Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/6148efd0-fc22-33c8-b06c-0daabdbb8419.roa
File:                     6148efd0-fc22-33c8-b06c-0daabdbb8419.roa (raw, json)
Hash identifier:          PuPSo69j/4w6NPURmYVL8c9cwiOjhNoF8EL8oXUm/ms=
Subject key identifier:   05:57:33:84:FD:EC:03:4D:11:35:FD:8F:FA:06:44:C3:12:F6:AC:B6
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584B0B76B16FC3341465A4B26740
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/6148efd0-fc22-33c8-b06c-0daabdbb8419.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     394285
IP address blocks:        2606:a100:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:b1:6f:c3:34:14:65:a4:b2:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=331aae25-0bc6-4b31-94a5-16b6a1d04b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:42:83:40:51:03:c4:d3:3e:e4:b8:29:d7:2f:
                    f3:e6:db:73:1b:49:81:ec:f7:2f:7e:e0:fe:3b:75:
                    0c:d9:38:48:a7:64:64:f2:cd:18:85:7a:bd:4b:36:
                    cf:d0:58:85:90:a2:e3:f7:45:89:65:02:75:98:db:
                    51:50:77:e8:29:40:83:84:1b:96:26:da:18:f2:70:
                    e8:f9:08:8e:fe:ff:1b:4c:44:ac:f5:a7:42:23:23:
                    61:5d:ba:d8:d7:21:ff:6a:03:a5:d7:49:30:37:0b:
                    4d:59:5c:e6:0f:0a:7f:c9:cc:2c:b0:e6:9a:20:60:
                    7b:73:6e:5d:e7:a0:ee:c4:b8:8a:ff:de:43:57:29:
                    2f:4e:ba:c0:31:fc:83:41:8a:14:d3:22:ad:70:8a:
                    6b:b3:f8:01:a7:b2:b6:ea:e3:cd:fe:a0:8f:a0:e6:
                    ec:ac:d0:a8:a0:51:3f:bc:03:9a:77:fb:63:0c:69:
                    56:0c:03:0c:03:92:40:4b:ff:30:e7:ca:95:7a:0a:
                    ca:d5:93:25:b3:8b:7a:5b:10:fc:cd:50:16:d3:06:
                    87:9d:20:59:30:9a:95:21:33:f3:f4:4c:14:65:d9:
                    84:13:d9:de:03:ab:38:9f:1c:13:b1:50:62:2b:48:
                    91:af:40:8e:1f:6a:47:6b:6b:59:9d:58:7a:94:2e:
                    91:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:57:33:84:FD:EC:03:4D:11:35:FD:8F:FA:06:44:C3:12:F6:AC:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/6148efd0-fc22-33c8-b06c-0daabdbb8419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a100:d000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:b9:d2:4e:0d:1d:d5:bd:6f:b1:1c:e9:11:ff:91:d7:16:ac:
         7b:4b:17:9d:ff:d5:45:2a:67:5f:49:dc:66:68:ab:b7:aa:3a:
         4b:87:6b:f4:2a:52:ab:54:a4:6b:95:5c:f7:5c:f2:36:80:9a:
         91:75:e7:f5:97:21:a9:8c:ef:00:fa:4e:54:20:10:82:31:d3:
         7a:99:ba:8f:8f:70:5f:61:9e:f0:7d:45:20:88:7c:23:11:1f:
         e6:d2:57:a2:3f:e3:d0:4d:a7:70:b5:ed:b6:5f:a5:c0:9d:32:
         8c:d2:4e:46:dc:21:5f:cd:5b:15:fe:ca:f5:90:a4:f0:c1:fe:
         ce:d8:28:9e:c7:2f:21:0e:3e:2b:bb:95:2c:a1:e1:1a:9f:48:
         8f:5a:4d:4e:ad:47:e9:73:1a:a3:62:f7:69:6c:d1:58:c3:48:
         48:e8:ec:83:0d:eb:82:0c:e2:dd:9a:a5:da:bc:39:90:dd:34:
         c2:e1:ee:c7:cc:c3:2d:b6:31:2c:f0:ae:aa:45:fd:2b:6d:ca:
         e7:22:42:dc:6d:00:5f:c5:37:95:2d:33:1a:88:4c:af:5b:53:
         c7:58:1e:22:e6:9f:da:7b:a2:f2:df:aa:0d:cd:43:5e:be:68:
         b3:7e:22:13:9d:06:06:c3:67:80:1e:79:1f:01:56:46:9f:34:
         88:25:06:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:46:20 2025 by rpki-client