Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c58e8d7b-a305-313b-b4cc-297f1831546b.roa
File:                     c58e8d7b-a305-313b-b4cc-297f1831546b.roa (raw, json)
Hash identifier:          Tegowvbq+zO//FLkYU5bnpvYH6bUJ7UiV7FiCK7R3X4=
Subject key identifier:   3E:40:95:86:B7:83:BA:F8:94:BA:B3:9A:42:76:E8:9E:1B:35:1F:1B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5E6067296A1F048FDCF84E40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c58e8d7b-a305-313b-b4cc-297f1831546b.roa
Signing time:             Tue 01 Jul 2025 01:00:50 +0000
ROA not before:           Tue 01 Jul 2025 01:00:50 +0000
ROA not after:            Mon 29 Sep 2025 01:00:50 +0000
asID:                     20940
IP address blocks:        2600:141b:1c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:60:67:29:6a:1f:04:8f:dc:f8:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 01:00:50 2025 GMT
            Not After : Sep 29 01:00:50 2025 GMT
        Subject: CN=892a8f52-3347-4423-ab9e-c1622b6a0513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:71:19:ff:93:56:11:2f:2c:75:f3:3d:62:14:
                    9c:4f:ac:7e:55:87:5e:9f:c0:02:c9:fe:d1:81:3d:
                    6f:c8:45:55:a3:6b:31:6c:7f:d1:db:31:11:b1:2f:
                    aa:3d:bd:cb:b0:2d:34:56:2f:9e:61:01:40:63:47:
                    1c:c1:28:d1:2d:3c:e2:e3:c1:aa:a2:98:7e:cb:b4:
                    e9:a0:b1:4c:2c:7a:f0:8d:bf:08:14:74:f7:8d:0a:
                    24:42:9b:98:f4:56:01:59:72:4e:af:40:2f:31:73:
                    42:37:79:85:7f:a7:4d:b1:37:f8:46:0d:84:64:70:
                    47:91:27:b8:95:82:d6:d5:5a:3c:01:55:aa:e8:fc:
                    bc:3e:8f:4f:29:7e:d0:aa:48:33:1b:0f:65:06:5d:
                    f5:40:d2:ca:04:61:1b:ab:9f:4a:97:33:b6:4a:98:
                    10:b3:29:ce:44:88:2a:63:8b:a0:80:43:96:4c:c5:
                    4a:76:2c:63:b2:96:bf:fd:2e:70:fe:46:19:3e:a1:
                    8c:39:48:0b:0e:d3:bc:56:0f:b4:23:c2:08:5d:07:
                    a8:aa:1f:55:2e:2b:2c:29:d9:04:0c:f4:0d:d6:19:
                    e8:e7:5d:b2:b3:82:ea:46:51:f5:c1:57:d3:ef:e8:
                    e8:9a:65:84:a4:a9:d1:32:d1:aa:d9:19:80:fd:02:
                    5a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:40:95:86:B7:83:BA:F8:94:BA:B3:9A:42:76:E8:9E:1B:35:1F:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c58e8d7b-a305-313b-b4cc-297f1831546b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:1c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:de:3c:5e:5d:7b:76:d9:cf:63:8c:7d:36:b0:f1:d3:75:f2:
         ea:57:ae:51:06:62:dc:d0:47:a4:f6:51:eb:97:19:5d:28:c9:
         62:bf:0d:e0:ca:56:cb:73:cc:3a:aa:13:52:c5:d6:f7:28:77:
         8c:5e:65:0a:18:04:4a:a2:ae:9b:22:96:46:c7:07:bd:cd:36:
         5e:49:b4:df:7a:62:f9:a0:91:c2:19:ed:6c:fe:ad:db:30:99:
         fe:29:24:27:a9:bf:16:9b:9a:06:f0:b5:c0:ab:2d:eb:98:0a:
         d4:f8:f9:d6:4d:30:86:82:11:9b:2b:e5:80:d7:a8:76:af:64:
         c3:19:0c:60:ce:ae:88:5b:7c:56:e0:d0:3e:7b:03:85:06:ac:
         6c:b5:79:5e:43:b1:71:a0:13:9e:fc:6c:46:ec:a4:25:7a:c0:
         f2:6c:ec:3f:78:27:e3:ca:53:7d:25:a8:f5:87:a7:7a:b0:2c:
         89:74:15:89:4a:98:f6:5b:1f:57:ae:6d:6f:fd:36:73:4c:fd:
         ad:51:9d:14:6c:a0:8f:d8:f3:a6:c0:9e:20:1a:96:f3:03:39:
         30:66:a2:45:8c:e8:a9:39:b1:11:02:1e:9c:c6:c6:f8:93:36:
         85:d0:0a:2b:d8:cf:e7:1e:fc:1d:95:6a:9e:a2:25:49:3e:ea:
         9e:b3:f4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:34:55 2025 by rpki-client