Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6fee5bbd-f96a-3995-b189-134429e99cd1.roa
File:                     6fee5bbd-f96a-3995-b189-134429e99cd1.roa (raw, json)
Hash identifier:          r5fM1pC6GY6zx2OikexNM+1DnfNgRLyLDfbfdcybrNg=
Subject key identifier:   70:8F:1A:13:58:15:7D:4E:67:E9:CF:F7:69:C5:63:EC:AF:34:4B:CC
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AE5C68340EDDA2C06E0FAE148
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6fee5bbd-f96a-3995-b189-134429e99cd1.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     399155
IP address blocks:        2610:a1:3200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:83:40:ed:da:2c:06:e0:fa:e1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=c3b580c5-9340-4ef1-924e-fe5fbc20346f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:10:ef:d7:e3:0a:39:6f:62:9c:a4:f4:56:44:
                    d4:06:87:8b:35:05:c0:50:78:69:bf:ab:91:70:73:
                    c2:5e:7a:4f:bb:73:65:8f:2a:27:61:e5:26:3b:1b:
                    91:2f:14:2b:75:7d:d5:06:45:a8:be:a1:02:0c:75:
                    7c:63:61:d9:0b:44:c3:94:60:07:d9:23:8e:fe:c7:
                    c3:ea:bf:67:25:6a:d4:58:eb:52:24:27:30:50:e1:
                    7d:0d:49:46:db:22:88:a7:d9:4b:f3:fa:d2:fc:b3:
                    a7:70:da:e8:79:3c:ca:28:4d:25:4b:37:9a:8a:90:
                    86:db:ad:90:b6:ed:c7:98:89:29:fe:f6:e9:28:83:
                    c9:8b:59:24:ae:8a:88:44:d3:4b:b4:a8:a3:be:66:
                    98:e0:14:07:04:b2:00:4b:1d:d2:e2:55:25:4b:6d:
                    5e:4c:35:ed:c3:2a:a1:9b:5c:1d:db:85:d8:86:dc:
                    fd:05:36:dd:0c:93:64:8d:c9:60:d2:c0:55:24:e1:
                    99:bd:96:25:b8:31:f0:35:cc:8f:77:e1:98:4f:db:
                    d6:fe:60:fe:dd:a4:9b:72:42:f0:e7:9c:ab:e5:c6:
                    8a:a9:a0:6d:a0:76:38:59:3c:bd:26:aa:59:ee:18:
                    89:71:62:75:7a:22:d6:c2:67:0f:77:25:9b:ee:74:
                    4a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8F:1A:13:58:15:7D:4E:67:E9:CF:F7:69:C5:63:EC:AF:34:4B:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6fee5bbd-f96a-3995-b189-134429e99cd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:07:18:c6:25:f0:25:8a:67:fa:1e:20:fa:ce:a5:5d:ee:f3:
         79:1c:79:34:77:ce:6b:ce:64:a7:e1:02:fb:7f:3a:ed:8c:3b:
         be:77:23:7a:fc:b8:9b:19:ad:48:d4:12:08:b7:11:d8:93:ab:
         f4:2f:f6:8e:e1:3f:2e:38:36:02:29:f3:db:90:7a:8c:fa:c2:
         af:51:a7:cf:40:b0:7e:08:be:ac:d5:70:e2:a0:7c:20:0f:56:
         9d:48:ee:5e:ab:02:3c:22:07:85:cf:89:2b:09:0e:5f:55:df:
         10:64:dd:35:88:b1:22:e2:4a:ff:93:dc:37:10:49:92:de:14:
         c0:89:cc:4e:4c:36:7d:d8:fc:eb:97:ce:30:a4:08:3b:d1:93:
         fa:28:3e:56:c0:d5:d1:26:43:58:5f:1c:63:20:38:2d:1c:64:
         d9:a5:b3:62:f6:89:38:a7:2c:50:31:53:37:bb:98:76:38:ee:
         e3:bd:9b:f1:d6:cb:55:cd:a2:cd:af:5a:aa:d7:6f:0c:7d:b9:
         b5:f0:e2:e6:d6:57:b8:87:ed:f2:88:47:72:cf:39:cf:61:5c:
         d7:f7:c2:25:24:b2:dc:41:76:f0:0b:80:be:ff:d2:9c:12:11:
         dc:49:58:e5:ad:7c:3f:08:3a:28:a7:e0:2b:74:a9:6b:42:d6:
         49:ac:86:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:11:20 2025 by rpki-client