Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd85ff48-f188-31df-8d0c-118e66d9fbcf.roa
File:                     bd85ff48-f188-31df-8d0c-118e66d9fbcf.roa (raw, json)
Hash identifier:          MshjEZ52F7cqJojQ6qPbUV6FgolaPRVp2jto0/ZbkOw=
Subject key identifier:   8D:BD:AD:DF:47:C3:03:43:16:6F:C7:A7:74:77:4F:97:84:F5:F4:15
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5FCA3EF80C0139AFAE600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd85ff48-f188-31df-8d0c-118e66d9fbcf.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:1415:2c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:fc:a3:ef:80:c0:13:9a:fa:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=10e41950-3126-45ae-889c-4cd97791d83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b9:fa:2c:36:61:0c:2b:d2:22:1c:11:57:e4:
                    2b:a9:99:9d:8c:cb:31:f4:a1:68:aa:77:64:82:c2:
                    10:c2:49:a5:8c:71:80:87:2a:70:b4:a4:f8:70:b2:
                    dc:13:d3:82:8d:ac:90:e1:97:5f:84:2b:fd:57:22:
                    a3:f3:ed:23:87:77:5b:c6:69:6c:d6:a4:32:52:dc:
                    6d:19:f3:a6:6b:ac:b8:83:3f:6b:34:f0:30:22:b7:
                    f8:ca:46:61:75:7b:71:33:b6:7a:35:e4:33:e2:7c:
                    cf:5a:d1:fa:45:6e:ba:c7:85:8c:06:72:a9:54:56:
                    14:25:78:cb:1a:dc:27:65:55:c6:d1:c4:dd:60:c8:
                    2e:49:db:4e:f0:76:09:a3:96:76:49:12:ff:a0:e3:
                    2c:e0:eb:32:97:e7:63:c8:b3:14:ff:2e:dc:82:f0:
                    c6:f9:6d:a6:4a:d9:9b:8c:2b:c0:2a:1c:c1:c6:b9:
                    1f:f9:2f:0d:22:b8:e1:f0:05:f6:db:40:03:d1:14:
                    85:48:94:db:ae:e5:2b:22:48:f0:78:a0:58:35:2c:
                    3e:fb:18:a4:71:e0:2b:5b:b3:58:ec:10:b1:3f:74:
                    f6:16:bf:56:df:3a:7e:23:d2:6b:5e:0d:71:b6:66:
                    0d:bf:de:d8:26:46:59:34:79:98:4e:ee:1c:a0:3b:
                    ff:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BD:AD:DF:47:C3:03:43:16:6F:C7:A7:74:77:4F:97:84:F5:F4:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd85ff48-f188-31df-8d0c-118e66d9fbcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1415:2c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:0e:f9:2a:2e:ee:ae:07:b4:aa:0e:04:72:55:d5:21:9c:04:
         15:67:53:7f:4a:75:30:8a:cf:95:11:19:b7:55:06:21:15:ab:
         9a:7c:5b:20:6d:1f:d6:fc:a8:a1:0d:b5:22:04:a3:30:e2:66:
         f9:cb:7e:22:b3:81:84:4f:12:8e:36:ba:2c:66:9d:97:22:c3:
         55:ea:94:7c:5f:25:3b:52:ed:84:05:c7:be:99:7b:fc:af:39:
         4b:aa:79:a7:ea:42:b8:a6:55:a1:56:23:47:f0:ac:12:33:9b:
         90:e1:da:b1:37:7d:02:25:e6:89:9b:34:eb:22:be:a0:33:28:
         20:20:86:10:49:64:0b:a8:2a:33:85:ea:18:47:ac:07:69:d2:
         5a:23:4c:52:e7:a0:78:5d:0e:c3:79:1a:07:77:f9:35:5f:93:
         ed:05:3b:a2:18:70:dd:5e:50:06:b9:93:3e:37:7a:a8:2a:f4:
         ea:e0:88:46:7e:c9:cb:17:79:fd:69:4b:52:41:52:18:0e:cb:
         a6:22:3d:cb:6a:99:20:4b:9a:03:f6:78:2f:2d:fb:c5:32:5b:
         d5:f7:cd:04:27:46:b5:0a:80:0f:44:4d:10:01:e0:04:97:75:
         d3:97:74:e9:dc:ad:11:7b:e7:2e:06:2a:b9:8d:7a:d1:d1:e8:
         77:d8:14:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:27:42 2025 by rpki-client