Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0cfbcbc1-b4b7-3a4a-885c-45531eec26eb.roa
File:                     0cfbcbc1-b4b7-3a4a-885c-45531eec26eb.roa (raw, json)
Hash identifier:          1/F4dZcqfMzZTXhAo3NS8/2FObFD//H84aoaXlIHprg=
Subject key identifier:   97:EC:F5:8C:F4:91:23:30:61:85:5D:79:B4:A7:0D:DD:DD:16:4E:04
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6C55E67DC3B442F504CA5A40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0cfbcbc1-b4b7-3a4a-885c-45531eec26eb.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     24319
IP address blocks:        2600:1417:1a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:e6:7d:c3:b4:42:f5:04:ca:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=9d6c8b23-1f31-4ecc-a140-772f38abaf2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bb:1c:64:51:04:bc:fb:ee:e3:f4:d5:1d:bc:
                    63:b2:54:3d:31:8b:46:1f:3f:c9:80:89:72:66:8c:
                    48:5b:98:73:20:aa:3e:2d:7e:36:30:53:78:de:b3:
                    5b:ed:7b:96:7d:8e:b1:f9:50:79:13:60:fa:d4:fa:
                    9b:0f:b3:2e:03:41:45:03:ee:14:32:d6:be:2e:8b:
                    7a:93:2e:cd:72:08:8c:b1:51:45:df:48:e9:da:ef:
                    69:c6:3e:44:a2:da:2b:dc:1b:7a:99:8d:d6:87:03:
                    28:b4:82:17:18:75:8c:d9:ae:b0:fc:10:ef:93:2c:
                    eb:6e:8c:c4:3c:13:ea:ca:e6:e0:f1:a3:85:ea:3c:
                    7f:9d:9d:01:b2:e3:93:9f:d7:d0:2e:a9:ce:ff:6b:
                    ff:f8:be:c7:10:f1:d0:e2:65:b9:83:1f:0a:6c:4e:
                    b6:ae:97:34:44:f5:04:de:cb:4c:ca:19:74:56:c7:
                    cf:0a:3c:5b:2c:b5:09:ba:af:80:37:2e:81:8c:86:
                    64:b9:49:87:07:3e:44:86:9b:ba:f2:38:44:c5:ff:
                    a1:bc:b1:99:b0:ce:be:97:1a:4b:84:26:87:a8:7c:
                    bf:c5:ae:c5:ae:bf:b6:b5:73:c0:99:80:a0:d8:3d:
                    e8:4a:c3:dc:5b:ca:66:85:22:d4:f3:93:cc:a8:ce:
                    53:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EC:F5:8C:F4:91:23:30:61:85:5D:79:B4:A7:0D:DD:DD:16:4E:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0cfbcbc1-b4b7-3a4a-885c-45531eec26eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:bb:8e:a7:5e:1f:55:79:9f:8f:5e:37:66:9b:e5:1f:4d:9f:
         d5:94:bf:3c:68:a0:5e:a1:f1:8f:25:6b:7e:a9:0c:f1:79:41:
         2a:e0:8a:fa:f9:bf:ae:e3:fb:f0:02:79:3d:dc:0c:94:f9:eb:
         ed:94:6d:dd:66:e2:cc:1b:cc:c6:12:27:3b:0c:4e:b9:cc:fb:
         ad:4c:c1:39:0c:63:c5:82:34:80:be:65:87:cb:06:68:b6:d9:
         c5:f5:a6:ce:60:68:cb:36:72:64:6a:fe:ab:72:75:e6:f4:3d:
         0c:a8:f5:58:5e:3d:0b:50:2b:70:31:8e:0d:6f:c2:6c:68:7c:
         d4:ab:d1:fb:6d:7f:b3:65:07:bd:25:46:03:8d:ae:c8:ea:0a:
         bf:c5:93:9b:f4:29:d2:38:fc:c6:73:ec:d5:ad:91:bf:62:4f:
         cf:b2:3e:bb:b6:63:d3:2d:a9:59:90:62:ec:21:5e:26:c4:13:
         75:a6:ee:06:14:a6:c4:7a:51:81:95:de:cf:a7:e8:ec:98:f9:
         ae:53:cb:36:73:7c:a5:8d:fd:ed:b1:04:cc:e9:6b:c2:ea:34:
         81:d1:99:6c:ad:b3:33:58:b1:e3:32:03:a1:38:56:0b:d6:9f:
         c4:b2:05:8d:ea:e1:4d:24:52:e0:5b:02:7e:f0:4b:02:a9:38:
         e8:09:7d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:32:49 2025 by rpki-client