Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/88e05931-0c14-3925-9e24-ef2218634232.roa
File:                     88e05931-0c14-3925-9e24-ef2218634232.roa (raw, json)
Hash identifier:          irK/9pmC74zqkuCzW11YfrZf9wD4aO8BGi8cb1jz7ew=
Subject key identifier:   EE:CA:01:FE:35:6E:E5:AF:12:D8:C9:CE:2E:FD:46:DC:EC:C2:E9:50
Certificate issuer:       /CN=21846a97-ea37-4a3f-89db-5c537c294e8e
Certificate serial:       010D0C9F4328584B1F017BFE74C979EECFE2B7C0
Authority key identifier: F5:24:25:6D:75:45:45:38:2E:73:85:15:F9:D6:3A:37:69:A7:BB:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/88e05931-0c14-3925-9e24-ef2218634232.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     400678
IP address blocks:        2604:a6c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/21846a97-ea37-4a3f-89db-5c537c294e8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/21846a97-ea37-4a3f-89db-5c537c294e8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:7b:fe:74:c9:79:ee:cf:e2:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21846a97-ea37-4a3f-89db-5c537c294e8e
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=fedd94c3-cafe-4767-b54b-aa591f5fa956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:74:65:26:8a:15:c9:4f:bc:52:46:6b:6c:f7:
                    88:93:6e:29:d5:28:e0:92:b4:0f:23:7c:b8:b4:a4:
                    09:6d:b7:72:69:71:27:ff:b7:c0:28:40:65:7c:2b:
                    2f:ee:51:dc:86:56:7f:b0:58:86:b6:5c:67:17:51:
                    48:d9:78:ae:e5:84:03:9b:6a:14:0f:37:26:60:5e:
                    ee:ac:44:18:a5:9f:6b:a2:db:11:6f:a8:2e:67:5a:
                    e1:0a:67:ac:c3:c3:73:37:3a:c9:26:7d:60:fc:ae:
                    ce:f0:ca:1e:e1:0a:d5:4d:d0:f8:eb:90:a1:f6:3d:
                    fa:fa:ae:c2:fd:65:2a:8d:6b:57:bf:e6:84:d7:41:
                    f8:2a:63:c2:eb:55:ed:61:af:2b:50:49:e2:6f:62:
                    f7:cb:18:9e:8f:1d:f2:8a:0f:ab:bb:d1:7c:c4:c4:
                    0c:38:1e:24:d0:8e:ee:61:ea:da:d5:32:91:57:e3:
                    0c:b0:3b:5e:b4:96:12:ab:c0:72:fb:4b:02:a9:5b:
                    31:56:48:f5:72:ea:1f:3e:8b:d1:f8:7b:1d:e3:24:
                    32:90:63:67:8b:30:04:1f:92:25:5d:8c:22:e2:52:
                    7f:c4:d1:c1:fd:4c:e1:07:a5:bd:f2:68:9a:13:c4:
                    06:9a:2a:07:69:9e:17:ae:9c:ed:16:f6:61:27:12:
                    0b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CA:01:FE:35:6E:E5:AF:12:D8:C9:CE:2E:FD:46:DC:EC:C2:E9:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/88e05931-0c14-3925-9e24-ef2218634232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e/21846a97-ea37-4a3f-89db-5c537c294e8e.crl

            X509v3 Authority Key Identifier:
                keyid:F5:24:25:6D:75:45:45:38:2E:73:85:15:F9:D6:3A:37:69:A7:BB:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/21846a97-ea37-4a3f-89db-5c537c294e8e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:eb:d3:83:a0:bc:f6:d2:a6:55:ea:10:6d:15:15:96:56:93:
         c9:36:d0:f7:79:f1:b9:a6:88:64:4a:48:78:48:80:95:6b:f9:
         ca:09:76:3e:78:82:78:08:19:0e:a1:b8:c1:dd:d5:b7:12:e2:
         6a:ac:10:64:fd:fe:4e:51:3a:c3:25:aa:66:da:77:1c:e1:20:
         a1:b6:57:9c:17:fc:7b:ca:57:ad:e9:63:ed:36:1e:3b:58:0c:
         dd:ef:c8:9e:db:20:86:d8:fc:e5:3b:51:34:e0:24:b8:1f:ff:
         a9:95:16:2e:30:83:8a:97:15:59:51:c3:24:ef:ca:3a:00:03:
         ee:54:99:a7:03:6f:49:fd:19:e0:85:09:0a:7f:58:99:47:91:
         88:ba:a4:90:e6:9c:84:19:9c:4f:46:ba:ef:c4:b2:6b:c8:58:
         a9:61:8e:90:12:33:b6:df:7e:3c:4f:cc:f6:66:4c:ec:0d:4c:
         3b:61:73:30:b6:08:f4:43:56:5e:c0:65:0a:61:ff:fc:34:be:
         a0:8b:a0:63:c7:34:5e:4f:03:90:a9:29:88:d3:f9:ea:42:01:
         28:76:82:5c:3f:1c:a7:02:ed:5a:ed:26:44:75:a9:f0:da:77:
         c8:3e:25:94:cc:da:a3:88:ee:7f:61:85:38:14:01:c1:02:e2:
         18:0a:66:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:30:22 2025 by rpki-client