Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/54cbd242-1ded-336d-a25c-aa1cfcf24f83.roa
File:                     54cbd242-1ded-336d-a25c-aa1cfcf24f83.roa (raw, json)
Hash identifier:          87KH/bP1qxNHHPosudrDNgvHzyelIxxQiQwcK1gPTUw=
Subject key identifier:   49:C7:0B:19:36:47:45:BC:5E:3D:5F:5A:82:B8:35:F7:F2:BD:D1:FD
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584A89A61BD3170A9F40F4C96000
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/54cbd242-1ded-336d-a25c-aa1cfcf24f83.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     13213
IP address blocks:        2607:6b80:59::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:1b:d3:17:0a:9f:40:f4:c9:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=566afdb2-b429-459b-8bdc-f2cfda56a31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e9:ed:ba:cc:3d:d9:7d:91:ae:e4:52:b1:1b:
                    f9:04:5e:0d:a6:82:6c:c8:9b:67:f1:fa:88:c4:e0:
                    77:88:0a:f9:0e:ed:81:bb:ed:ea:18:05:5d:43:9e:
                    06:55:9e:db:33:46:71:0c:16:16:e6:9d:81:48:66:
                    e5:fa:4f:87:51:91:0f:86:dd:ce:f2:dd:40:d3:c0:
                    9a:68:82:cc:12:58:67:9a:0b:8b:d2:2e:27:cf:ff:
                    47:5a:67:18:ea:4e:26:ac:b1:3a:b3:b7:ad:c3:ad:
                    01:8b:7a:15:e0:97:f2:0e:22:7c:8e:cb:0b:fc:55:
                    ea:1b:24:42:c5:4b:5f:58:40:43:23:eb:55:5a:93:
                    0d:f5:49:38:3a:8a:1f:fd:82:9a:84:02:e8:5b:a6:
                    22:d7:db:3d:f7:9a:5c:54:ad:bd:70:d1:49:7c:68:
                    33:70:13:63:bf:ea:2f:12:3b:75:1a:05:46:a4:5a:
                    87:2c:3d:1b:07:43:13:13:26:b4:d3:6d:59:ac:94:
                    f5:46:5d:4d:2b:d2:3d:8c:18:f3:c7:28:0b:ea:88:
                    d3:c0:9e:dd:8e:df:c2:99:18:7c:12:81:6c:db:20:
                    f7:64:c0:39:6e:f0:25:fa:c5:e8:0b:60:68:e0:7d:
                    29:0c:c2:7b:c9:e1:56:f1:e5:e4:57:08:91:08:5d:
                    d1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C7:0B:19:36:47:45:BC:5E:3D:5F:5A:82:B8:35:F7:F2:BD:D1:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/54cbd242-1ded-336d-a25c-aa1cfcf24f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:59::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:5f:8a:3e:55:ff:9f:7d:79:dc:2e:00:21:a4:0f:67:83:f3:
         b9:12:70:be:c6:b8:fe:9c:e8:5d:f9:ab:bc:be:92:47:54:ee:
         be:bb:a9:14:e8:5b:ee:58:08:b4:9a:f4:8d:34:df:d0:9e:e1:
         92:1f:f4:8c:6a:99:ce:f7:3a:33:a6:da:10:d6:71:7b:f2:75:
         16:d6:cd:66:74:81:c8:55:87:ae:9b:5a:e2:e9:9b:32:46:13:
         90:87:dd:24:00:d1:fc:cc:5a:2c:ed:0d:90:8a:03:5b:aa:86:
         5f:59:d3:0b:4d:9a:19:48:94:30:6a:e2:bf:47:d8:75:58:c7:
         fd:42:21:92:1c:cb:ce:8c:52:b7:d0:3a:ab:d7:c7:2b:8a:f2:
         38:4b:9d:77:60:43:07:38:a7:67:c7:de:75:ef:ed:3b:99:97:
         c1:1d:13:a8:e2:b8:cf:43:8f:f9:7e:2a:97:6f:72:fe:f1:bd:
         11:0f:74:3e:2d:06:16:38:97:5c:7c:fb:b5:ac:49:cc:db:20:
         45:8e:65:50:91:33:0c:a7:ba:a1:75:84:1d:77:65:ed:39:5f:
         99:73:30:f8:22:19:6f:cc:a9:df:0a:99:7e:0c:d9:b0:ec:3c:
         d4:dc:88:48:12:aa:34:b8:85:1b:2f:ff:c6:b0:b8:0b:21:7d:
         55:22:6a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:23:26 2025 by rpki-client