Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/5c4960fa-618a-3f5c-8a0c-d3938a3af0d3.roa
File:                     5c4960fa-618a-3f5c-8a0c-d3938a3af0d3.roa (raw, json)
Hash identifier:          DTyq4GL9MmlrvKoqqUzvwYwC86li5jCjvNK8fw8MFsY=
Subject key identifier:   9B:79:CB:00:33:92:00:B6:E8:72:5C:B4:04:13:F4:6B:38:4E:62:E3
Certificate issuer:       /CN=b60fd368-cb50-418b-8840-57c8491066b3
Certificate serial:       010D0C9F4328584ACF70FD9FB5EFDA65D84FAC80
Authority key identifier: 8E:1C:4F:B6:E2:B8:B8:5D:C8:2D:ED:E4:80:47:C3:86:1B:5C:9D:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/5c4960fa-618a-3f5c-8a0c-d3938a3af0d3.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     398754
IP address blocks:        2605:eec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:70:fd:9f:b5:ef:da:65:d8:4f:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b60fd368-cb50-418b-8840-57c8491066b3
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=2df2907a-62d2-424f-a4fb-996ea4f77bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8d:a1:82:99:42:05:5c:de:7e:71:9e:a5:45:
                    8f:78:27:44:ec:a1:a8:7b:f5:53:f2:1c:04:80:b7:
                    2b:99:86:e0:b8:69:f7:bb:74:9c:9a:bc:b4:ab:7e:
                    c4:4b:5b:82:31:df:22:fc:b2:d2:9f:33:6a:a8:e8:
                    af:10:38:91:0d:04:5a:a2:d1:7d:5b:e5:38:f6:99:
                    c2:c5:48:24:09:f7:5b:10:7b:02:cf:9d:e0:b8:d2:
                    9a:69:8b:3c:2e:b8:89:8a:24:ae:f1:4a:8d:44:6b:
                    cd:88:fc:0b:ab:98:08:52:dc:c2:3d:84:5b:ab:af:
                    7f:a8:7c:de:a1:d6:28:4d:ae:04:e8:bf:ff:a6:2a:
                    5f:99:21:97:71:b7:3c:87:4d:ec:14:ec:49:a7:85:
                    b1:00:a5:0a:73:0f:ce:26:82:c9:ac:8c:8d:34:2f:
                    07:9b:f4:12:ce:d6:7e:2f:87:2b:c4:2d:99:21:f4:
                    1b:57:58:a0:bb:c5:d5:0c:e5:64:8f:ce:4c:09:74:
                    ac:72:0f:e8:18:2f:74:eb:fd:d0:d9:36:9a:98:87:
                    0c:73:6c:7e:45:d8:20:4b:ba:39:37:c1:95:17:5e:
                    5e:1f:27:77:1b:03:93:14:99:b5:98:31:d5:8f:85:
                    6b:7c:af:e6:c3:58:e0:3f:6b:0c:82:a5:e6:6a:87:
                    c5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:79:CB:00:33:92:00:B6:E8:72:5C:B4:04:13:F4:6B:38:4E:62:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/5c4960fa-618a-3f5c-8a0c-d3938a3af0d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.crl

            X509v3 Authority Key Identifier:
                keyid:8E:1C:4F:B6:E2:B8:B8:5D:C8:2D:ED:E4:80:47:C3:86:1B:5C:9D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:eec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:67:1a:ab:4a:ee:f9:5a:bd:e5:de:e3:73:40:f2:b9:2f:d0:
         11:03:cf:2b:07:48:d0:55:11:76:83:4e:7e:f6:ff:72:a2:5c:
         60:60:32:ba:ec:ae:1c:56:fc:04:93:f7:5c:8f:06:fc:ff:2b:
         d5:d6:5b:d0:04:bb:df:d8:bf:a5:b4:fa:c8:49:37:77:ef:f5:
         cf:1b:c7:be:e4:c0:a1:ba:99:41:a0:74:d5:ed:2e:82:aa:a6:
         12:f8:ac:02:b9:75:21:47:f9:0a:db:ac:eb:30:e5:63:f4:7b:
         38:27:7d:f1:80:81:6a:ff:86:fe:ae:30:9d:d6:ce:87:8f:cd:
         30:c4:c4:d1:a5:6f:a6:e8:f6:fb:a0:11:58:52:b7:ef:a4:e9:
         9d:df:6f:f0:3e:0a:52:4a:3a:24:3c:5f:95:ae:32:9a:33:57:
         37:fb:dd:63:03:1d:db:4e:53:ba:2e:fb:ea:cb:51:84:bf:b7:
         ba:88:c9:a4:d8:17:f6:ec:5e:13:7f:a0:da:9a:aa:66:aa:5c:
         d4:d0:05:71:44:3f:09:4f:42:2e:a9:69:2d:36:ba:de:fc:78:
         39:f7:33:0d:27:ec:80:0f:c0:51:58:66:9d:d2:cd:18:13:4b:
         95:31:f1:68:3f:29:23:b9:f3:08:20:94:6f:93:a0:3d:83:54:
         01:af:ff:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:42:22 2025 by rpki-client