Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79f51c5b-285c-348c-bf0f-12f3cdcb2774.roa
File:                     79f51c5b-285c-348c-bf0f-12f3cdcb2774.roa (raw, json)
Hash identifier:          QQ6++1e5K3li3QRw0B79pCDmZZahD0+E+CSA+W3prro=
Subject key identifier:   04:F1:25:A8:E3:AF:45:06:0E:1D:BB:69:CE:A8:D6:BF:40:3C:BF:BA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6AF09A59D520C327A15F1920
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79f51c5b-285c-348c-bf0f-12f3cdcb2774.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     35994
IP address blocks:        2600:141b:7800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:9a:59:d5:20:c3:27:a1:5f:19:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=b32b9bed-ec7f-45cc-81fb-2a33377810d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:38:24:63:4e:ad:c4:3d:ea:22:57:c8:00:5c:
                    f1:90:66:e4:54:8d:8e:14:8a:40:db:6e:af:fb:d6:
                    5d:39:14:d7:ee:1e:24:30:dd:01:1b:80:19:d6:b2:
                    cc:c3:d0:3d:66:08:87:dd:b1:64:77:cc:bc:d2:36:
                    bc:1b:5b:60:00:3f:f3:50:30:cd:20:67:0d:42:cd:
                    5d:63:18:5d:8b:fa:19:74:89:ea:bc:61:e8:39:5a:
                    3e:46:05:fe:65:a2:94:64:28:76:5c:bd:91:c5:58:
                    83:79:0c:ea:1c:61:88:3f:bd:4b:c3:6b:cd:8d:ec:
                    f2:a8:06:f7:e4:d9:dc:66:83:9a:6f:a1:af:dc:0c:
                    b3:f7:fc:e8:da:66:43:39:40:b0:eb:dc:c0:7a:de:
                    36:1b:98:cc:6c:aa:5c:fe:15:6b:57:f0:16:b7:9c:
                    d2:6c:dc:91:81:73:ba:0c:84:ca:18:06:22:dc:5e:
                    95:07:9e:f9:06:7d:46:73:1a:80:2f:6c:bf:3f:5c:
                    92:9b:a4:67:2f:ca:da:58:31:e9:b7:c4:2b:ed:66:
                    cd:e7:31:a8:3c:b0:44:37:15:27:ab:f2:72:7a:8b:
                    80:af:2f:ae:cf:f2:79:38:1e:e2:9c:6a:9d:bb:97:
                    df:f8:6a:31:13:b8:cd:06:8c:c2:bd:da:29:04:3a:
                    f7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F1:25:A8:E3:AF:45:06:0E:1D:BB:69:CE:A8:D6:BF:40:3C:BF:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79f51c5b-285c-348c-bf0f-12f3cdcb2774.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:7800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:37:2a:3c:5d:0b:f7:4d:c1:d3:10:53:fd:47:18:d6:4e:3d:
         37:01:29:04:52:56:90:f3:8e:93:f9:fd:e1:a7:29:1e:20:01:
         24:ed:59:fe:29:20:6f:51:01:2a:10:63:08:6b:3b:b4:78:9b:
         a1:72:69:bc:3c:73:4a:23:bc:a6:79:51:a5:3c:f6:fe:fc:f6:
         1b:a0:69:85:43:71:4e:74:36:d0:33:0d:f5:20:16:79:2f:a7:
         dc:c2:70:16:1c:fb:db:e7:14:84:28:10:b9:f2:5a:b0:7b:bc:
         19:ce:77:a8:f4:6e:18:cb:29:ff:2d:cc:35:e5:3e:6a:3a:f7:
         86:c4:d1:aa:4e:d4:b6:5f:d3:5c:9c:11:70:15:18:8f:b3:c2:
         d7:70:a5:29:6a:d1:63:98:5d:49:ca:fe:70:0f:d7:b3:a5:d8:
         11:60:0c:c0:ab:9e:b8:db:71:05:9a:da:2a:db:4d:1a:bb:45:
         38:78:fc:cb:30:aa:7b:06:1d:c6:a9:69:e9:30:47:b9:d5:1a:
         83:ee:e1:4b:29:5a:65:eb:32:c1:e4:43:f7:f7:eb:b2:ce:d9:
         83:76:b8:61:73:df:67:85:57:c4:cc:57:32:b7:d5:b1:93:37:
         9d:35:58:66:c2:a6:6e:6c:83:0f:a9:5e:8f:a9:bc:75:cf:8a:
         44:db:73:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:38:49 2025 by rpki-client