Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/2d7d10f7-61f7-301f-80f2-8b88f015e4d8.roa
File:                     2d7d10f7-61f7-301f-80f2-8b88f015e4d8.roa (raw, json)
Hash identifier:          1XK7C/A5RyecGeqARK+0fulRTsvC7UKMtq7eoH3jDCc=
Subject key identifier:   49:FD:E2:07:33:E5:7C:B6:49:C0:99:8C:E2:E5:E9:98:94:8F:6B:FC
Certificate issuer:       /CN=59f5c767-5b1f-4a85-8f05-980b585fa2b4
Certificate serial:       010D0C9F4328584B6D2C9AF5CB762B36DECA7F40
Authority key identifier: 5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/2d7d10f7-61f7-301f-80f2-8b88f015e4d8.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     26737
IP address blocks:        2620:14:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:9a:f5:cb:76:2b:36:de:ca:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59f5c767-5b1f-4a85-8f05-980b585fa2b4
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=e8f1271a-5ca9-47d4-8c25-32b325353f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:70:a4:50:3b:af:70:0e:6c:b1:e5:d0:82:8c:
                    19:48:3a:95:f7:65:6f:55:dc:c9:69:36:51:46:6d:
                    2e:a1:29:09:63:73:99:4a:a7:a1:74:7d:e0:ca:16:
                    19:b7:62:bd:2d:a8:d6:70:93:78:d7:0f:ca:0a:cf:
                    04:db:8c:2b:62:4c:04:13:93:02:cb:aa:bb:d8:3f:
                    15:b1:69:59:8e:f2:a7:87:64:e0:c5:71:23:61:01:
                    93:1d:43:84:74:ee:f7:12:b5:a5:8a:d5:69:cd:c5:
                    80:9d:cc:1b:46:47:1a:52:48:78:c4:60:ae:36:a5:
                    bf:ff:7a:28:af:f7:39:23:68:3a:39:ac:3b:d5:02:
                    49:89:14:dc:32:2d:f2:16:fd:47:c2:57:83:aa:6b:
                    ba:45:26:73:e0:bf:24:64:c6:dc:98:7c:3f:a7:db:
                    26:36:d5:db:0e:6f:ff:15:91:e4:79:40:27:db:6e:
                    f1:bb:8f:a0:62:54:5c:6a:0d:b7:44:0a:7e:25:f1:
                    1c:82:29:01:b0:a8:a4:85:41:df:1d:b6:5d:fe:27:
                    37:3e:4e:47:7c:96:fa:88:11:12:83:b1:3d:0e:c4:
                    87:94:25:58:63:d3:03:54:bc:91:e3:2e:40:ff:e4:
                    23:a4:80:b9:06:2f:b7:e6:33:53:38:2e:d3:3b:45:
                    d6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FD:E2:07:33:E5:7C:B6:49:C0:99:8C:E2:E5:E9:98:94:8F:6B:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/2d7d10f7-61f7-301f-80f2-8b88f015e4d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.crl

            X509v3 Authority Key Identifier:
                keyid:5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:14:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:17:18:84:c5:28:22:a0:75:58:41:16:51:8f:1d:1a:df:29:
         98:70:4b:b4:d4:2f:99:18:4d:0c:a7:8f:75:35:bd:e9:93:5f:
         4a:09:2d:1f:18:a1:37:b1:58:f8:b8:c2:30:ea:59:5f:6f:b8:
         c5:f5:f0:14:9c:f3:16:6e:0c:c4:e8:2a:8c:23:88:7e:2f:8c:
         52:ac:b8:82:30:4a:0d:c8:39:1d:ca:92:0b:ec:c5:c3:36:38:
         f4:33:54:34:05:ca:43:69:db:de:b4:28:97:25:bc:4c:95:80:
         dd:fe:e2:4f:37:58:e6:5e:ef:93:0c:1d:b5:c5:cf:d1:84:25:
         73:6b:34:4f:43:2c:be:6c:ac:1f:d2:25:20:70:41:9d:7a:78:
         e6:ea:7b:8c:85:a2:58:57:2e:03:fc:c0:a6:b1:17:90:1c:c4:
         e2:6c:a0:d7:ea:f4:fd:32:18:b1:00:2b:ed:13:c1:41:46:80:
         4c:c9:11:40:ab:68:5a:3d:61:2c:88:a5:f8:52:38:45:24:b5:
         c1:23:85:46:e3:72:b5:25:37:43:af:1a:dc:24:5b:f9:e0:01:
         cc:6b:c4:74:30:d4:6f:ac:21:36:09:5e:85:88:60:81:51:35:
         eb:b6:8f:c0:2d:01:8b:f8:cf:22:a6:32:11:d2:1f:25:ef:a5:
         5a:37:c2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:56:07 2025 by rpki-client