Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c152e9-ccc0-3684-a5f3-e11230c109ae.roa
File:                     d5c152e9-ccc0-3684-a5f3-e11230c109ae.roa (raw, json)
Hash identifier:          WbSP5XAuMsc92LCbu39Z49kityn/6KMiu1kQUnJckjg=
Subject key identifier:   42:F1:10:51:86:DB:B8:C7:47:E7:3B:FA:29:73:B1:DE:A4:01:0B:43
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A6AF099C4391821D62EFE2CC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c152e9-ccc0-3684-a5f3-e11230c109ae.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     35994
IP address blocks:        2600:1408:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:99:c4:39:18:21:d6:2e:fe:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=46f4632c-e2ec-4489-b4f2-8f23ed9ab9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:45:9b:86:b8:1c:bf:76:7c:b9:2d:63:1d:a7:
                    1e:8b:e1:39:08:55:42:9e:fd:72:ea:0d:98:37:97:
                    e9:5d:88:40:ab:72:1c:06:26:7a:d1:29:9d:17:4b:
                    f0:9f:50:c0:9b:d3:d1:b4:71:bb:ec:91:07:07:e0:
                    2a:f6:a0:8f:62:e9:a2:f3:85:b1:19:a4:4a:d3:7f:
                    56:1e:a6:e7:8e:52:05:d6:26:01:bf:e9:d0:3e:d9:
                    c5:47:d9:f9:cf:33:18:39:15:ed:72:6d:05:0a:34:
                    7c:e9:1a:fb:14:67:0d:09:a6:d0:1a:4b:72:6f:f5:
                    7d:1c:39:dc:fa:07:7b:d5:81:fa:54:81:e7:d7:ce:
                    05:50:c4:58:30:9e:43:1b:ef:9a:6e:7c:bc:5f:ba:
                    d2:78:50:71:8d:2b:c5:94:a8:28:81:cc:16:45:5c:
                    43:70:3a:b3:b3:51:22:ff:98:75:27:fb:b9:b9:2d:
                    42:d2:0a:4c:65:44:25:58:28:a2:f6:ed:13:0f:47:
                    96:23:75:93:97:b5:3d:95:07:e5:6c:1a:a2:1b:71:
                    49:6e:74:81:91:ce:a4:24:2f:9f:e7:e4:af:9c:64:
                    f2:b9:f8:6d:b3:38:1f:89:f5:f4:83:a6:35:7d:b8:
                    60:0a:2c:33:b2:1e:2e:a9:0e:b5:c8:5b:53:42:78:
                    52:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F1:10:51:86:DB:B8:C7:47:E7:3B:FA:29:73:B1:DE:A4:01:0B:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c152e9-ccc0-3684-a5f3-e11230c109ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1408:b000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:57:8b:ef:26:cc:4e:ef:4d:5f:a3:3e:af:c3:3c:ec:2e:e3:
         64:d1:1e:69:3a:c8:ee:8f:ea:43:66:84:53:b9:9b:a6:d0:e9:
         54:ae:cf:ff:66:d0:3f:fc:af:e2:25:ac:48:05:ae:88:af:2b:
         e5:06:15:e6:06:51:f9:49:3e:1f:3e:96:1f:95:a0:84:75:67:
         77:54:15:6b:e3:37:c9:72:4a:0f:71:41:2d:6d:94:1e:ff:e7:
         df:2a:c7:65:a1:52:d2:46:45:51:db:ed:50:f7:67:ee:05:dc:
         65:15:39:73:a9:c1:cc:b1:f8:49:bc:79:38:52:78:f4:58:4a:
         33:f3:c6:a5:f4:9b:be:42:60:3b:31:70:62:84:26:b4:80:9a:
         63:6b:7f:28:fb:95:be:9e:84:7e:a5:7c:48:6d:68:84:26:b2:
         a6:78:f7:1e:a8:a8:f5:43:96:bd:56:63:b9:40:c6:12:95:2b:
         72:92:1b:58:d1:8b:dc:a4:83:e9:a2:97:06:c5:82:b4:b2:82:
         b7:51:81:e0:15:d2:7c:d2:22:86:ec:0b:e0:76:e2:57:db:71:
         a1:4d:35:cd:ef:14:6e:9b:7f:1b:7f:5e:8e:de:cc:65:08:ce:
         d6:a4:9c:c4:58:bc:22:5b:dd:26:d9:94:a0:2b:87:e0:a1:25:
         dd:9d:ec:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:47:01 2025 by rpki-client