Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54516f3e-04f5-3a4d-917f-f3e53b01c4bf.roa
File:                     54516f3e-04f5-3a4d-917f-f3e53b01c4bf.roa (raw, json)
Hash identifier:          SeTohE+TXWVmfOMqtRGFXknc3bD3N/E+bQhjErHjUuw=
Subject key identifier:   2B:8A:A4:4C:82:A4:D0:3B:AD:C8:7E:19:C3:92:61:6F:E7:94:73:B6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5F4CB6D309F8DDDA03180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54516f3e-04f5-3a4d-917f-f3e53b01c4bf.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:141c:800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:f4:cb:6d:30:9f:8d:dd:a0:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=099b1eaa-6039-43b2-9a86-9ab531ceff73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f2:12:fe:5d:8e:74:15:fb:29:ab:cc:57:b3:
                    5f:32:6b:7a:a7:29:a6:e8:01:eb:6e:f9:be:a7:0e:
                    c7:b1:74:05:be:a7:26:ff:cb:d7:eb:2e:c1:a0:59:
                    81:1d:e8:89:05:da:e0:4d:37:25:aa:23:0c:13:06:
                    54:6c:09:6b:6a:8e:94:af:07:60:8f:3f:2f:26:37:
                    f5:2c:54:3e:77:f4:52:f1:05:d8:dd:58:82:ff:ed:
                    b4:92:4e:98:6c:de:14:11:ee:cd:1b:22:5b:fb:ca:
                    0c:77:b3:c6:20:1f:dd:06:ef:ed:78:a4:f7:31:57:
                    33:5f:3b:73:4c:f1:05:36:5b:d9:09:24:41:4b:40:
                    60:bf:26:a3:5e:91:5b:bc:49:3e:0a:ab:5f:62:84:
                    c3:7f:c5:fc:8f:ee:8e:9e:14:d3:fd:1c:22:6b:73:
                    24:1c:c3:f7:6b:35:05:cc:29:8d:f3:7c:38:99:d3:
                    0e:a7:48:df:31:f0:b5:52:1b:e3:b8:71:9d:d9:ca:
                    91:e0:2d:78:66:a0:83:cf:f0:21:27:1a:7a:2e:16:
                    0b:af:05:67:6c:fa:0e:ab:40:f8:e2:b2:23:d5:fe:
                    63:c3:f4:47:56:30:6b:ed:1f:2d:ab:42:76:8c:0f:
                    f5:1a:83:06:fa:bc:d7:33:c3:0e:cc:64:b0:d6:5a:
                    4a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8A:A4:4C:82:A4:D0:3B:AD:C8:7E:19:C3:92:61:6F:E7:94:73:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/54516f3e-04f5-3a4d-917f-f3e53b01c4bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141c:800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ef:4f:dd:03:33:08:aa:bf:1a:b4:d3:c7:6d:52:4f:41:e0:
         af:4a:51:30:9e:7e:21:7f:2d:a3:b1:e5:32:9f:1c:59:c1:6c:
         42:a9:19:56:fa:67:3c:61:be:87:99:10:7a:ee:18:f8:8d:79:
         67:da:16:a2:70:f1:08:d5:6a:1e:3e:d3:f1:a5:ab:93:03:18:
         b0:cc:c2:01:8e:b9:2c:84:87:4e:41:09:85:f0:54:ed:41:1b:
         d5:c9:83:70:08:2c:59:ca:04:88:d1:5a:c3:bc:0d:5b:cb:ba:
         6d:39:cc:ef:a5:0d:c0:e1:03:30:49:af:09:0a:e6:bc:38:e8:
         83:ae:49:22:8c:19:a2:f8:f3:fa:b5:50:eb:be:83:93:77:a0:
         71:d1:ae:23:2a:8f:4d:a4:63:7b:96:8b:c3:ad:af:71:17:b5:
         09:ea:b0:22:29:01:51:9b:85:46:49:9c:61:6d:a2:78:ae:9e:
         58:1a:df:ea:ef:49:9f:d9:1b:36:b3:3d:d3:40:e6:7d:10:9e:
         29:40:90:45:da:33:d0:cc:bb:60:ab:9c:68:26:ed:a1:a4:ac:
         0c:75:90:28:b8:80:aa:a5:0e:ba:c5:6c:a0:74:22:29:94:ae:
         4b:2d:e5:f6:93:23:b2:48:eb:de:b3:40:db:33:5f:d0:d6:ae:
         b7:2e:42:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:23:57 2025 by rpki-client