Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c32e1b2c-9b98-380e-bd08-ad6f9e24ccca.roa
File:                     c32e1b2c-9b98-380e-bd08-ad6f9e24ccca.roa (raw, json)
Hash identifier:          NYQ+aDBXFLrl7nG4dM6J6M2CFWTkivbeiDpWr+fbzpQ=
Subject key identifier:   36:04:40:1F:0A:4C:7C:CD:C6:96:4A:7D:C8:3D:10:8E:5F:8F:C7:66
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584B4FDC7AD36D547D83520146E0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c32e1b2c-9b98-380e-bd08-ad6f9e24ccca.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     174
IP address blocks:        2601:2008::/29 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:7a:d3:6d:54:7d:83:52:01:46:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=386191ce-3e6f-475e-8b59-73cb9d608e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:a1:0f:12:ab:15:f2:28:b6:63:dd:cb:28:
                    6b:5b:49:1e:fb:5b:67:36:92:07:96:fa:f7:05:38:
                    f9:1c:d2:f6:8d:a9:50:cd:60:8d:2e:61:8b:b1:c9:
                    df:b1:8f:8b:88:a9:fe:1d:e6:ae:b6:ae:e3:b4:81:
                    61:81:0b:fb:f2:09:37:84:46:c9:4d:d9:52:ea:a3:
                    7f:77:77:73:95:b6:87:3c:97:70:8d:9e:a7:0b:f8:
                    02:98:14:12:d4:a4:af:76:d3:65:7c:a0:8c:4a:94:
                    8f:32:6f:bd:66:55:68:0e:c8:67:54:98:7a:63:d1:
                    55:c5:1e:5c:05:87:27:ad:ec:45:64:30:aa:0a:7e:
                    2f:4d:2c:cc:9d:fe:a0:17:be:71:e7:ed:ee:6c:80:
                    60:92:92:8e:4a:81:f6:f4:3b:fd:19:f7:7c:69:e6:
                    33:73:ac:a9:3d:cd:f9:48:b3:79:ca:61:10:f0:5b:
                    72:aa:f2:39:6c:45:88:8e:1b:17:1b:ca:de:b9:97:
                    dd:6f:87:fe:05:e2:c8:03:81:43:e5:b6:d5:7d:60:
                    33:0b:06:b9:a3:45:4f:81:b4:d5:62:c4:99:f3:f6:
                    e0:81:55:ce:51:bc:03:48:66:22:d7:a8:63:b0:9a:
                    29:4a:cf:0d:51:69:e6:96:10:95:c5:1f:14:21:d8:
                    38:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:04:40:1F:0A:4C:7C:CD:C6:96:4A:7D:C8:3D:10:8E:5F:8F:C7:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c32e1b2c-9b98-380e-bd08-ad6f9e24ccca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:2008::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:3c:f2:79:40:1f:5b:51:9a:68:55:f9:6e:e7:ff:62:48:02:
         e0:12:16:91:60:bd:a6:6a:7d:ee:7c:69:de:8b:df:1f:f6:e7:
         cf:b3:21:3a:a0:e3:6c:2c:47:7e:f8:a8:0a:eb:ad:b5:87:63:
         44:5d:38:34:ce:08:ec:39:d5:7a:d5:51:de:f0:d1:f6:b5:09:
         ff:73:64:80:e0:f0:c0:69:c9:40:68:f0:64:a8:f7:d9:fb:6e:
         c7:56:d4:f0:9c:59:84:80:9f:13:06:cf:cd:a1:25:b8:05:8a:
         31:9e:a7:f5:62:1c:ee:1c:94:e8:ca:1a:88:69:d8:95:91:2d:
         7d:0c:1a:c1:8c:0f:ed:52:4b:63:7f:5a:52:a1:a9:eb:fe:4a:
         11:3f:ee:c2:cf:b9:99:ea:eb:78:c5:e2:84:71:00:0c:ac:d6:
         80:8e:fc:44:d0:0b:6c:16:f2:47:4a:16:d9:c8:b9:9c:92:63:
         f3:08:3d:e8:e0:cb:3c:36:20:e2:b2:1a:e5:48:0d:61:33:5e:
         16:8b:5c:da:40:a2:32:b5:33:d0:5a:21:09:43:65:c0:ca:43:
         3b:7b:fe:51:68:fb:35:29:7e:f0:0a:46:47:a1:4e:6c:04:ed:
         02:b4:93:bb:a2:f7:3f:10:30:94:32:c1:c8:45:ad:a1:c8:de:
         ad:2c:5a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:11:12 2025 by rpki-client