Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/6f6fc695-efec-3c3e-a710-280bba97cc39.roa
File:                     6f6fc695-efec-3c3e-a710-280bba97cc39.roa (raw, json)
Hash identifier:          com+y63/VbuwJvW9RGq5kFcgiOQVbXJFrounBilEQAA=
Subject key identifier:   32:1C:D7:44:9C:07:46:6A:5B:4E:75:46:10:3C:32:BE:EC:11:23:C5
Certificate issuer:       /CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa
Certificate serial:       010D0C9F4328584AF5214CC4DDBF95DB588E9980
Authority key identifier: DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/6f6fc695-efec-3c3e-a710-280bba97cc39.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399587
IP address blocks:        2604:3540::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:4c:c4:dd:bf:95:db:58:8e:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=07da0a5b-49ca-4a4f-85a6-094b17d93bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6d:97:6a:b9:12:0d:76:1d:c7:5e:bf:4f:65:
                    ef:fb:af:bd:39:86:26:a7:9f:8c:bd:42:c9:69:a8:
                    dc:40:16:f1:24:2c:5a:fe:c0:3c:9c:b6:eb:f4:69:
                    08:a6:2c:a9:d8:d4:2d:85:74:a3:a9:83:b9:b3:fa:
                    ce:46:63:04:c5:fd:15:f6:48:d9:c6:26:3d:c4:0b:
                    e3:99:2d:ee:0b:d6:c7:90:ff:04:5a:12:fc:db:6e:
                    86:87:8f:a7:51:3f:44:52:a7:11:67:14:9e:24:e6:
                    a8:90:08:29:11:4a:37:b9:b6:28:4a:3c:69:db:40:
                    61:a8:2a:51:63:60:1b:f5:3d:48:8f:de:d3:08:d3:
                    9f:29:47:47:20:79:06:80:0b:30:b0:dc:24:ad:3e:
                    30:00:6f:e4:a0:e9:f2:75:be:a7:1c:9d:6b:f1:44:
                    a4:af:c7:b4:7c:22:4f:a2:f1:0f:db:73:84:42:a7:
                    8f:db:ad:4d:7d:e9:46:20:4a:6c:55:e7:18:85:5d:
                    92:0b:1b:1d:c8:ce:a6:af:50:72:f9:76:ea:3d:b4:
                    2a:a7:f6:54:bf:43:63:b7:89:a1:b4:41:c3:a0:fa:
                    77:43:1c:32:42:f7:6c:53:9b:c8:19:71:24:55:40:
                    99:74:72:14:4f:a5:4f:ea:ef:4a:cb:2e:9a:10:2c:
                    17:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1C:D7:44:9C:07:46:6A:5B:4E:75:46:10:3C:32:BE:EC:11:23:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/6f6fc695-efec-3c3e-a710-280bba97cc39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl

            X509v3 Authority Key Identifier:
                keyid:DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3540::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:c3:7b:bc:c7:36:2e:3f:e2:41:8f:fd:e9:a3:27:33:8b:84:
         2a:70:13:75:f5:c8:1a:a6:09:b6:03:82:b8:14:53:b5:c6:ff:
         40:ef:b7:4e:62:2e:ac:37:2b:aa:9d:2e:93:84:6b:14:d6:21:
         2e:f7:2f:51:f5:62:ee:cf:18:e1:a3:f4:72:3b:80:f4:4b:12:
         67:e4:4d:21:65:8f:f0:ce:0a:c4:e1:5c:1c:e7:7d:b4:61:cb:
         14:c3:fb:39:69:1c:ee:20:2b:ba:17:d4:a0:e3:f5:82:4b:f3:
         1d:d6:8f:9e:9e:5f:18:85:f0:ac:43:4a:83:8d:42:73:3f:93:
         4a:d5:87:55:f7:41:ec:37:7e:22:6b:13:47:25:de:15:23:b3:
         99:1b:d0:25:cf:60:62:76:93:77:18:2a:10:02:31:38:bb:a0:
         14:de:ab:1a:ca:68:37:f5:d6:c2:30:c0:6e:27:82:37:2e:73:
         d2:fe:af:b2:74:6f:ad:88:26:a7:a3:b6:5b:52:95:0c:24:01:
         ed:b1:3f:b1:ce:25:8a:3c:fc:ef:54:a6:35:22:80:05:a2:e5:
         e8:37:3b:50:e8:03:9c:77:36:a3:7e:12:b2:52:08:b0:94:53:
         fd:1a:1c:ed:55:ff:5d:c6:a1:d6:7a:3b:7c:f4:b5:39:c4:61:
         b2:c0:97:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 09:28:17 2025 by rpki-client