Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4a64098-ec8a-3529-b631-58d3939a19f4.roa
File:                     b4a64098-ec8a-3529-b631-58d3939a19f4.roa (raw, json)
Hash identifier:          mndx3IZ72cenAyQYk7beZv6k3kjJG+7+GpPkxG3iM3s=
Subject key identifier:   C2:41:CC:31:A3:27:72:3B:80:78:D1:27:44:A7:D2:E2:FA:D8:C0:FC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5F3355F7756C4C2926108
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4a64098-ec8a-3529-b631-58d3939a19f4.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:1415:9000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:f3:35:5f:77:56:c4:c2:92:61:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=61e2548c-c999-4d9f-985a-10ffa21da855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:c5:82:a4:f5:a0:19:6d:33:91:ab:e4:9e:
                    77:c9:f7:be:27:fa:cc:57:60:d7:bd:e6:72:e0:91:
                    2f:f9:e5:e9:b1:00:6a:31:44:48:ad:db:c6:f0:49:
                    42:69:37:b4:e6:7c:f4:ea:aa:bb:1d:c4:97:3e:7a:
                    f2:da:2a:fb:9c:a1:bf:6d:26:6b:04:47:ae:9e:c1:
                    db:df:d8:9d:4f:5b:2c:8f:65:b9:dd:6a:ef:91:08:
                    ae:69:5f:50:80:f7:07:2b:98:86:7e:ec:ec:66:df:
                    9a:dd:5b:39:43:12:57:3e:b4:01:93:f0:22:2b:e4:
                    91:04:2a:28:37:49:2d:17:40:7e:50:8b:52:31:8d:
                    5a:a2:14:6b:6c:59:d1:cc:6a:5b:b6:db:37:b9:6a:
                    df:4c:4b:df:83:fa:e3:e3:ee:d3:e9:ee:0b:9c:8b:
                    c3:94:05:10:51:15:07:9b:c0:45:f4:50:01:16:83:
                    4e:fb:2f:5b:4c:66:93:2c:e2:83:f1:96:15:72:a6:
                    58:62:42:3f:ef:45:d3:63:23:d4:bd:9a:30:33:82:
                    24:d7:fc:60:ca:0a:3a:a2:3b:f9:c8:3f:1d:18:20:
                    19:c8:f7:77:c0:dc:3c:47:99:7e:24:e1:a5:e3:95:
                    0c:47:e1:43:6f:e8:82:fc:df:db:24:a6:34:06:56:
                    6c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:41:CC:31:A3:27:72:3B:80:78:D1:27:44:A7:D2:E2:FA:D8:C0:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4a64098-ec8a-3529-b631-58d3939a19f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1415:9000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:f5:f9:23:0b:5f:ea:50:cb:25:57:f6:f6:d5:af:75:c4:b0:
         d0:67:00:fd:9a:2b:99:bc:67:cc:9b:7d:59:f7:1b:8a:b2:40:
         19:1a:fe:6b:c2:7b:4b:ba:2d:ef:74:75:8c:17:1c:e9:26:13:
         54:73:3c:3c:12:b7:e1:60:19:f8:d1:97:50:cd:fe:ee:39:9d:
         61:b5:47:97:ed:9c:f3:21:db:db:df:94:cc:17:23:a5:1a:84:
         57:6f:6d:bb:bb:92:bc:1f:50:01:2c:d3:be:38:a8:7f:07:28:
         8c:92:56:f6:f3:58:6f:08:49:25:4f:75:48:fb:a2:00:0f:bf:
         bd:b7:e2:59:94:4c:bc:f0:5e:cf:60:63:d2:1a:f7:fa:4e:05:
         ca:95:f4:29:8a:35:9a:10:a4:93:2f:1a:40:8f:70:64:8c:bc:
         86:bc:b5:25:29:bd:7c:22:f2:cd:72:81:d3:3a:33:99:ed:3f:
         27:c5:82:ca:b2:17:7f:8d:41:7b:09:40:83:a3:b2:43:1d:ce:
         a7:30:0a:5c:38:49:c4:c8:04:44:9d:da:3d:88:20:d6:ef:4e:
         29:1d:25:58:47:d8:9e:13:85:2c:dc:86:3c:ff:98:01:21:26:
         f9:ec:d6:95:25:ef:2a:3d:67:3b:2b:73:b1:09:88:a9:76:ed:
         73:3d:64:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:56:03 2025 by rpki-client