Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c5e49fc-a177-3465-bd18-2f3d04e61638.roa
File:                     9c5e49fc-a177-3465-bd18-2f3d04e61638.roa (raw, json)
Hash identifier:          yOhzmwEfG2+yp1/AmRodmU2lIKNgNsAUFpi5cUd2etQ=
Subject key identifier:   6C:DA:4E:04:89:64:D4:35:20:E0:F5:4D:C1:31:69:43:EC:68:84:C9
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285849FE10016F57A2F888DD88DA80
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c5e49fc-a177-3465-bd18-2f3d04e61638.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     16839
IP address blocks:        2606:3600:5520::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:10:01:6f:57:a2:f8:88:dd:88:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=70ddceed-b281-446d-a2e9-1a080a976f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f4:75:78:f6:ab:fe:39:fa:ad:13:c3:3e:b1:
                    90:eb:fd:38:d9:36:24:34:e0:b5:fa:b4:3a:de:ab:
                    f8:e7:97:a3:7f:f1:0d:00:11:ab:12:92:1d:f6:b5:
                    20:f4:c7:99:5d:96:26:04:81:13:3e:23:0f:73:2c:
                    a8:4f:7f:28:ed:32:97:7a:0c:9b:f4:fb:db:25:76:
                    cd:2d:38:11:2a:9c:37:ec:10:f5:4b:38:45:01:2a:
                    92:ba:dc:32:40:20:58:33:d1:bb:d8:0a:08:e4:61:
                    0b:02:bd:a0:31:1e:6b:e2:b4:8c:35:45:45:af:40:
                    34:16:72:fc:e0:92:98:52:be:07:87:4d:5a:88:ab:
                    0c:ff:fb:b3:0d:44:ad:ac:36:4e:18:69:6a:34:32:
                    4e:09:b4:ca:22:d8:13:1a:40:80:da:58:a8:0d:c0:
                    93:24:57:cc:dd:54:6b:d8:c3:10:cc:5e:74:35:65:
                    45:1c:bd:48:a6:4f:41:6f:c0:d8:dd:e2:0b:c1:8d:
                    d7:55:b1:a6:fa:e9:1a:3a:97:bd:fa:c7:a0:5c:ba:
                    1f:e2:a9:fa:66:6b:0b:cc:6f:b9:3a:0e:c3:e2:2d:
                    ed:3a:f1:4c:95:ca:02:a4:eb:5c:6c:2a:03:9c:4b:
                    d4:9d:22:73:07:6a:05:6d:91:5b:31:49:0c:82:e7:
                    9b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DA:4E:04:89:64:D4:35:20:E0:F5:4D:C1:31:69:43:EC:68:84:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/9c5e49fc-a177-3465-bd18-2f3d04e61638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3600:5520::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b1:d9:8b:b2:a9:7d:c9:0b:4f:7f:61:d8:f8:27:a3:92:56:
         51:a7:10:a2:1f:12:30:9a:be:0c:6d:35:75:62:83:0f:01:bd:
         1c:83:04:21:1a:d5:1c:96:23:ef:1d:b8:77:7b:ab:dd:97:c3:
         ef:33:90:6b:b3:ca:f4:68:92:43:15:a3:34:6e:49:ed:4a:b0:
         3c:08:fe:cf:93:86:87:6b:b0:1f:9c:9f:e3:d6:76:b3:c3:00:
         27:96:7d:1d:e9:a2:80:f1:71:65:51:8a:18:bb:0a:59:24:bc:
         ef:97:80:33:23:58:c9:c3:1b:07:36:12:53:b8:05:7e:83:ee:
         25:d6:69:ff:1b:d0:9a:e5:73:83:59:11:60:82:4d:52:cb:62:
         a6:25:9e:95:72:c6:9a:c6:2e:ea:96:e2:bb:4d:43:2a:37:37:
         ed:4d:2d:fe:c4:54:3d:d5:c1:d8:c4:5d:35:70:fd:2f:d3:54:
         3b:f3:29:d8:63:66:52:9f:df:70:8b:68:fa:60:d4:46:b1:f6:
         ea:3e:1e:d7:a3:af:2b:1c:7b:64:07:86:9f:3b:7a:f0:50:20:
         aa:27:7c:63:cb:44:8c:3c:d7:1f:42:f6:c7:a6:16:44:cf:0c:
         ae:fe:22:f2:a0:7d:92:c7:eb:52:28:2d:1c:5b:1a:02:ee:0e:
         37:74:b8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:55:11 2025 by rpki-client