Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe9b4bc3-9a51-3c9e-a722-37b2993c0036.roa
File:                     fe9b4bc3-9a51-3c9e-a722-37b2993c0036.roa (raw, json)
Hash identifier:          5qS/U5OkBc/THl+x9xt8nY63jYqHL9Hno5VceSVgGYE=
Subject key identifier:   28:49:DF:01:C3:3D:51:8D:AE:53:FD:D6:70:BD:AB:FB:50:7D:7B:7F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5FC5F508273B983BE9F89500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe9b4bc3-9a51-3c9e-a722-37b2993c0036.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        2600:141d:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:f5:08:27:3b:98:3b:e9:f8:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=06f20f00-2ccd-4868-8159-8a6a06c0268e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:22:fa:f7:c5:56:f8:d0:5c:c2:fd:98:e9:d5:
                    b7:40:cd:74:81:2b:ce:33:f5:95:c4:f5:10:02:89:
                    f1:1d:eb:ff:d0:0f:ed:06:1a:02:97:83:10:eb:7f:
                    34:6f:17:dd:f1:f9:68:cd:57:04:09:5d:48:5f:1c:
                    8f:6d:2c:77:d0:6a:c8:63:5a:e9:ba:22:71:77:72:
                    4c:6f:ad:d3:e4:55:44:61:ce:b0:8f:b0:0d:27:1b:
                    8d:d2:3b:b1:8e:3c:3b:09:ff:8c:86:2c:75:3c:8f:
                    36:f3:ac:25:73:3e:c1:f7:bf:21:9b:75:7f:eb:a6:
                    22:da:df:86:9f:09:93:2c:50:1f:f4:44:64:28:ac:
                    9f:18:8d:76:e5:2a:9c:16:f1:71:4d:88:12:09:fa:
                    49:40:e0:20:91:89:cc:fe:c5:40:bd:a7:85:01:9b:
                    65:92:da:f7:ec:12:20:27:9a:7b:57:92:39:59:1f:
                    ad:23:28:04:1a:66:35:e5:33:a7:1f:87:6c:bf:33:
                    33:1f:91:8a:25:69:39:e6:a8:3e:eb:99:05:01:ca:
                    a1:82:95:ac:86:ca:6d:62:16:cf:f2:5d:8c:c2:83:
                    7d:63:dd:6b:a0:ac:6a:f0:e7:e9:5d:06:e4:1c:e5:
                    07:c2:52:84:af:cd:12:92:e8:88:d6:ed:87:fc:ab:
                    61:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:49:DF:01:C3:3D:51:8D:AE:53:FD:D6:70:BD:AB:FB:50:7D:7B:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe9b4bc3-9a51-3c9e-a722-37b2993c0036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141d:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:2e:1e:28:44:9c:49:5e:fb:b0:80:70:bd:a7:86:60:c4:8b:
         5b:e8:64:3f:f6:2c:40:fc:a7:16:6a:fb:31:68:94:e6:0b:36:
         be:e0:79:2f:00:03:47:66:80:b2:53:1a:f2:61:e3:ae:62:92:
         a2:28:41:61:4a:ee:df:b3:95:5f:08:14:38:61:98:c5:db:64:
         fa:db:2a:a7:1f:90:6e:35:63:f5:01:e8:b8:90:a7:46:e3:3e:
         a3:56:49:f5:f7:99:20:ea:cf:6f:5b:a1:e0:96:8b:f4:6b:35:
         b1:c4:4f:29:38:cc:13:50:37:53:ce:32:75:0f:77:6c:b9:89:
         49:c0:55:61:f4:16:58:a6:34:f7:4a:67:68:88:48:5d:5b:99:
         ee:bc:7a:19:9d:cf:df:88:d0:0d:97:be:b0:cc:45:17:34:c6:
         a2:bd:2d:bc:5f:20:f9:aa:66:15:6c:91:a5:f1:f7:96:fb:cb:
         08:76:1c:00:cb:39:41:70:91:57:7a:f5:7d:cd:39:d3:ec:84:
         cf:fe:13:1b:02:33:67:eb:0b:4c:6f:92:a1:dd:46:b5:92:03:
         bb:e6:22:b7:f1:cd:ac:9a:46:e7:c8:16:83:10:15:aa:50:83:
         b1:ad:8b:4e:ed:5b:aa:90:7d:ed:0a:a7:59:87:74:ed:eb:be:
         f6:d6:64:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:41:21 2025 by rpki-client