Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9e32cafe-3964-3828-b17c-06b289cf828e.roa
File:                     9e32cafe-3964-3828-b17c-06b289cf828e.roa (raw, json)
Hash identifier:          LPsvpEDu6y+9efP1JGc/dhMmPMwmn0moSrj36o+Nwxo=
Subject key identifier:   A6:AA:FA:39:53:B2:CF:BF:F2:7B:D7:3D:54:27:5A:63:CC:12:FA:25
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584B6367421A693C72117C3E4E80
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9e32cafe-3964-3828-b17c-06b289cf828e.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     2734
IP address blocks:        2605:6c00:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:42:1a:69:3c:72:11:7c:3e:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=d54d953b-b902-48ba-851a-eab2bb93cba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:78:d7:5d:58:88:93:bc:28:ec:38:5e:4d:ba:
                    e5:fe:25:9d:f1:95:21:c3:5c:88:69:e7:72:38:c9:
                    f9:5b:fc:62:0e:d8:e1:91:26:f1:52:97:58:46:89:
                    22:3f:21:b5:13:d0:78:7e:b1:be:16:8e:7e:5d:11:
                    40:50:0d:4b:ee:64:8e:9f:17:e8:e4:53:97:de:13:
                    71:c0:55:ab:a8:b9:b7:05:e9:42:ba:e7:3a:61:81:
                    31:2c:36:14:d4:a6:fd:0e:1d:81:a7:e7:6b:ef:6f:
                    0b:c8:a3:f4:a5:02:87:ca:fc:e5:97:16:c7:b8:09:
                    92:58:8d:fc:a7:00:c7:af:dd:b8:dd:9c:20:9a:a8:
                    1d:9a:a9:29:d7:ca:dc:29:b9:fd:b2:99:15:1d:47:
                    10:53:6a:db:9e:1e:bf:82:79:14:e9:3b:35:e3:83:
                    90:f8:b2:25:14:77:3d:36:ad:37:47:52:65:b0:51:
                    3b:a0:42:a3:82:6e:f4:50:8f:7f:33:96:43:9d:88:
                    b0:ab:4d:d4:2a:f7:da:7c:3c:da:25:b1:2c:77:d5:
                    97:1d:19:c0:32:6a:be:12:2f:eb:86:fa:e8:12:66:
                    a1:06:8b:02:9d:4a:cd:1b:20:f7:34:11:00:04:55:
                    a9:2c:e7:ac:8d:51:33:d6:ab:01:1d:b2:5d:9d:6b:
                    ee:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AA:FA:39:53:B2:CF:BF:F2:7B:D7:3D:54:27:5A:63:CC:12:FA:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9e32cafe-3964-3828-b17c-06b289cf828e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:69:99:a0:89:0b:ac:77:b5:01:4a:89:63:43:73:b3:2d:c8:
         d4:2e:ed:72:a3:cb:59:3b:74:5c:ed:66:c8:dc:68:69:92:eb:
         76:cb:0c:b0:1b:c7:2f:cb:f7:9c:4d:8a:eb:d5:5e:6d:fe:10:
         ba:00:91:3e:92:23:51:0f:8a:69:02:19:d5:72:81:89:d3:03:
         e2:25:68:67:59:31:4a:98:fe:43:15:c1:8e:44:de:76:ff:cd:
         e6:f1:f7:10:e7:41:83:6f:70:98:7a:00:19:66:9c:de:09:8d:
         86:3b:ed:20:1a:e0:5a:2f:cb:da:40:03:31:44:d6:f5:3b:20:
         87:5b:b7:ff:e4:0a:ad:89:d4:8f:ff:2d:b4:7f:63:64:21:40:
         d6:71:8c:02:a0:d5:fa:e7:52:6a:70:d0:18:ae:e3:be:fd:b6:
         63:1d:2a:2b:2e:4a:1b:93:75:e1:a4:e6:ec:b9:c3:65:a7:80:
         42:15:c1:61:d5:be:e8:18:b5:e6:71:67:ab:fc:b1:2b:5e:a9:
         75:43:86:c6:ff:85:d9:df:8a:b1:bd:80:61:c5:01:b6:69:9c:
         6a:88:94:be:78:38:a0:72:02:bc:58:16:79:2d:ca:92:5c:d4:
         75:c5:cf:b3:fa:6b:72:df:cd:34:fd:f5:4e:95:36:26:5f:84:
         9c:a0:ac:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 20:44:37 2025 by rpki-client