Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/55ff741b-f74c-362b-b06e-de431f95a7e5.roa
File:                     55ff741b-f74c-362b-b06e-de431f95a7e5.roa (raw, json)
Hash identifier:          rZtGCzJNES04EzxMRO7ki1y87EKuK7QCwGx+MaHNw8U=
Subject key identifier:   03:4D:F8:C5:73:BA:63:0C:5E:55:31:7C:40:B5:BD:EE:C4:15:26:25
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F4328584AC9DBA6AC4D0324359E138F00
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/55ff741b-f74c-362b-b06e-de431f95a7e5.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     399883
IP address blocks:        2602:fc06:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:a6:ac:4d:03:24:35:9e:13:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=b3d8e45d-d5ed-4f4b-9028-3d99b176cb78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:cb:f6:d0:ed:89:20:57:e8:2a:64:16:ea:
                    9c:e4:ff:04:91:22:82:16:31:ad:c2:24:63:80:b3:
                    21:bc:42:ea:1c:ca:0e:d1:4f:b1:fa:e8:f8:1e:af:
                    39:69:28:aa:48:a4:e8:d8:f1:0c:1f:f9:9a:b2:01:
                    e1:e3:6d:2f:3b:75:09:12:19:78:bd:9b:06:f3:27:
                    8d:3d:8d:af:b1:a6:46:a1:94:67:01:65:8e:d3:c1:
                    32:33:55:c9:0b:db:ac:16:8f:4e:68:a7:1c:df:2b:
                    3a:b1:e2:6b:35:76:56:80:7d:6c:66:87:6b:55:51:
                    c1:b7:88:91:a0:78:4c:5f:50:13:f4:19:3c:9b:12:
                    d1:3f:1f:3c:d4:b9:41:7a:c5:82:e4:5e:b3:70:77:
                    75:5d:d5:e8:8e:a9:48:d9:be:da:da:9f:05:13:2c:
                    6a:3d:4f:d6:e7:0d:8a:8c:5f:0d:d2:ae:e4:71:0f:
                    5c:d1:9d:ba:3e:67:16:49:da:59:21:7e:b2:e3:11:
                    42:15:64:35:2d:a7:b7:7a:8b:cf:89:d3:14:94:f3:
                    a1:dc:e0:f4:11:3b:68:59:70:07:ce:f9:4f:9e:c2:
                    61:ed:3c:10:4b:2d:a9:a6:1a:0f:fb:a8:83:26:7f:
                    6c:b7:39:1e:b1:c3:04:e7:a6:1c:27:2a:cc:7b:b4:
                    36:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4D:F8:C5:73:BA:63:0C:5E:55:31:7C:40:B5:BD:EE:C4:15:26:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/55ff741b-f74c-362b-b06e-de431f95a7e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc06:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:01:d6:74:f4:78:6b:8e:6e:ac:3d:9a:41:7d:63:9b:5f:9f:
         6a:79:62:47:35:0e:c6:78:50:38:95:67:18:76:bb:7e:c9:02:
         c9:2e:34:20:78:73:e6:d4:75:32:d6:28:8d:53:23:e0:b0:2c:
         9f:4d:dc:67:ee:3f:50:f0:39:0f:ec:2f:03:6d:76:ad:1c:b2:
         9e:9a:7d:2e:85:32:a6:98:fc:95:94:cf:2a:05:4c:d5:db:f1:
         20:48:0f:ce:f5:39:54:bd:6c:aa:87:77:5e:73:6b:2a:2e:f6:
         99:5a:6c:8e:ab:4c:51:9f:e4:9d:ad:3b:b1:6b:8c:de:b0:40:
         d7:3d:3e:0b:d8:1c:f6:1f:bc:1e:25:8c:94:d6:74:24:4d:f1:
         b0:84:6f:31:26:3b:26:8b:7a:38:1f:16:85:33:94:d2:b2:b8:
         d9:55:fb:86:24:38:c2:6a:13:2e:3d:6a:df:7f:73:65:b4:2d:
         29:42:95:0a:2e:3d:c4:b9:e7:ff:3e:5c:a9:ad:04:49:df:41:
         27:66:61:d6:44:6c:62:34:a4:eb:63:f5:f8:09:33:66:ac:af:
         d6:c2:de:8e:be:7a:a7:62:1c:5d:f5:f8:6c:51:31:e1:3b:02:
         ce:a6:9f:54:c8:bc:a8:36:9a:17:50:9d:56:a2:1f:8f:06:4a:
         7f:af:c3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:51:36 2025 by rpki-client