Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5b33bf37-d11a-32be-9139-01c4b805f5ed.roa
File:                     5b33bf37-d11a-32be-9139-01c4b805f5ed.roa (raw, json)
Hash identifier:          VTnOVnZPvyRNH8RzX+PTW5GMpoI/Car0exkCoQ/L+mM=
Subject key identifier:   CD:8A:31:A7:D0:DD:8D:78:A5:B0:C4:E0:C6:F4:64:D7:47:25:3E:F2
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584B4FDC7B3DAA998FAA0F116CE8
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5b33bf37-d11a-32be-9139-01c4b805f5ed.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     54198
IP address blocks:        2605:d6c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:7b:3d:aa:99:8f:aa:0f:11:6c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=df2c90ed-b6c6-44e3-82a6-05037a87865d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3d:5a:8c:ec:28:8b:6f:b5:64:0b:51:24:a4:
                    c3:9f:e3:86:8e:7d:ea:34:ba:ab:cd:4b:5b:74:76:
                    68:79:f0:2e:fd:7e:9a:1d:d4:de:12:b9:86:8a:c2:
                    4c:54:61:f0:23:6b:80:b6:48:d0:97:e4:73:6f:a3:
                    f8:0a:0b:43:cb:89:e2:78:e1:0e:b6:71:02:65:5e:
                    21:4e:7b:f4:02:aa:80:f5:8a:73:d0:1b:95:88:cb:
                    03:80:28:6c:87:91:f4:b4:21:8b:9a:e5:b8:bb:e2:
                    6c:df:56:1a:4c:8f:ef:f4:78:c9:cb:f5:7a:ae:92:
                    cd:ed:02:a1:ee:2b:9f:2d:77:9f:af:9b:b3:25:75:
                    c3:92:1b:77:d1:0a:2c:f9:31:31:1f:df:b2:38:bc:
                    17:7a:41:d7:27:0c:58:4e:0c:94:60:69:1b:58:5b:
                    19:d4:e3:56:60:0d:dd:03:27:61:a2:06:b2:e0:41:
                    e2:a7:4a:59:ec:5c:51:24:0b:e5:de:37:46:a8:6d:
                    2e:e9:d7:92:8e:bf:d2:73:b2:c8:67:01:fc:d1:33:
                    9f:e6:9b:1d:62:86:f9:cb:61:ee:33:39:03:2c:f8:
                    87:6a:78:16:66:54:3a:90:94:16:8c:62:3b:09:b8:
                    aa:ed:58:fa:52:7b:85:c6:a8:39:15:2f:19:b9:a1:
                    14:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8A:31:A7:D0:DD:8D:78:A5:B0:C4:E0:C6:F4:64:D7:47:25:3E:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5b33bf37-d11a-32be-9139-01c4b805f5ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:d6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:86:14:af:6d:91:34:5f:95:53:1c:33:6b:69:d7:8d:bc:0e:
         61:60:2c:54:7f:2f:19:25:84:97:1e:0d:ff:2a:0a:2a:3d:f0:
         d7:e7:1f:8c:a9:04:5e:b1:93:cc:44:30:0b:42:e9:6e:16:bf:
         98:d2:d3:22:58:ea:5d:11:b7:8b:9f:b4:c6:22:7a:23:7c:a7:
         cb:fb:78:28:22:4d:76:56:cd:c9:21:ed:e7:94:c7:91:ba:2a:
         c2:5f:bb:4e:d0:ec:e7:77:e0:7e:db:6f:58:11:85:fb:43:1d:
         21:d9:b2:81:24:6b:88:99:82:be:b0:39:fe:fa:ec:b0:cd:89:
         5a:80:7e:e0:92:1b:71:a5:98:1c:04:7c:0c:e5:0c:89:7e:35:
         57:40:5f:08:cd:d8:0a:b6:bc:d9:44:5f:ca:cc:7b:0c:dd:39:
         06:66:ad:21:db:d1:a7:8f:f3:82:f4:ee:da:20:2a:2f:c5:e5:
         71:c0:79:aa:3f:1c:9d:76:90:b5:42:76:d7:96:0d:12:e3:43:
         f1:4a:69:b3:04:f0:1d:2b:2e:e7:fd:42:ff:aa:02:54:4a:f0:
         36:0a:1b:e7:e8:44:65:89:23:78:b9:6f:5f:eb:ca:16:99:3e:
         95:c4:fa:9f:99:ed:41:27:fb:5c:df:d1:4b:dc:fc:43:81:18:
         db:f8:01:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:40:25 2025 by rpki-client