Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/3a05921a-6543-395d-9659-96d79862bab5.roa
File:                     3a05921a-6543-395d-9659-96d79862bab5.roa (raw, json)
Hash identifier:          givUON6DBsS1EmHaG9d3lh93L/X+oikZs9/jmJsMWR4=
Subject key identifier:   25:E4:3F:C2:18:D4:A8:34:1E:0D:3F:A7:63:0C:B8:4E:64:20:0D:24
Certificate issuer:       /CN=b05e76f8-7e37-4663-ae5f-9f03054cfe92
Certificate serial:       010D0C9F4328584AF0F134C52D4F3162BA046200
Authority key identifier: 34:D0:72:D6:CB:A5:9B:93:4E:96:2F:C0:50:7B:B3:F7:4A:A2:02:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/3a05921a-6543-395d-9659-96d79862bab5.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     399871
IP address blocks:        2606:6040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:34:c5:2d:4f:31:62:ba:04:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05e76f8-7e37-4663-ae5f-9f03054cfe92
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=f76a39dd-774f-4150-a69f-9d65c283b01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ba:b6:db:74:f9:21:34:73:45:c8:74:2c:ba:
                    cb:de:d3:69:81:b3:30:07:cf:27:20:ef:15:42:61:
                    c2:6d:2f:08:eb:d3:04:79:19:e4:ea:88:32:68:d4:
                    27:a2:a8:73:c6:25:82:d5:86:5d:21:14:64:74:0c:
                    97:6a:bb:26:f6:58:8f:b1:ae:70:91:91:60:1d:67:
                    8c:39:72:59:64:d8:11:83:59:d9:56:91:50:80:4f:
                    a5:0e:3b:53:22:7e:d9:4f:ce:e1:2c:68:00:1b:c6:
                    5e:4e:39:c1:b3:5e:19:91:c9:70:16:f9:2f:ef:71:
                    49:54:d8:44:5a:b0:e8:0a:e5:8b:26:39:43:6a:30:
                    e4:96:51:f2:cf:d5:5d:64:9f:f4:76:f2:16:24:a3:
                    33:91:7c:fd:19:94:5d:b4:1e:73:ea:97:62:c2:36:
                    09:53:ac:0c:c3:7e:04:f2:36:92:95:25:73:48:6c:
                    6e:43:28:bf:ac:b1:ce:be:ef:5f:ce:0c:6c:1b:b8:
                    e8:87:60:15:22:08:92:76:2e:9d:01:a1:b9:5c:b9:
                    e6:f3:a0:14:c1:8b:c0:2a:e6:32:01:a8:06:2d:3b:
                    1e:4b:91:bd:f4:5b:ac:d1:cb:32:1d:78:eb:1e:37:
                    b3:20:26:e3:3b:b7:1a:5f:72:aa:31:cd:e1:b6:03:
                    30:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E4:3F:C2:18:D4:A8:34:1E:0D:3F:A7:63:0C:B8:4E:64:20:0D:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/3a05921a-6543-395d-9659-96d79862bab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.crl

            X509v3 Authority Key Identifier:
                keyid:34:D0:72:D6:CB:A5:9B:93:4E:96:2F:C0:50:7B:B3:F7:4A:A2:02:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:0c:70:e9:71:76:75:df:5a:c8:99:cf:c7:09:4e:bd:c8:60:
         ab:ba:ea:28:4d:64:ff:b7:fb:90:50:c0:5a:7e:12:c3:6b:fa:
         45:b6:a0:dd:e0:7e:96:09:16:6b:6c:0d:80:61:4b:09:ca:8c:
         40:b1:2c:aa:74:9a:95:49:b5:e7:98:13:dc:d6:e9:75:e6:4e:
         2d:92:ed:0a:0d:e1:45:06:e8:b6:c0:73:5d:6a:c6:72:57:0f:
         fb:53:6d:28:45:26:8d:b8:fe:1d:23:75:3b:0a:71:ef:cc:b8:
         60:a7:5f:60:f0:61:fd:44:79:16:60:e7:75:85:2d:8b:0b:39:
         a0:4d:6d:34:0d:1d:ff:dc:77:00:cc:bf:65:c7:b0:4c:c4:b7:
         53:92:74:72:f5:9a:eb:98:b4:e0:85:3a:11:52:9e:00:4a:5a:
         78:f9:f8:97:aa:5e:4e:1c:7e:11:d4:fb:22:19:0a:9c:8e:90:
         f5:fd:e9:7a:88:0b:65:fd:2e:ff:af:d2:15:2f:b5:d8:c5:07:
         e8:9f:ac:de:d4:72:c0:a2:26:02:a9:51:81:f6:d7:a6:ce:42:
         46:c9:d9:23:f8:45:cc:0e:9c:d3:51:5c:8e:68:de:f6:6f:98:
         05:0c:f1:c3:1a:5a:62:91:07:d4:6d:35:ea:57:d9:92:f8:c6:
         b8:e1:b1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:56:08 2025 by rpki-client