Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/afbb9cae-6b2c-3d8c-9643-cc0c7053b42e.roa
File:                     afbb9cae-6b2c-3d8c-9643-cc0c7053b42e.roa (raw, json)
Hash identifier:          A7+iNKIApqsIHEEVIOCYWA4oH97aSNWx0RQ5JjxbYso=
Subject key identifier:   19:16:33:65:98:45:29:27:E4:9F:8F:9F:F6:F2:3B:79:43:9D:39:32
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584A6F207F08436EF308FE89B340
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/afbb9cae-6b2c-3d8c-9643-cc0c7053b42e.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     5769
IP address blocks:        2605:d6c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:7f:08:43:6e:f3:08:fe:89:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=a1217139-715b-4a6d-ae39-10aa2462e1b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e8:24:d8:99:66:14:0b:f6:bb:3b:f6:03:ef:
                    24:a3:ff:c0:48:56:41:cc:1a:22:7b:58:47:8e:89:
                    5f:15:16:84:81:5a:3a:b2:a6:d4:5a:e9:57:01:89:
                    5f:a9:aa:02:cc:27:e9:b4:72:69:61:53:4e:dc:45:
                    d7:b7:e9:d1:ba:97:0a:56:d7:2d:a8:75:a5:4a:6e:
                    84:f8:b6:47:90:63:49:3d:e6:7c:1b:34:ce:d0:72:
                    57:9e:0d:df:4b:ea:7c:2e:7c:04:dc:bf:26:64:3b:
                    b7:95:95:33:7b:35:44:7a:87:9c:f8:20:a2:4a:dd:
                    f9:64:4f:e3:26:06:19:b7:0d:59:73:9c:cd:3c:da:
                    1d:ef:2d:f0:bb:16:49:d1:2c:d8:e9:33:c2:cf:7d:
                    dc:60:8d:be:1c:9f:d0:73:d1:23:b8:4f:04:fe:b6:
                    2e:82:95:c9:17:51:67:2f:04:2e:72:b2:5a:a9:7c:
                    ce:c0:5b:5a:c4:35:7a:27:84:9a:85:79:c2:f5:ac:
                    25:2c:f1:b9:c1:45:1c:8c:62:1e:ac:ba:7e:fd:fb:
                    e5:61:88:c5:3f:ae:c6:2f:e4:4b:67:f7:27:90:9d:
                    af:d1:29:b6:fe:a5:01:6a:fa:9d:d7:4b:8e:45:71:
                    94:10:e3:06:44:4d:c9:51:a1:fb:3e:ac:bd:04:b8:
                    50:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:16:33:65:98:45:29:27:E4:9F:8F:9F:F6:F2:3B:79:43:9D:39:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/afbb9cae-6b2c-3d8c-9643-cc0c7053b42e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:d6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:8b:c4:0c:3b:a6:12:7f:6b:05:d4:47:71:04:ce:d4:22:44:
         d8:03:cb:f6:e9:25:4f:1b:12:50:14:a1:36:3c:a9:1c:d5:99:
         45:c4:b5:ad:de:7a:10:a9:86:64:f1:5c:17:bf:3c:37:2f:d3:
         22:0e:7d:79:f3:a6:bd:75:41:45:0a:9a:2e:d6:0e:0b:29:dc:
         63:2c:ca:53:fa:da:81:9f:a1:7c:1a:1f:94:b1:98:06:d6:42:
         a6:86:e2:c8:6f:3f:9a:f7:7c:bf:88:90:3a:55:aa:8e:17:38:
         f9:51:f2:2b:98:eb:ef:5e:13:09:c3:31:c3:03:fc:21:ab:95:
         db:43:0e:ef:81:5e:24:1a:85:44:b0:71:ff:d0:88:6b:14:f0:
         23:72:88:12:d4:15:41:a7:84:97:ab:1e:de:bd:25:ef:d5:6e:
         49:55:97:91:1f:18:7a:77:50:aa:28:a8:e4:82:61:b6:4b:36:
         75:d3:51:24:86:c4:a2:3e:85:da:b5:73:5c:62:b8:39:f6:e2:
         7c:16:3a:b1:d4:d8:42:11:f6:c4:0c:1a:a8:42:6a:93:7d:5d:
         32:a4:4d:d8:7e:df:e6:63:df:7f:32:51:fc:4b:7c:ff:4a:95:
         93:7a:bc:7d:db:41:b5:07:ba:38:df:fd:10:c5:3a:1a:c0:bc:
         d4:5a:e8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 05:03:25 2025 by rpki-client