Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/1d6d4ec2-75d8-36cf-aa96-2344eec4a193.roa
File:                     1d6d4ec2-75d8-36cf-aa96-2344eec4a193.roa (raw, json)
Hash identifier:          sZO5oHSJCa9LsTFWxujvD18mf+GqnC1IKBZkIPKoZIs=
Subject key identifier:   49:AA:8E:84:13:9A:4F:DE:92:1E:52:1D:08:EA:89:2C:16:A1:2A:1D
Certificate issuer:       /CN=a6aef644-f3b7-499d-9ed8-cd39be3324bf
Certificate serial:       010D0C9F4328584B44B1B9A77D4E4DCEE700D9C0
Authority key identifier: EC:22:7C:30:7C:39:DC:33:50:6B:51:C0:19:A2:AE:99:C1:E6:37:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/1d6d4ec2-75d8-36cf-aa96-2344eec4a193.roa
Signing time:             Sun 21 Sep 2025 13:00:42 +0000
ROA not before:           Sun 21 Sep 2025 13:00:42 +0000
ROA not after:            Sat 20 Dec 2025 14:00:42 +0000
asID:                     399224
IP address blocks:        2606:95c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/a6aef644-f3b7-499d-9ed8-cd39be3324bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/a6aef644-f3b7-499d-9ed8-cd39be3324bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:b1:b9:a7:7d:4e:4d:ce:e7:00:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6aef644-f3b7-499d-9ed8-cd39be3324bf
        Validity
            Not Before: Sep 21 13:00:42 2025 GMT
            Not After : Dec 20 14:00:42 2025 GMT
        Subject: CN=10149c7c-5243-463b-8f42-bc7f9578a61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:65:f8:03:05:ef:6a:75:04:d8:22:b1:da:
                    d8:1e:eb:8d:5a:99:27:73:0f:9c:e5:7c:10:d1:3d:
                    0d:ba:a3:45:2d:59:23:bf:bc:09:03:86:14:3d:b4:
                    25:70:f1:eb:2d:ba:2c:cd:65:a2:06:00:92:66:3e:
                    d4:7f:72:51:c3:4b:eb:4d:83:1b:79:66:f5:34:98:
                    5f:13:56:56:db:c2:62:0e:f1:d6:3a:ae:5f:d9:e9:
                    4f:d9:a6:c1:76:ef:75:8b:ba:9b:44:4d:c6:6f:ec:
                    60:43:6c:ad:bb:88:0a:67:b7:97:7c:88:51:f6:f1:
                    5f:30:ea:52:c9:bf:5d:8e:4c:8e:a9:44:c5:2d:88:
                    43:5f:36:3f:03:30:80:54:0e:aa:7d:6b:81:b8:49:
                    02:a6:a6:c5:e3:f0:d4:b9:8d:41:15:33:f0:d2:ba:
                    e0:8e:28:51:16:a1:73:95:0f:c9:ec:fc:e2:a3:ab:
                    41:3b:19:09:7c:6c:64:47:cb:0d:c1:31:fc:90:d3:
                    8e:18:c5:34:f0:90:75:c7:b9:22:3d:33:f5:3c:00:
                    24:b2:7d:17:93:96:8c:30:c2:85:7f:cd:33:78:f8:
                    59:88:bf:cd:67:4b:04:29:1b:c4:fe:ed:53:4a:06:
                    42:f9:02:54:08:d0:58:93:c9:e4:04:42:f4:a1:6d:
                    0b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AA:8E:84:13:9A:4F:DE:92:1E:52:1D:08:EA:89:2C:16:A1:2A:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/1d6d4ec2-75d8-36cf-aa96-2344eec4a193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/a6aef644-f3b7-499d-9ed8-cd39be3324bf.crl

            X509v3 Authority Key Identifier:
                keyid:EC:22:7C:30:7C:39:DC:33:50:6B:51:C0:19:A2:AE:99:C1:E6:37:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:95c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b6:2b:eb:90:26:f6:9d:67:1c:19:84:bc:7c:0b:60:5f:e5:
         7d:fe:d1:08:55:69:27:06:a4:38:0d:c1:fc:a0:34:8e:25:69:
         10:c1:1a:a1:87:1c:8d:9e:ba:a2:b1:09:19:d9:da:ab:f3:6b:
         8c:52:59:57:dd:a2:8b:a5:40:31:c8:a1:ee:e3:7e:b5:19:65:
         b0:c4:7f:6e:81:3d:48:19:9b:1c:7b:d0:d2:1a:a3:86:96:2b:
         09:73:4f:21:03:63:34:63:45:d0:de:c3:3d:66:e0:f2:23:46:
         7b:0a:a7:69:1a:c0:1d:a3:38:08:09:e7:b8:85:08:ba:22:75:
         25:8e:f5:3f:cb:fb:b1:ec:4d:46:cb:f3:e0:3a:7b:4e:9f:b4:
         f6:bb:2e:41:26:9c:c3:44:2d:bb:4c:b2:10:79:f9:2d:48:fc:
         ac:d6:0a:c1:06:fb:d7:ae:95:ae:f4:ac:bd:d5:0d:0c:10:27:
         cd:b1:a1:7a:36:69:dc:ac:1f:b7:64:16:2c:bd:45:91:f8:a0:
         f7:a5:d5:02:7c:dc:8e:b3:c4:0d:de:16:4d:cd:c4:15:7b:f9:
         a5:b2:9c:d0:9d:7c:d5:93:74:0a:fb:07:f3:d4:f1:f1:80:00:
         92:60:41:16:28:9d:fd:83:81:f7:f4:0b:d4:1a:41:c0:54:c1:
         bc:cd:40:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:05:04 2025 by rpki-client