Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/52d60cd0-c9a1-3508-949b-51ffcd371d9b.roa
File:                     52d60cd0-c9a1-3508-949b-51ffcd371d9b.roa (raw, json)
Hash identifier:          jmXsVU9/nEK2EGq0QggNng5B4P2FzUdWNxu5SztuuG4=
Subject key identifier:   99:B5:86:9A:66:84:67:D0:A9:E6:41:5D:6C:3A:F0:3C:B5:25:58:A0
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584B6A61EC1DE373FBC525A6C680
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/52d60cd0-c9a1-3508-949b-51ffcd371d9b.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     2734
IP address blocks:        2605:6c00:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:ec:1d:e3:73:fb:c5:25:a6:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=d962498e-ef94-47dd-819b-8216b76677d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:49:a2:27:70:53:db:2f:fa:78:b3:0a:58:c5:
                    7f:66:bd:2e:d0:ba:e2:9f:3f:81:a2:df:d2:db:18:
                    cc:73:cd:af:a4:60:7c:09:64:96:70:1c:66:0b:42:
                    72:9c:b8:e7:35:1c:e1:92:3b:3d:1b:c2:ee:68:63:
                    c5:5c:c3:22:87:68:3f:8d:90:50:c6:7f:ec:08:2a:
                    a5:85:40:a6:58:b2:ac:ef:85:5a:fc:e4:47:44:9f:
                    f6:5d:64:b8:5c:99:1f:50:3b:8b:27:e2:4a:c1:87:
                    d9:e3:09:73:89:88:fe:e4:96:ad:78:aa:b8:97:f7:
                    9b:d9:d0:e0:20:10:2e:f9:5c:85:64:13:54:7b:89:
                    72:e3:38:0f:60:33:a8:7f:cd:c2:f9:1e:c4:17:37:
                    c6:bd:46:51:44:69:33:f6:a6:5d:08:87:c6:61:cd:
                    f5:eb:09:38:f0:2a:41:5f:0f:9d:e6:6c:67:f1:7d:
                    d7:ac:4c:43:7e:db:ab:8a:14:eb:9c:25:fa:f2:b2:
                    63:f5:fb:41:52:be:df:69:9a:06:32:94:0c:98:33:
                    c5:50:c3:79:81:6d:01:4d:0c:26:e9:aa:ed:f9:ef:
                    bb:a1:6e:1f:d3:9f:ac:7b:aa:c6:87:37:a1:55:00:
                    97:97:86:98:b5:11:f2:99:50:a0:79:94:b6:b6:f4:
                    17:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B5:86:9A:66:84:67:D0:A9:E6:41:5D:6C:3A:F0:3C:B5:25:58:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/52d60cd0-c9a1-3508-949b-51ffcd371d9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:29:4a:1b:99:91:8d:38:f9:dd:a9:c1:09:21:70:c3:27:cc:
         a5:2d:19:ec:ff:50:b6:89:dc:87:22:d3:1b:82:4c:96:a1:2c:
         9a:e8:a7:07:f1:de:9b:f0:22:a0:14:a9:b0:33:fa:26:69:29:
         21:ad:a9:c6:c0:e9:3f:89:ee:38:c4:bb:d9:80:1f:d1:02:9e:
         45:8a:c1:1a:5b:c3:b6:61:e8:7c:8d:dd:6e:4e:6d:7d:63:9a:
         e4:0c:a3:4f:69:a3:b6:00:02:8d:11:6c:e6:66:f7:43:d0:02:
         df:ca:3c:9b:31:5c:f1:d4:1a:fa:84:cb:e7:7c:97:02:f8:76:
         fb:3b:b3:2c:12:fa:13:7b:8d:3b:ec:18:41:e0:d3:40:55:e9:
         31:71:3f:80:e3:27:09:27:be:35:62:c5:0d:91:57:2c:57:81:
         a2:c9:fc:9e:6d:96:f3:88:4e:de:0f:f0:a1:7e:17:0d:34:07:
         5d:31:72:6d:33:d9:65:0c:38:a0:b3:3c:8e:9d:5a:87:e2:6f:
         b5:dd:b8:b9:11:02:48:dc:24:af:e4:ae:eb:7b:bb:71:cc:24:
         71:38:0f:d6:35:7d:1f:2c:7e:aa:0d:64:e8:44:31:8f:74:6b:
         b4:62:31:71:f6:a8:cf:39:0c:cc:13:eb:cd:33:56:a3:ac:43:
         86:d6:6e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 20:46:50 2025 by rpki-client