Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7d511d69-6c8e-38ec-a419-4635ccd6a956.roa
File:                     7d511d69-6c8e-38ec-a419-4635ccd6a956.roa (raw, json)
Hash identifier:          9RZUDpzY02B7Ww617gQNwhR6g23sPFRBBHEACBzPAVo=
Subject key identifier:   C9:50:38:AD:27:F4:6E:91:1F:11:B5:DE:45:7B:54:8D:97:E7:30:DF
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584A5765CEF0A8BF68A15782EDB8
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7d511d69-6c8e-38ec-a419-4635ccd6a956.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     137409
IP address blocks:        2606:f185::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:ce:f0:a8:bf:68:a1:57:82:ed:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=9110a196-5888-46de-aa83-00a94de93d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8e:a8:62:c4:ba:7f:a0:98:55:58:49:3a:aa:
                    d7:5c:52:2b:fc:83:01:75:2f:49:9f:ef:95:1b:f9:
                    9c:b7:bf:33:e9:7f:0f:6e:06:61:f3:71:2d:6f:11:
                    45:16:05:61:58:1f:45:2b:6e:8d:5c:2d:76:36:25:
                    9d:38:d6:72:1c:51:1b:0e:80:d0:cd:5f:80:e1:c5:
                    0a:00:7a:bd:32:1f:85:ca:ba:d3:e9:9b:cc:25:88:
                    5c:39:41:c1:fe:09:57:aa:ec:c0:82:40:fa:f0:57:
                    f4:65:9b:da:5b:ea:9b:aa:88:b4:ff:d9:7d:47:d9:
                    2e:42:57:fb:da:09:a3:b5:2d:6f:e3:c5:6f:17:07:
                    aa:c9:5f:4a:30:fd:f4:8c:b8:a6:4c:c2:b1:c1:11:
                    d8:0e:e4:2c:c9:d4:1a:62:5e:ae:40:ad:b4:55:9c:
                    45:5b:a4:ca:03:a1:9e:ca:f9:80:05:2c:44:16:1a:
                    82:05:f8:7c:51:f1:e7:13:60:f4:ff:b2:87:20:e0:
                    6d:3d:9a:fd:28:24:76:ce:d0:22:a2:a0:6a:ba:f6:
                    24:7e:dc:68:74:63:ac:07:d8:85:98:18:85:b5:4e:
                    92:1f:7d:b4:5b:6e:88:cf:73:00:11:18:db:4f:75:
                    1c:44:f3:e1:c4:26:5f:80:23:d8:9d:16:64:7f:67:
                    21:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:50:38:AD:27:F4:6E:91:1F:11:B5:DE:45:7B:54:8D:97:E7:30:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7d511d69-6c8e-38ec-a419-4635ccd6a956.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f185::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:18:a6:86:54:3c:5a:d9:8d:70:6d:b2:34:85:5f:2b:c6:05:
         26:3e:f6:3e:ac:c3:3e:17:f2:fc:53:fe:1a:94:9f:11:d0:b0:
         de:e8:f9:95:79:56:60:f7:a1:23:98:cd:3d:62:55:2c:79:3e:
         0a:f7:be:19:13:dd:77:8b:52:95:59:35:17:bd:bd:e6:2f:c8:
         26:2b:fc:18:73:46:cb:3c:9e:76:98:b1:a7:bf:d3:87:ad:ea:
         51:36:f0:a2:ff:08:bd:c6:db:7e:b8:56:40:fa:ca:63:33:7a:
         9a:c1:85:ed:b1:6b:97:7a:1c:6d:04:66:03:3a:b3:60:8b:33:
         77:69:44:3d:a3:50:a1:4f:dd:24:14:d2:29:dc:2c:ba:8e:5c:
         e0:93:0c:9f:44:b0:c7:da:82:e4:43:22:74:a1:aa:b8:29:fa:
         6c:43:57:61:20:b3:8b:11:3f:17:9e:df:75:e9:f1:28:1a:af:
         19:54:44:20:4b:c4:e8:a9:16:a6:1c:75:77:ad:6e:54:fc:84:
         0c:4c:00:f0:4b:49:bf:b3:4f:41:50:4e:48:4e:f9:72:a2:96:
         48:4d:e2:b1:79:0b:74:6f:96:95:52:61:9c:c6:a7:54:ca:cb:
         76:01:e9:8a:b4:9a:ac:10:00:5d:9d:13:2a:6e:63:8e:ed:d3:
         53:b8:ee:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 07:28:29 2025 by rpki-client