33:a7:
                    5d:e8:b7:28:35:73:5b:33:54:20:20:61:12:19:9e:
                    c2:0e:04:98:70:85:10:59:6f:51:eb:b0:31:9b:de:
                    1d:cd:bc:3a:81:40:16:2b:b4:61:db:72:88:82:f2:
                    aa:03:a1:ce:6c:b9:dc:09:cc:61:61:79:fd:51:52:
                    02:49:b4:9d:4b:b1:c3:e6:1c:35:f7:e4:b3:ec:11:
                    42:db:d5:31:93:46:2c:0b:77:08:1e:10:2a:3e:9c:
                    92:3f:e3:67:be:81:38:61:52:7c:89:95:e6:10:11:
                    a1:9a:df:f5:9b:f5:89:8a:35:0a:64:a8:77:5c:b0:
                    1a:d6:46:24:2e:10:de:4b:4f:dd:9d:7e:d3:dc:9a:
                    38:06:cb:99:07:81:25:d7:bf:17:4e:e8:40:6f:c6:
                    b9:1b:27:ef:47:3a:a1:02:5e:08:e3:8d:9d:56:ef:
                    cb:55:cf:94:99:e9:3a:34:79:61:d8:e7:29:f8:c9:
                    00:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5C:1A:8E:AD:7C:3C:6A:E8:86:C1:51:CC:3C:A0:DA:C5:57:37:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/2bf642a2-d07c-3c1f-84d7-221096477507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl

            X509v3 Authority Key Identifier:
                keyid:5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9080::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:aa:9f:c8:21:60:69:b6:4c:71:5f:4c:10:75:8f:71:2a:40:
         a8:49:78:bb:7b:70:b3:bc:3f:db:c5:fa:43:d5:39:5c:99:f3:
         c5:4c:01:8c:9d:4c:64:ee:0f:d3:f9:80:99:41:3a:79:44:64:
         b9:44:fc:73:06:0c:24:5c:12:b6:ba:7a:2c:1c:89:df:8c:10:
         02:8e:ac:40:7b:95:0a:72:15:4a:c7:1a:bf:04:8f:36:11:c4:
         35:f3:4b:12:d6:b1:bd:99:b1:5c:d3:b7:c2:de:7c:48:93:77:
         b2:cb:ea:10:b3:b0:08:b5:5a:a3:92:62:45:a6:e9:9b:1f:27:
         b8:2c:ca:60:e5:4f:db:e2:30:94:e4:f3:0a:b4:a0:13:78:32:
         1a:41:d7:42:32:ac:bf:af:df:6e:b5:ef:d1:96:26:e9:52:03:
         0a:1d:ed:47:cc:84:ce:11:a1:de:60:c6:a8:07:72:3a:84:76:
         ae:4c:40:da:cd:18:d1:48:2f:1b:2c:a2:0a:b5:fd:c7:a8:e6:
         c0:97:e5:25:ad:ba:82:53:2e:10:b9:bf:c3:12:9d:88:de:77:
         bb:0b:4e:17:73:44:a4:0f:64:4f:21:db:a3:ba:b6:17:b4:2e:
         8e:f8:92:68:ad:d8:ef:59:b0:2f:80:34:93:16:11:7c:2b:b6:
         36:59:a0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:30:28 2025 by rpki-client