Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72/f5abc079-9b79-3ea8-801b-77d1ad581908.roa
File:                     f5abc079-9b79-3ea8-801b-77d1ad581908.roa (raw, json)
Hash identifier:          m/XQlfwHqos+sCNiGm4/vxBtkfla9CErnT0whRHbGwM=
Subject key identifier:   04:1C:F3:C6:A0:D2:15:1A:33:7F:20:AC:C9:99:7E:3D:53:C0:10:C2
Certificate issuer:       /CN=aab30367-68c3-4c5c-b455-f82d7f7bfc72
Certificate serial:       010D0C9F4328584AD23BA97CE85D95455A603280
Authority key identifier: 31:87:8D:A0:BB:03:F2:0D:E0:52:2A:93:1E:B8:60:02:8A:1F:1B:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72/f5abc079-9b79-3ea8-801b-77d1ad581908.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     401308
IP address blocks:        2606:2b40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72/aab30367-68c3-4c5c-b455-f82d7f7bfc72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72/aab30367-68c3-4c5c-b455-f82d7f7bfc72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:a9:7c:e8:5d:95:45:5a:60:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aab30367-68c3-4c5c-b455-f82d7f7bfc72
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=52278033-95bf-4e9d-9d2b-f40b7218a8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:90:1e:0b:11:9b:86:3d:45:0c:b0:70:dd:
                    d0:98:b7:b0:38:6c:d9:ce:aa:4a:bc:43:fc:57:ec:
                    e0:02:23:f9:3c:20:13:7c:df:ed:dc:18:83:e9:0e:
                    c4:01:cc:d8:43:77:a2:6a:7b:e1:59:a8:83:8d:c2:
                    8d:6e:a1:56:7d:5a:5d:f9:29:e8:e8:0d:83:b4:21:
                    d3:80:5e:bb:d8:dc:b9:75:62:fb:20:01:0a:8f:9a:
                    59:94:42:27:88:f2:ee:25:bb:1c:1a:df:02:1b:32:
                    1d:12:5e:4d:69:a5:59:a5:21:6e:98:ac:50:00:65:
                    34:2c:8c:01:f0:92:09:d5:ed:8b:5b:33:4c:58:20:
                    2b:be:87:56:75:53:38:c5:c2:b2:32:8a:bc:99:02:
                    e4:3c:38:10:b2:bb:a2:fa:e9:2a:c8:73:54:dd:b2:
                    1f:29:5e:40:1c:19:ce:93:2c:a1:91:d8:ca:eb:95:
                    33:93:0a:16:bd:8b:c0:62:0f:61:84:ad:e6:5e:d8:
                    d2:4c:dc:79:f1:e2:7d:b2:03:35:3e:fb:c3:0d:a4:
                    92:08:eb:b3:b8:bf:dc:1e:ee:bf:1b:4e:81:e7:b1:
                    bf:31:2c:de:2e:05:6b:88:8f:f2:ab:2d:95:9a:02:
                    ba:88:1f:02:f3:74:c6:47:4a:a7:e4:ae:ed:ba:7b:
                    8d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1C:F3:C6:A0:D2:15:1A:33:7F:20:AC:C9:99:7E:3D:53:C0:10:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72/f5abc079-9b79-3ea8-801b-77d1ad581908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72/aab30367-68c3-4c5c-b455-f82d7f7bfc72.crl

            X509v3 Authority Key Identifier:
                keyid:31:87:8D:A0:BB:03:F2:0D:E0:52:2A:93:1E:B8:60:02:8A:1F:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aab30367-68c3-4c5c-b455-f82d7f7bfc72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:a9:94:72:36:a7:ba:eb:71:49:0b:7f:90:3d:0e:cb:3a:8e:
         65:1d:a5:61:0d:b5:33:89:87:8c:4b:1d:29:e7:76:cc:bf:8b:
         eb:81:9f:0a:06:00:7b:00:1e:7b:af:93:a4:38:65:ef:7b:74:
         c4:4b:71:9c:b3:ea:d6:12:76:dc:90:1e:05:33:58:0a:f3:8f:
         7a:04:3b:d2:23:5e:bd:a4:ab:c1:70:74:f4:fb:4d:4d:02:b2:
         91:43:41:9c:da:5f:7d:3d:71:80:ce:45:ee:e4:95:3d:cd:82:
         d9:b9:8d:33:7c:fc:de:af:59:b6:23:45:9b:60:e7:e3:86:49:
         17:ef:ab:be:53:7c:9b:c2:f5:d1:79:c9:10:c3:80:24:a6:f7:
         ba:73:f7:29:ca:41:ee:7c:ca:8f:85:be:44:93:30:a9:ee:0c:
         9f:91:e9:a0:6b:10:2e:d5:3d:4a:02:6c:05:47:d9:ee:2d:7a:
         34:28:a5:6e:39:87:a0:86:c4:52:94:a0:a7:85:ab:12:06:bb:
         32:65:85:b0:db:63:1b:15:11:89:01:46:c9:68:6b:14:0f:d0:
         eb:21:58:20:0a:30:bd:70:37:30:5a:b8:6f:35:08:1b:2f:76:
         93:8c:e2:85:3b:cf:0a:81:b4:22:0e:ba:a6:00:fe:60:c6:fe:
         af:1e:f5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:32:50 2025 by rpki-client