Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/e120d015-f5b8-3704-b4c4-afa708bc413b.roa
File:                     e120d015-f5b8-3704-b4c4-afa708bc413b.roa (raw, json)
Hash identifier:          MNluPeI4dxRRBO/axobruY2q9rD77Gkmu2Lt+DRE5lU=
Subject key identifier:   9B:0A:A4:62:AF:EB:92:32:88:01:1C:29:C8:D2:A4:FB:F7:77:DC:5F
Certificate issuer:       /CN=a1a8e018-88f4-4067-935e-ef8e20a553c5
Certificate serial:       010D0C9F4328584B03168F0E11DABE1EFCD48E00
Authority key identifier: 75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/e120d015-f5b8-3704-b4c4-afa708bc413b.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     40701
IP address blocks:        2602:f965:d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:8f:0e:11:da:be:1e:fc:d4:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a8e018-88f4-4067-935e-ef8e20a553c5
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=d04000b0-24de-4fbd-b5f1-eec12ac87105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ce:92:c0:23:80:06:69:a8:63:32:e4:0b:73:
                    79:54:64:5b:a2:91:1b:98:01:f3:dd:f7:7e:52:50:
                    19:56:ef:cf:9b:e0:73:8d:88:36:dd:c1:5b:61:4c:
                    b7:e7:60:79:19:05:0e:87:ba:45:83:70:4b:d0:6e:
                    74:0b:41:35:87:c9:f1:d5:d9:f8:b5:53:b1:a7:1b:
                    49:fd:fd:af:3f:7f:5e:bc:6b:28:14:21:57:2b:d0:
                    07:7a:f6:9d:fe:69:3e:6c:50:b2:96:fa:ba:81:95:
                    ed:f0:78:25:8c:26:e9:1a:3f:4e:53:99:a3:8b:b8:
                    de:82:26:55:fe:5a:db:3d:9c:17:87:a8:9e:34:a9:
                    ea:cb:d9:3b:e3:6c:d0:59:0f:06:e3:18:e4:39:cf:
                    af:f6:0f:ca:57:ee:f6:73:f7:7f:78:b7:d1:1c:54:
                    26:50:33:6a:d3:56:75:5c:e0:8c:b7:25:6c:64:f4:
                    d6:c8:e2:51:51:5b:db:25:02:a2:db:49:ce:8a:32:
                    fe:83:ac:75:67:b1:16:e5:5a:7c:57:5f:7f:fa:49:
                    d6:22:3f:77:3d:08:e0:1f:d7:54:6f:78:45:e6:3a:
                    e0:a6:6f:c7:32:b2:f4:26:43:b8:6c:18:ec:1d:69:
                    aa:a9:79:88:ed:f8:72:ed:88:ee:dc:9d:b1:13:67:
                    c0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0A:A4:62:AF:EB:92:32:88:01:1C:29:C8:D2:A4:FB:F7:77:DC:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/e120d015-f5b8-3704-b4c4-afa708bc413b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl

            X509v3 Authority Key Identifier:
                keyid:75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f965:d0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:04:55:b9:5a:be:95:fb:06:fb:5a:7b:fc:a5:03:10:26:2d:
         9d:12:3a:9d:96:b9:3d:c7:5b:91:e6:fa:db:31:84:c4:16:c4:
         64:bb:5d:93:a4:76:c1:26:58:a6:60:91:89:2a:ca:23:96:fb:
         fe:f6:cd:9e:bf:68:d5:9b:c9:46:5b:8b:0e:0f:58:90:69:61:
         df:48:92:d5:84:be:3b:96:1f:37:f3:f4:b7:4e:d9:b4:71:4f:
         b8:68:df:39:42:b9:1c:b0:d3:f1:30:e4:82:59:e4:a4:66:d2:
         0f:1f:70:ab:6a:97:b7:5e:a5:5d:1d:b2:0c:61:59:cc:3b:5e:
         3d:74:b3:ff:6b:bb:ad:05:f1:48:31:76:f2:22:24:f3:9e:fa:
         73:d1:88:8e:37:24:5c:18:b6:3c:fb:7e:36:39:70:09:23:85:
         52:f7:20:9e:25:5a:5f:64:4d:65:ac:25:12:e8:8a:9c:7e:d2:
         bd:9d:05:52:da:44:c4:8c:b7:97:7f:77:19:11:df:28:1c:4c:
         e9:c8:6b:f8:e3:75:74:64:00:3a:f8:00:9e:79:e5:7f:b0:7b:
         27:dc:da:3a:97:e6:f7:41:89:aa:2e:b2:18:bb:1f:38:af:d1:
         7f:b0:11:96:02:f0:6e:2c:46:b7:15:73:fd:53:20:86:1a:ac:
         d9:3a:6d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 04:35:00 2025 by rpki-client