Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/2f6c7b5c-927e-35e4-97d7-0b378c680f16.roa
File:                     2f6c7b5c-927e-35e4-97d7-0b378c680f16.roa (raw, json)
Hash identifier:          dANjfFMRdfB2k1OrRzNaXwX3eoGVJGe7WVkUQHw8Q+k=
Subject key identifier:   51:99:5C:C0:BD:CB:30:58:7F:CC:2E:D5:35:5C:C8:26:C6:0D:B9:B3
Certificate issuer:       /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial:       010D0C9F4328584B59A1C66DD46BB550621C0E00
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/2f6c7b5c-927e-35e4-97d7-0b378c680f16.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     53264
IP address blocks:        2607:ff50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:c6:6d:d4:6b:b5:50:62:1c:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=22ac32de-8904-4b4f-8535-c82fa108ed58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c2:90:43:74:50:4b:7a:d4:d7:7e:44:cd:bf:
                    dc:03:37:8b:8c:f8:bd:b4:06:47:58:61:1c:99:64:
                    72:78:05:3f:87:2b:0d:eb:43:a6:ca:5d:03:9d:7a:
                    99:21:72:16:fe:81:0a:a0:f6:82:3a:e9:b1:60:13:
                    c3:7a:61:61:5a:cc:71:6b:15:26:04:b5:24:da:60:
                    77:c5:b3:96:cb:84:a0:50:e2:de:63:b4:b8:42:7a:
                    c9:c0:81:15:b3:c5:81:21:73:8f:71:b7:7a:84:2c:
                    97:9b:cc:82:8c:21:fe:bb:c4:8b:78:99:3d:b9:1b:
                    16:5a:a7:d4:c9:0e:19:c8:ad:76:47:b3:2a:10:b1:
                    d9:6c:97:d1:40:cd:2d:5b:9b:ed:df:88:27:9a:a4:
                    47:63:1e:2b:4a:98:5c:b6:14:f2:92:9e:fe:cf:30:
                    a5:dc:32:a1:2f:ac:ef:ff:ac:0d:a5:9f:1a:1d:45:
                    09:99:4a:be:b3:43:c5:03:64:6e:62:68:3d:2c:47:
                    2a:32:66:1b:f1:49:1b:3e:fe:82:4a:0d:7e:4b:2a:
                    ac:41:5f:cb:be:40:f2:30:82:85:b9:a3:a4:16:23:
                    17:89:c3:dd:f3:91:a5:cd:50:4b:d5:7c:0a:3d:52:
                    47:0e:56:4b:42:41:dc:3b:8b:80:d8:43:70:86:b1:
                    5f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:99:5C:C0:BD:CB:30:58:7F:CC:2E:D5:35:5C:C8:26:C6:0D:B9:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/2f6c7b5c-927e-35e4-97d7-0b378c680f16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ff50::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:bc:7d:78:31:27:5a:89:4f:7c:c2:d0:a5:a0:26:d8:ac:df:
         0f:f5:02:b5:ad:e2:cb:bb:48:50:5c:e6:6b:6c:25:ae:34:5d:
         3a:4d:7b:fa:ca:b5:49:f4:32:48:85:61:d3:5f:a9:c0:0b:04:
         94:7a:57:ee:83:2e:01:16:58:af:44:97:64:8a:99:cb:ad:e1:
         98:da:a5:87:fb:f8:5a:bd:d3:2d:c7:fc:3d:ff:44:39:b7:28:
         64:8f:a1:21:22:fe:e7:95:92:db:66:3e:99:e0:67:8e:d2:73:
         da:3b:ad:87:aa:1e:05:98:66:1a:b3:d0:38:ac:d4:4c:e9:f3:
         26:ad:40:02:d7:1d:74:93:35:a6:e7:79:c6:c7:92:23:83:3c:
         68:8e:03:7f:ea:93:9a:aa:c2:9b:ec:ff:c2:d4:d8:d0:20:30:
         6f:f0:96:b4:02:6c:2b:67:81:5e:52:d7:a7:65:9c:ee:27:4d:
         92:6a:bd:cb:ec:cd:23:9f:b8:bd:b8:74:a1:13:ff:0d:4f:0e:
         f8:10:a5:80:13:02:f2:b8:04:f8:c2:43:f9:69:b9:74:e5:01:
         a4:23:9e:78:d3:4f:63:66:f8:a2:fc:4f:1b:61:37:de:d8:48:
         47:35:a6:d0:8d:79:b4:9e:79:e7:f5:96:ec:37:35:64:e1:aa:
         65:08:4c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:09 2025 by rpki-client