Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4ae2630-187f-3d2e-9d5a-1884ddec543f.roa
File:                     a4ae2630-187f-3d2e-9d5a-1884ddec543f.roa (raw, json)
Hash identifier:          J6ngA2BfyuQYyxYoMIy+j3lOq073fbLRyY6arId6rY4=
Subject key identifier:   6E:8F:C0:DA:A9:25:6C:BC:97:00:77:2C:23:04:26:87:76:F6:98:71
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AB22124CF4F354E87D654EE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4ae2630-187f-3d2e-9d5a-1884ddec543f.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     20940
IP address blocks:        2600:1419:a200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:24:cf:4f:35:4e:87:d6:54:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=af2a06b2-e91d-4653-a890-ebec3658e0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:af:76:dd:f9:79:3e:0b:da:f1:5b:fa:d6:29:
                    3b:11:1c:ba:d8:2e:87:88:31:4b:b7:5c:f3:a4:5c:
                    87:1d:74:28:a3:71:33:51:a2:45:89:72:ed:78:73:
                    e0:24:eb:14:fa:62:00:3e:77:59:a3:8f:b9:4d:57:
                    f5:84:26:e2:83:e9:0d:94:0c:6d:a1:f7:ec:6a:04:
                    64:64:e2:f5:a7:ac:98:07:3a:6b:8a:7e:b1:da:9a:
                    60:1e:d4:52:05:7d:d9:cf:20:bb:f0:90:2e:a7:15:
                    26:22:d8:cb:5c:1c:b3:d6:84:20:2c:6c:89:d6:a9:
                    9d:e1:b4:0d:59:e6:bb:4e:00:00:54:ed:e0:1c:44:
                    d7:36:90:b9:c6:ce:39:e8:45:bd:5a:7b:fc:c7:0c:
                    a0:e3:2d:07:f0:db:c8:14:bc:f0:d2:07:be:19:46:
                    d7:f0:88:b5:98:0b:84:02:46:00:cf:62:8d:07:d8:
                    c0:4c:0f:60:0f:ca:51:7c:0e:54:12:34:5c:9c:bf:
                    64:80:48:37:b1:01:54:f5:d1:ee:da:72:1f:2c:91:
                    7e:ad:d4:1a:c7:32:40:df:b5:76:50:b6:11:c6:92:
                    42:d5:f5:ec:1b:c9:9b:74:b0:29:7d:2f:37:16:46:
                    5b:59:32:da:0a:b0:f8:02:d6:12:5d:a4:91:27:2c:
                    84:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8F:C0:DA:A9:25:6C:BC:97:00:77:2C:23:04:26:87:76:F6:98:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4ae2630-187f-3d2e-9d5a-1884ddec543f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1419:a200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:10:ff:e6:3a:3a:95:c5:65:e4:39:4e:79:28:04:bd:f0:7f:
         e0:66:ca:5f:1c:6e:c8:5c:46:58:ed:eb:1c:20:f4:0c:5d:4c:
         c1:e6:12:de:20:01:fa:89:c8:ad:3e:49:ae:77:ef:8d:dd:5f:
         98:ae:0c:85:b9:6d:08:95:05:f4:79:27:76:a6:fc:cc:53:81:
         f2:ad:5a:a3:ec:38:01:42:27:11:90:58:40:00:5d:44:11:fd:
         20:0d:16:02:dd:5b:71:5f:a8:65:4c:65:15:d8:4a:5a:da:87:
         7c:d5:3c:24:b9:57:17:90:44:f6:39:06:95:5d:24:5a:8d:e8:
         6b:5d:10:09:fc:12:a4:13:b0:67:e7:b9:77:a0:9e:1b:f6:48:
         b1:37:15:21:99:af:38:db:af:1d:80:77:c0:e3:69:ea:de:8c:
         9e:2e:8e:50:96:39:89:4b:90:e7:84:d7:79:1f:00:df:86:a1:
         1f:66:10:2d:ad:db:d4:c0:c3:64:fe:0c:8e:ac:7d:fa:14:f6:
         81:6d:e4:2f:e4:cf:8b:48:d6:4b:20:ce:7f:b9:48:df:7d:b3:
         b5:f1:9e:45:4b:72:67:2c:f0:fd:ab:60:24:eb:11:12:6e:3c:
         24:fe:6d:d2:a5:40:76:e8:fe:e3:e3:3b:c1:e7:2e:3a:62:d2:
         2d:dc:ce:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:11 2025 by rpki-client