Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37089dc3-8de8-38f9-9bcb-24a2c9d3f424.roa
File:                     37089dc3-8de8-38f9-9bcb-24a2c9d3f424.roa (raw, json)
Hash identifier:          TV2xnnZU6V4Bgb49tGseZ5GI1vQ7DpL8+I1kMr46WVI=
Subject key identifier:   C7:7B:A6:42:3D:22:0A:4C:19:FD:15:5A:42:DC:D9:E5:70:73:E7:EF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A68263ED854C5293727F58100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37089dc3-8de8-38f9-9bcb-24a2c9d3f424.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     20940
IP address blocks:        2600:1488:a460::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:3e:d8:54:c5:29:37:27:f5:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=605bb331-afb1-45e8-b24c-42fe8f04a695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:de:02:bc:c8:5c:65:6b:89:23:94:70:1c:
                    18:b9:78:9e:6f:96:a7:ed:d6:27:47:5c:88:9c:2d:
                    d9:81:d9:df:1d:a5:58:4d:57:0b:bd:15:6f:03:2a:
                    6e:c5:d6:43:31:ba:cb:a0:32:65:35:86:f3:b2:79:
                    14:1f:a0:9a:07:a7:4e:7f:c2:b1:99:44:11:ef:36:
                    d8:4a:dd:80:7a:ef:5a:5e:73:ad:74:e4:b4:85:ef:
                    f7:b4:bb:b6:fe:d7:ce:aa:25:32:91:ba:ff:ae:e9:
                    d0:2b:35:87:12:8f:41:75:44:58:21:3b:f1:9c:b5:
                    b3:3a:1c:69:10:00:57:35:30:c5:54:c1:5c:68:4e:
                    20:5d:28:5f:3c:4b:2c:69:c9:47:53:c2:72:de:e3:
                    01:dd:37:33:45:96:f0:5f:e0:04:37:bb:f1:83:52:
                    4f:7d:54:19:10:0c:c5:89:ba:e6:3c:95:21:c0:56:
                    9b:98:68:51:37:3f:03:71:fb:b6:8e:3f:e9:ed:8d:
                    f5:c6:5d:b5:2b:10:9f:8e:57:f0:bd:d5:a8:51:f1:
                    6a:8a:af:a2:e1:c9:27:4c:1e:0a:2d:15:5f:ad:05:
                    82:a8:5d:85:ad:51:7d:dc:2d:1b:25:ef:7e:6d:c2:
                    30:10:45:b1:f1:52:ab:fb:38:37:84:1a:dd:78:33:
                    88:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7B:A6:42:3D:22:0A:4C:19:FD:15:5A:42:DC:D9:E5:70:73:E7:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37089dc3-8de8-38f9-9bcb-24a2c9d3f424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:a460::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c9:47:64:2e:81:e6:3d:c8:a3:0d:fb:1d:f1:05:98:b9:56:
         08:5c:d2:0d:84:de:d8:09:b7:8a:58:1e:71:45:bd:99:f2:5e:
         42:28:62:f0:86:17:2c:42:ff:0f:73:40:60:76:44:ee:b9:b2:
         b1:17:77:e2:05:9e:1f:23:91:03:e7:9b:7d:8b:88:be:19:c1:
         2e:c8:1a:c9:78:af:16:aa:27:7a:67:ba:8a:d3:3d:89:8b:fb:
         2f:5d:64:dd:8d:3a:2a:9a:71:3c:78:b3:06:da:76:47:86:b0:
         9e:e5:ac:60:de:8c:e3:93:fc:10:95:d9:c7:53:19:b0:53:8c:
         d5:a1:f1:05:0b:5e:cd:67:a7:1a:7f:05:92:93:b0:d7:dd:04:
         96:4e:90:22:72:e5:44:70:ce:93:e4:c1:bf:1d:9a:19:1c:08:
         d8:e5:d0:11:af:25:ac:22:13:05:ef:52:2b:1a:74:19:5e:e2:
         18:e1:65:d8:ba:f5:24:77:3d:ce:b9:93:be:19:fa:0c:12:42:
         ef:76:5f:ad:a3:4a:91:17:e0:d7:b9:c0:26:22:cb:87:d8:58:
         22:05:ae:26:d5:2a:56:36:d7:61:46:80:ff:13:a9:d1:80:6c:
         a9:4b:66:97:a3:37:9a:95:4d:4c:39:5c:e1:d3:8a:1d:37:f3:
         0f:e1:cd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:39:06 2025 by rpki-client