Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a/f86bd629-8bd6-32d1-88e5-4970f8fd1dc6.roa
File:                     f86bd629-8bd6-32d1-88e5-4970f8fd1dc6.roa (raw, json)
Hash identifier:          OiT07x9Ai4F1fmZpygoT+z/qpldJvGnhWovuAtH+X98=
Subject key identifier:   03:BE:A9:CC:CB:95:F5:C1:7E:AB:3F:A8:94:99:3C:56:2D:60:52:1A
Certificate issuer:       /CN=164684e1-9b37-4d55-af01-f21223eda67a
Certificate serial:       010D0C9F4328584B2066E016A3D5124930FDC480
Authority key identifier: E7:22:F6:58:1E:4D:B7:C2:FC:8E:1F:33:C2:5C:F2:A8:29:AF:C7:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a/f86bd629-8bd6-32d1-88e5-4970f8fd1dc6.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     55168
IP address blocks:        2604:a20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a/164684e1-9b37-4d55-af01-f21223eda67a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a/164684e1-9b37-4d55-af01-f21223eda67a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:e0:16:a3:d5:12:49:30:fd:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164684e1-9b37-4d55-af01-f21223eda67a
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=ab057afd-cec5-4b8d-8bdb-465ec01ae930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:00:d7:d9:76:b9:76:45:ce:ab:97:d4:25:7d:
                    a5:3e:07:fd:fc:a2:93:f3:2b:03:95:89:60:a0:be:
                    17:19:49:39:cd:a8:2a:33:a8:f5:0b:8a:da:03:db:
                    f0:c4:f1:d7:59:12:32:d5:5d:54:0b:bf:ad:24:cc:
                    73:2e:27:83:13:0c:80:da:a1:d2:f2:11:6f:b0:b5:
                    e8:c2:2c:22:98:ec:64:60:22:65:06:a5:c4:37:e7:
                    75:cd:40:b9:7a:58:d1:29:f3:8d:0c:99:8a:3f:1c:
                    9b:32:0c:d4:94:f9:ef:5c:ec:d6:06:f4:2d:81:56:
                    dd:84:ce:e8:34:d3:5c:88:69:4a:aa:41:44:c0:40:
                    8e:ac:c5:f3:c9:f2:01:6a:35:8f:f1:19:5d:64:f6:
                    8b:62:c7:02:25:ab:48:1e:e5:2e:02:1a:c1:82:61:
                    7f:95:36:35:85:8b:8c:89:34:08:d9:12:95:7f:42:
                    28:1c:fc:58:55:56:7a:eb:8e:fd:b8:b7:0e:84:ea:
                    2d:cd:af:58:7e:d0:78:bf:67:74:ec:f7:a4:8e:72:
                    d9:f7:70:a2:a6:7d:fb:c7:1d:78:6e:b4:6a:52:54:
                    57:1a:ef:68:f0:5a:42:26:7b:3b:12:c4:f0:c7:2f:
                    6d:5d:72:0c:5d:4a:d1:39:a8:ce:79:0f:73:c8:19:
                    75:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BE:A9:CC:CB:95:F5:C1:7E:AB:3F:A8:94:99:3C:56:2D:60:52:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a/f86bd629-8bd6-32d1-88e5-4970f8fd1dc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a/164684e1-9b37-4d55-af01-f21223eda67a.crl

            X509v3 Authority Key Identifier:
                keyid:E7:22:F6:58:1E:4D:B7:C2:FC:8E:1F:33:C2:5C:F2:A8:29:AF:C7:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/164684e1-9b37-4d55-af01-f21223eda67a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:25:0f:12:82:e8:46:1b:ad:68:44:7f:72:c9:70:a1:9e:bb:
         63:6b:35:2a:ac:9f:d9:7a:84:d2:92:6e:1c:cc:b5:ce:7b:26:
         8a:0f:16:4b:c2:b0:45:b4:11:84:ac:af:c4:07:4d:3e:84:35:
         b9:a8:6e:e7:fe:fa:52:d3:f9:f4:16:c6:03:fc:84:4c:71:27:
         4a:8c:f8:b0:16:c9:5a:73:4a:b6:99:47:c9:26:62:40:44:dc:
         00:26:ad:31:f0:2c:88:4f:3f:d8:b7:05:78:b8:93:fc:34:c7:
         fb:5b:33:aa:de:3f:12:57:dc:fe:96:5f:6f:ef:22:39:c1:92:
         d7:35:82:52:75:40:83:5e:81:08:12:1b:02:7f:02:b9:cd:a6:
         cf:c9:48:89:fe:57:22:6c:c0:c3:3c:df:61:70:0e:af:ab:b5:
         ce:96:85:07:bd:32:06:a7:8c:a8:78:36:47:86:20:e6:84:76:
         63:54:a5:74:f9:11:91:01:44:87:87:ee:d9:75:34:38:51:e4:
         d3:dd:ee:13:d4:a5:76:9a:df:60:e0:f5:7c:37:ab:e9:3f:f2:
         7e:d5:94:a5:fa:e9:7f:45:99:96:3b:b3:68:ec:72:ca:5a:e3:
         0d:8c:59:76:49:fa:94:81:de:d3:2d:04:e9:2e:3d:02:7c:0f:
         56:77:96:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:27:08 2025 by rpki-client