Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2df31e3e-1bda-3c7a-9152-b51c6aeb5443.roa
File:                     2df31e3e-1bda-3c7a-9152-b51c6aeb5443.roa (raw, json)
Hash identifier:          bqnC4C7RCehYVpjujlTwFNKLMCcCoAz9mSvbB45uDdY=
Subject key identifier:   5F:B7:C6:7A:E9:0F:16:FE:DB:71:60:72:15:3F:A1:D4:41:A9:88:69
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584B25FC35B851EFF78EBEF7A700
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2df31e3e-1bda-3c7a-9152-b51c6aeb5443.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     6181
IP address blocks:        2600:2b00::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:35:b8:51:ef:f7:8e:be:f7:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=b7a595b5-e439-450a-946c-b3fac82a2cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b9:e5:ae:5f:55:60:7a:bf:10:54:ee:1b:4c:
                    ea:f6:64:6f:b5:14:ff:ed:75:4f:dc:9b:31:79:47:
                    b0:00:12:1a:27:fe:ff:c5:a0:49:30:36:4b:04:d9:
                    c9:45:d8:44:fc:dc:c0:f6:cc:45:29:8a:33:3b:28:
                    fa:14:e4:ae:1d:dd:e6:81:93:1c:31:c0:d2:1d:bd:
                    d6:99:1a:9c:e1:99:59:81:fa:7a:c2:16:46:c9:3c:
                    48:be:e1:32:33:d3:fd:d3:38:12:87:9f:44:9e:f0:
                    9f:c2:83:39:1d:3e:84:90:e0:b7:fa:f0:3f:2b:82:
                    80:f5:1d:a0:b0:c5:09:1e:fc:b6:d2:d9:d3:00:76:
                    79:13:61:31:42:78:4f:83:55:db:7f:7f:f4:19:cf:
                    47:31:90:72:b9:ba:4d:29:6c:c1:25:c7:c4:f8:42:
                    27:83:17:7f:c5:81:3d:e0:87:85:dc:6d:d1:8d:8d:
                    a8:d0:73:59:ec:30:6a:3b:b2:de:e5:57:86:a7:c4:
                    90:cb:70:48:92:4c:9f:8a:bf:53:df:fa:7a:96:ee:
                    16:6c:93:39:b2:dc:75:4b:42:ce:8a:ce:61:80:cc:
                    9e:c0:45:a2:ce:92:e8:ee:50:a6:02:56:43:15:8b:
                    27:73:3d:2a:93:98:00:84:28:53:4f:65:1f:fe:55:
                    2a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B7:C6:7A:E9:0F:16:FE:DB:71:60:72:15:3F:A1:D4:41:A9:88:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2df31e3e-1bda-3c7a-9152-b51c6aeb5443.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:2b00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:9d:4d:cd:4a:92:b4:9b:36:74:06:ba:26:6b:11:4c:d5:29:
         eb:64:f2:39:27:e9:22:4e:a9:ec:5a:bb:41:e0:cc:2a:c4:74:
         c6:38:1a:93:55:8e:84:4f:ac:c8:be:c7:14:a1:7d:cc:91:b2:
         b3:25:27:56:f1:2a:35:9a:58:eb:c5:08:65:ef:ba:b5:5c:b0:
         83:9a:80:47:c2:74:b9:67:a8:b7:75:be:cc:75:c5:4e:8e:11:
         63:38:0d:25:31:b8:cd:a6:46:34:6e:66:a9:60:64:97:91:08:
         81:99:f0:af:1f:78:15:ab:5a:f7:d2:56:cf:17:eb:7a:a0:8e:
         56:43:94:1a:95:c0:1d:30:1e:ed:63:f6:39:ae:a3:57:6e:6d:
         1e:ed:b7:ac:e9:49:b9:94:49:e0:b5:b6:22:b8:cf:28:07:ba:
         69:41:34:99:7a:2f:53:fa:15:ee:40:ea:dc:e5:9b:5e:e3:f1:
         19:ae:43:21:3a:0f:35:9e:61:b9:b0:3b:82:cf:8c:88:69:e8:
         ff:f6:5e:bd:4a:bf:cf:94:eb:4e:c7:e5:c6:b0:08:d6:7d:bd:
         fd:df:bd:8d:77:da:ee:da:58:50:d9:ff:e0:31:e3:10:17:91:
         c4:93:93:b6:c8:b9:5e:8e:f8:de:b5:54:6d:c6:2b:65:cf:c0:
         7d:19:92:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 22:35:24 2025 by rpki-client