Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee276beb-08e0-3984-b82c-54da579ccdcd.roa
File:                     ee276beb-08e0-3984-b82c-54da579ccdcd.roa (raw, json)
Hash identifier:          ZkXdZKclL0afvy0a8CNC28XZXGccVBKIFfoJ6RVFNUg=
Subject key identifier:   B7:33:76:74:D8:CC:C7:48:5F:18:D5:D8:0E:B2:C6:17:F3:91:0F:D2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A68260FD5AEC35B621D5C2F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee276beb-08e0-3984-b82c-54da579ccdcd.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     35994
IP address blocks:        2600:1403:5c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:0f:d5:ae:c3:5b:62:1d:5c:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=05c640a3-3a31-4a50-a11f-211d594a4093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:b8:bb:c1:90:7a:2e:fd:3b:14:bf:7b:78:
                    01:3f:8f:99:a8:96:07:d4:bd:59:63:41:bb:c0:d2:
                    a4:11:c9:44:98:7c:72:b7:f8:99:21:ea:89:a6:5b:
                    70:88:26:46:11:3e:bf:3f:3f:8d:b5:25:18:03:58:
                    6a:96:fc:02:b8:a9:f7:92:58:b7:69:01:eb:0d:b9:
                    41:ec:97:05:a0:34:4e:6a:6c:f4:d4:c4:4f:bf:5a:
                    c8:95:05:7d:0a:cb:58:47:d8:a1:b0:47:00:11:20:
                    83:c6:8c:1d:fa:02:05:ce:f4:cc:b2:1f:8a:20:65:
                    54:37:cf:37:90:39:aa:f6:4a:74:3b:e4:fc:07:c8:
                    3d:e4:51:0c:fd:73:e2:46:7b:2b:4b:f3:a6:a1:75:
                    a9:6d:a5:41:20:4c:65:58:e5:16:05:62:73:2b:e2:
                    eb:e3:a9:aa:e0:de:0b:43:9f:69:75:c0:bd:54:1f:
                    8b:7b:8f:4d:6a:91:ee:b2:75:eb:6b:1c:f3:88:82:
                    5f:f8:73:8c:b2:52:6f:59:34:f9:bf:c6:c2:bd:45:
                    17:f7:73:9d:ea:24:4c:8b:55:09:58:b0:44:42:b0:
                    0b:df:c2:0f:fb:26:24:df:af:c3:e2:2d:b8:0d:91:
                    ba:67:c5:f6:af:1e:17:e0:5f:4f:b7:05:22:9c:0c:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:33:76:74:D8:CC:C7:48:5F:18:D5:D8:0E:B2:C6:17:F3:91:0F:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee276beb-08e0-3984-b82c-54da579ccdcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1403:5c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:6f:fe:d9:0e:e3:1c:2e:74:93:93:88:a8:95:d7:ac:dc:87:
         75:12:3a:e4:d1:45:bb:1a:4b:b1:51:1e:b8:e1:be:49:09:2d:
         01:77:77:a6:ce:54:dc:6b:8f:bb:ce:8d:a5:79:52:6b:2b:0f:
         ce:fe:f2:91:ed:ab:3b:26:fb:c9:6b:e0:23:aa:a9:a5:bb:8d:
         47:4d:08:f7:bd:8a:d2:34:da:7e:78:29:05:11:17:8a:0e:53:
         cf:73:da:2c:92:b1:2d:90:96:a8:b3:c0:4a:a8:91:23:3a:dc:
         12:f9:bf:2c:3f:91:2d:c7:80:96:4f:1e:a6:ea:34:6e:8a:a4:
         96:d9:30:81:02:d5:39:a7:8f:86:9f:38:ef:6a:9e:07:6e:da:
         7d:98:b9:9b:e4:8b:f2:fc:67:39:0d:5e:9b:21:3d:c8:02:3b:
         23:e4:14:0a:9d:44:91:bd:3f:05:98:d5:e4:07:1f:cc:1d:5f:
         47:8e:56:49:09:7b:62:5c:74:de:7b:05:3d:d8:10:8c:3b:36:
         92:77:0c:1e:a3:07:bf:94:ef:0b:00:55:cc:78:65:55:33:69:
         58:fe:e1:dd:db:d3:f3:f1:07:d2:a2:6b:db:65:93:9d:f7:f6:
         e0:5c:b4:54:0a:c6:e2:46:76:70:ba:45:10:78:43:54:75:1d:
         93:c1:ab:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 19:34:21 2025 by rpki-client