Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa
File:                     60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa (raw, json)
Hash identifier:          RCyfpmL5zujto3wIc1eBNeLZ+J2Rq/ZTDDTqhykWNqM=
Subject key identifier:   E3:BD:A6:34:49:D7:0E:29:02:FD:17:09:F7:91:2C:0E:27:66:18:6D
Certificate issuer:       /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Certificate serial:       010D0C9F4328584B4FDC73F70A53E518F3456D80
Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     32058
IP address blocks:        2620:0:120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:73:f7:0a:53:e5:18:f3:45:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=d156754b-701c-4d65-8cb9-278ab872f6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:c3:6c:28:66:eb:53:cd:16:d3:ed:9a:e6:
                    35:b7:a7:12:cf:3b:48:96:0e:7f:9f:02:e0:2f:62:
                    2e:a9:2d:6b:a3:1d:6a:b5:c2:2d:bf:30:10:80:8e:
                    6f:c3:b6:0e:90:36:2b:13:0b:d1:46:db:f9:0d:33:
                    80:6d:29:72:4b:0a:98:ae:59:c3:1b:63:90:e6:e8:
                    64:20:ee:79:80:f4:1f:96:ff:ea:8e:1f:bc:d8:ee:
                    79:64:de:66:66:4f:e9:db:09:95:ee:62:83:17:4d:
                    9b:f0:d7:2d:f7:1b:b7:ec:dc:f5:39:fe:2e:39:fa:
                    a9:9a:e4:4e:17:e1:85:fd:27:fb:cf:ae:f3:b1:28:
                    66:0f:6b:3f:20:06:43:b9:2b:f8:6b:17:bf:6d:f1:
                    95:86:4c:2c:fe:01:b7:82:83:0c:8a:f0:f8:53:39:
                    d0:3d:5e:16:73:04:73:cf:b8:3a:57:4f:10:01:cd:
                    cb:fa:bd:97:e8:7f:90:95:fe:cb:ca:bf:a9:2d:f4:
                    9b:bc:46:43:ff:0d:c8:b5:78:27:b1:62:6b:16:27:
                    b8:9d:76:c1:7c:20:bb:9b:b7:17:13:38:d8:54:07:
                    0a:75:74:9f:61:4f:d1:ad:68:e6:81:3c:cf:7a:e9:
                    ff:72:ab:83:e8:cf:b0:d1:a4:10:8b:d8:63:d4:b5:
                    2d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BD:A6:34:49:D7:0E:29:02:FD:17:09:F7:91:2C:0E:27:66:18:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl

            X509v3 Authority Key Identifier:
                keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:9c:b4:63:fb:b9:ee:9e:c1:04:40:5f:e2:35:3c:a3:81:62:
         6f:ea:12:a1:87:30:e2:f1:ff:28:e0:ee:eb:eb:06:f4:19:b0:
         76:75:af:f0:a5:e2:d2:50:fc:cc:33:c2:e2:8d:2e:83:07:b2:
         6f:4e:e3:e3:8e:3a:e2:ea:d6:f4:32:62:67:62:55:aa:86:ee:
         21:cb:ac:c5:82:cb:9f:76:cb:c4:28:58:4b:bf:79:76:ca:59:
         7d:b3:4d:91:d3:80:d3:ec:ce:c5:17:1d:35:eb:43:97:f8:80:
         f2:e2:17:6b:99:10:ff:ff:b0:ec:cc:05:e6:d1:bc:f5:35:fd:
         e4:01:45:62:64:eb:9c:95:14:e0:54:d6:26:aa:44:6f:85:28:
         64:9a:3d:e2:74:9c:57:d1:b2:e4:cd:e4:f1:46:e1:24:8e:48:
         fc:0f:f2:e2:ca:b6:20:f9:1c:2d:d8:72:c0:b8:bd:7c:f8:30:
         9c:09:d0:fd:1b:e6:cc:6f:03:ae:82:ea:b3:d4:cb:b0:de:6c:
         e1:a8:09:0d:b9:ef:d8:70:f0:80:b3:95:72:d9:10:57:3e:3f:
         27:8a:04:a7:90:70:ca:43:6f:42:b5:ea:ee:0c:e0:20:af:25:
         bc:a3:bd:4f:fc:e9:78:a2:bb:b9:4f:3d:a0:80:f0:07:63:49:
         94:2d:1b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:35:22 2025 by rpki-client