Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/6687135c-e3b9-37b1-8160-bc72c0d5954e.roa
File:                     6687135c-e3b9-37b1-8160-bc72c0d5954e.roa (raw, json)
Hash identifier:          2sj4uoTEn18PHGBGNTT5r9UJk6R/u1waZYHoRqIPjhQ=
Subject key identifier:   A4:09:A2:0A:84:FF:8F:99:97:9B:C5:98:6D:F5:E6:16:38:94:22:56
Certificate issuer:       /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
Certificate serial:       010D0C9F4328584A6825FC087EDB8CA8AAA48700
Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/6687135c-e3b9-37b1-8160-bc72c0d5954e.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     396417
IP address blocks:        2600:e800::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:fc:08:7e:db:8c:a8:aa:a4:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=920abd32-53bf-429f-8ded-acebdf2c7194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:72:a4:13:15:de:ce:8f:de:f8:27:8b:f6:2b:
                    6e:5e:5d:b0:f2:0e:f2:4d:1e:11:72:21:17:21:db:
                    96:82:15:23:c9:9f:4a:b8:c8:7d:b2:21:65:c2:9c:
                    5f:b8:47:95:b6:58:3a:b5:4f:51:d3:58:56:1c:51:
                    5a:9b:96:33:5b:53:7e:b8:c2:d4:06:90:54:c7:3e:
                    0e:e1:78:32:51:0a:52:29:c3:9f:58:12:cb:8a:fa:
                    94:fd:f3:be:2a:a1:1f:b6:88:01:2e:20:b7:48:55:
                    a5:db:75:67:86:3d:97:cf:0f:7e:c5:d9:a4:95:a2:
                    7b:77:24:05:af:33:7c:1a:12:f9:33:01:be:a2:a0:
                    1a:1e:34:a4:18:53:18:38:bf:52:50:38:1a:87:f7:
                    64:23:4b:a1:11:2d:23:95:c5:1f:c5:c6:c2:35:60:
                    ae:ff:f1:d4:0d:f6:8e:66:5a:cb:fe:5e:1b:26:45:
                    0e:b2:36:dd:f2:fa:f7:e0:ca:47:f3:ce:82:a5:b5:
                    61:ba:fe:ed:52:96:91:31:d7:2f:50:2a:f1:e4:6f:
                    dc:db:cc:fd:90:ee:20:17:de:fc:d3:43:a1:cd:d7:
                    a4:16:cd:14:72:95:af:19:b6:e7:46:44:a2:7a:80:
                    c9:8b:d3:0a:ca:82:21:7f:0f:4c:34:85:56:83:de:
                    e4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:09:A2:0A:84:FF:8F:99:97:9B:C5:98:6D:F5:E6:16:38:94:22:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/6687135c-e3b9-37b1-8160-bc72c0d5954e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl

            X509v3 Authority Key Identifier:
                keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:e800::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:af:ee:54:d0:78:2a:e5:3c:11:71:f2:71:3b:75:3d:49:c2:
         ce:64:93:6a:71:fe:4d:9d:19:6d:9b:1e:f6:a2:f1:6c:7e:50:
         15:30:92:5f:12:b1:59:f3:db:4c:7b:a5:15:be:90:36:12:7c:
         d5:a0:db:cc:10:78:86:7a:a2:2a:11:0a:d8:42:4a:8f:c9:dd:
         14:d0:45:53:b2:ce:35:ea:15:09:15:59:9d:75:bb:b9:25:4a:
         a1:d7:de:b0:92:14:41:18:c5:2c:27:d5:f7:20:2a:e0:ce:a0:
         6f:68:93:5d:d4:7e:ca:ed:b7:b9:c8:09:57:1a:7f:20:38:3b:
         68:e9:d2:27:4e:40:6a:c5:9a:99:0d:9d:01:ac:28:48:03:9a:
         e8:f9:3f:13:0a:b4:6e:94:71:f0:86:e0:41:f6:c2:43:50:06:
         a3:11:7a:0b:91:94:32:04:96:51:db:21:d6:6d:17:24:1a:29:
         59:83:f3:f6:55:7b:5e:e7:be:ca:2a:3b:8e:d1:7b:30:86:64:
         37:1a:f5:5e:3f:15:f2:9a:43:99:1d:15:e2:ed:fd:3d:42:a2:
         56:c8:d7:8d:79:f2:fb:41:85:4b:45:1c:02:f4:81:ce:cd:75:
         cd:93:39:e2:d4:cd:1f:34:46:5a:92:93:4c:1f:a0:72:b8:ef:
         e9:00:1e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 05:17:06 2025 by rpki-client