Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/6d411e6e-e32c-387b-b928-9a25b67f2285.roa
File:                     6d411e6e-e32c-387b-b928-9a25b67f2285.roa (raw, json)
Hash identifier:          S/vR71nsiULhz3sznplw5uxdnTv8rziy5cY+YEmNokI=
Subject key identifier:   7B:8C:C9:18:64:AA:D9:7C:D2:DB:1A:1F:3C:E9:DC:C6:1D:51:CF:8A
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584B13D6ADADAB3BA1F70126A420
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/6d411e6e-e32c-387b-b928-9a25b67f2285.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     212996
IP address blocks:        2605:dd40:8009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:ad:ad:ab:3b:a1:f7:01:26:a4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=078c3f8d-c3e1-4b04-afeb-b28719366abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:14:b5:fa:fc:65:8a:18:d4:90:d3:45:e8:5f:
                    c6:a6:3f:a1:9d:82:d5:5c:88:13:b4:c7:63:94:fe:
                    e6:16:0a:2c:51:97:01:e9:ac:65:94:c6:64:d9:73:
                    bb:ca:28:a2:ac:36:d4:91:34:aa:da:b9:c1:ef:3a:
                    2f:25:0b:ca:6e:8e:91:31:31:0a:4e:b0:ad:c5:9e:
                    8e:1b:69:9f:07:cd:fb:12:d5:23:26:d6:35:f1:9f:
                    5d:e4:ee:d2:28:87:f3:af:1f:5a:3a:fb:7d:fb:de:
                    64:b5:97:bd:00:65:bc:b0:7f:8b:79:51:ab:4d:f5:
                    30:68:40:b8:a1:75:17:d6:f5:05:ff:27:03:d1:a0:
                    e5:a1:ef:17:79:5d:07:4b:38:90:d2:ea:a0:17:2f:
                    5e:eb:41:e1:46:da:8d:8e:ed:58:79:2e:f5:f1:96:
                    9e:b6:5a:5b:af:bd:62:3b:b1:d3:b6:97:d1:37:d9:
                    bc:74:1c:a5:79:9a:8f:3d:ab:50:fc:18:41:84:c7:
                    1f:34:e8:ee:92:68:18:32:34:47:85:00:ac:40:a5:
                    de:02:60:a4:51:0c:95:7c:c2:88:71:95:66:d3:fb:
                    43:b5:3e:58:46:01:ce:82:fe:ca:06:4e:70:79:83:
                    35:e2:a7:ed:07:de:e0:20:dc:6f:45:ca:22:a2:ca:
                    69:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8C:C9:18:64:AA:D9:7C:D2:DB:1A:1F:3C:E9:DC:C6:1D:51:CF:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/6d411e6e-e32c-387b-b928-9a25b67f2285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:96:39:10:b2:3e:c0:6c:88:37:a0:da:1d:3c:bb:3e:e7:95:
         07:d4:77:aa:a0:b8:fa:2e:21:45:4e:f0:b5:39:6f:7e:3f:0b:
         84:b9:ea:0b:33:cf:66:ea:03:ed:12:42:c0:4b:0c:72:e0:8b:
         c1:83:a6:fc:52:36:35:85:9a:0f:6f:55:c3:dc:8e:24:31:7b:
         96:dc:c4:57:d2:ce:57:48:18:bc:13:f8:9d:43:3b:0f:b4:b3:
         bb:9d:b5:ac:94:d2:35:10:c0:44:4f:44:58:19:58:3d:da:54:
         80:b2:33:da:7a:58:62:b0:78:d2:57:20:3f:c5:2c:e3:08:39:
         a7:ea:c9:5d:d1:69:79:96:da:ee:5b:e2:e0:de:92:04:c2:c1:
         64:e5:f3:e6:bb:6f:f3:55:e3:2d:ae:8d:59:7d:95:52:2e:ed:
         2d:a2:2f:4b:85:69:31:ff:9e:33:36:5c:4d:68:be:fb:08:3f:
         e9:af:68:84:88:4b:52:55:ee:93:87:db:8f:9a:5e:de:48:21:
         59:8b:9a:94:8c:08:69:6c:7a:ad:f9:32:de:c4:fa:33:a9:44:
         c4:76:c1:1b:d0:c8:69:1f:d0:ae:f1:e9:c9:68:d5:85:09:62:
         93:67:e2:83:56:2f:38:50:90:4a:db:a4:5b:f4:d8:dd:3d:fc:
         ed:3d:d4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:21:02 2025 by rpki-client