Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/2329de53-b409-3291-990b-01313cf69c68.roa
File:                     2329de53-b409-3291-990b-01313cf69c68.roa (raw, json)
Hash identifier:          zbePen+6oCJP1B3WwOAjS9Ck1avKUtstLt7ulQumj4U=
Subject key identifier:   75:91:A2:A7:D1:7E:9E:8D:43:75:14:4D:1F:F4:6A:12:8B:36:19:F1
Certificate issuer:       /CN=969446db-6a2e-47bc-a33b-2dd883bfb899
Certificate serial:       010D0C9F4328584AAB2659502375DEB384A2F6C0
Authority key identifier: 8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/2329de53-b409-3291-990b-01313cf69c68.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     33309
IP address blocks:        2620:106:8000::/44 maxlen: 44
                          2620:106:8000::/48 maxlen: 48
                          2620:106:8001::/48 maxlen: 48
                          2620:106:8002::/48 maxlen: 48
                          2620:106:8003::/48 maxlen: 48
                          2620:106:8004::/48 maxlen: 48
                          2620:106:8005::/48 maxlen: 48
                          2620:106:8006::/48 maxlen: 48
                          2620:106:8007::/48 maxlen: 48
                          2620:106:8008::/48 maxlen: 48
                          2620:106:8009::/48 maxlen: 48
                          2620:106:800a::/48 maxlen: 48
                          2620:106:800b::/48 maxlen: 48
                          2620:106:800c::/48 maxlen: 48
                          2620:106:800d::/48 maxlen: 48
                          2620:106:800e::/48 maxlen: 48
                          2620:106:800f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:59:50:23:75:de:b3:84:a2:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969446db-6a2e-47bc-a33b-2dd883bfb899
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=8c2a3806-c6db-4c21-80c3-ec0edfed1a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:84:8d:07:2c:dc:57:e7:25:df:d1:69:a6:
                    2c:ef:81:7b:7d:f5:90:93:a3:75:15:b6:0c:b5:9c:
                    6d:18:9e:b3:7f:c5:23:f9:47:3c:d6:1f:e8:b3:fa:
                    03:3c:ad:07:b9:be:96:28:d4:2a:ea:be:df:8d:fa:
                    b2:70:72:bc:51:4b:2a:5a:f9:49:59:f3:4a:80:aa:
                    e6:96:d3:27:8c:99:9c:68:2c:52:79:84:e2:2f:a4:
                    f0:60:61:85:33:8e:cc:d3:f1:76:0e:31:03:f6:9e:
                    f1:3a:00:18:6d:6b:2a:54:3f:d3:84:7e:6b:71:70:
                    33:aa:b1:16:60:12:d6:cb:1a:a2:0c:b6:90:72:f2:
                    52:6c:c9:6b:c4:d3:5f:8b:84:c5:29:88:0f:71:99:
                    5c:6b:e9:70:32:02:91:28:10:ce:4d:8e:8b:4f:8c:
                    fe:48:04:29:07:fa:1c:e4:b8:09:42:63:65:18:35:
                    88:83:df:6e:ae:d7:13:ea:82:69:93:7d:68:69:0e:
                    a4:f0:5e:f2:db:f5:95:d2:49:0f:39:2e:e1:1e:3c:
                    82:90:78:84:23:96:a0:07:f5:59:c7:e9:5e:12:40:
                    3e:fa:c0:17:d4:3a:17:ea:3a:51:4b:80:62:8a:b9:
                    7d:80:b7:db:d1:2c:2b:f6:d3:99:03:82:6a:86:7f:
                    b8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:91:A2:A7:D1:7E:9E:8D:43:75:14:4D:1F:F4:6A:12:8B:36:19:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/2329de53-b409-3291-990b-01313cf69c68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl

            X509v3 Authority Key Identifier:
                keyid:8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:106:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:14:51:4e:d6:54:32:9d:c9:66:48:97:20:72:2c:48:ec:aa:
         cf:47:7f:5a:18:3d:b8:a4:1c:01:65:65:94:bc:1c:73:22:98:
         70:d1:58:e3:8e:1d:62:9e:8d:44:d4:8c:d1:2c:59:53:6f:45:
         b2:1f:a3:c4:e2:b0:fd:26:d6:3c:14:b4:44:5d:ed:0e:aa:63:
         b0:ff:71:f0:a3:87:8c:cf:13:b7:0c:e7:7a:dd:84:8c:48:f4:
         05:da:7b:48:4d:83:70:04:4b:c8:78:d7:81:fe:c2:32:e7:e4:
         b1:fc:dd:9e:5d:bb:17:a1:29:c0:00:bb:e8:9b:11:97:3a:f7:
         94:76:d4:82:6b:8e:d2:a8:6c:2b:99:fe:e0:02:11:d2:f8:89:
         41:04:81:3f:79:a8:67:d0:25:c6:f3:a3:d9:c6:09:9c:51:38:
         22:39:b7:ce:34:1c:81:94:d6:2b:81:03:7a:8f:b6:6e:54:85:
         a5:47:5c:a7:27:15:eb:03:32:43:ff:92:b6:b1:5f:9c:25:01:
         b2:b2:12:91:c4:95:b9:e6:86:73:ca:97:22:73:c7:ae:20:30:
         b2:2d:da:2d:4c:61:d6:03:da:60:c2:a8:1a:4f:5a:35:80:53:
         7b:6c:34:7f:95:a7:c9:25:d8:f1:fc:f3:8a:44:e6:da:cc:03:
         96:3c:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:20:34 2025 by rpki-client