Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/06fbf2c0-813d-3842-8c17-978a309b106c.roa
File:                     06fbf2c0-813d-3842-8c17-978a309b106c.roa (raw, json)
Hash identifier:          hM27P2Kiz+k+3dyQHyAyouOHjJ/RnUJEoAoU+Esn/sA=
Subject key identifier:   14:0B:64:3E:11:22:B5:51:D6:BA:FC:A3:C6:F7:3E:0C:E4:EC:85:BC
Certificate issuer:       /CN=1fb001d4-3a2b-436f-a572-51822a315945
Certificate serial:       010D0C9F4328584B92DCE28F6FC855E606CF6E80
Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/06fbf2c0-813d-3842-8c17-978a309b106c.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     395363
IP address blocks:        2620:129:6010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:e2:8f:6f:c8:55:e6:06:cf:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=78a9f45f-6310-4d5c-bb69-5b151571ba87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a2:f5:b4:1c:f3:0d:9e:d3:53:af:a2:6f:58:
                    4e:1a:ac:34:ad:42:74:85:87:e4:64:d7:32:65:4a:
                    f1:39:58:03:d9:1e:cd:61:4b:88:de:54:64:90:24:
                    74:6a:14:82:72:2b:f8:13:98:cb:8e:90:78:1f:e7:
                    32:85:9d:43:39:09:e7:5e:05:a7:c7:62:86:1d:db:
                    f0:40:ab:b5:dc:9e:74:fe:09:ae:f4:f2:c8:f9:da:
                    d7:c0:e6:1a:95:89:f5:e5:9e:72:e6:66:61:37:4d:
                    64:f5:e0:f5:d1:d3:19:ec:8b:7e:cb:2d:81:28:5a:
                    e9:de:ed:2b:76:0e:d6:2b:a8:2e:10:4a:86:a2:81:
                    17:ec:87:5f:12:6d:b5:e9:82:46:13:5d:f2:38:44:
                    f1:8e:a0:c2:39:69:b3:65:25:d0:2a:e3:0b:24:c1:
                    08:4a:b4:d1:5b:6e:78:74:c5:bd:b4:32:3f:79:cb:
                    2d:66:92:00:86:6e:f5:eb:1c:3b:3e:fe:f9:f0:d4:
                    cd:ab:12:9d:55:a9:d9:67:f7:87:17:35:18:ea:d1:
                    22:51:2a:ec:8a:63:a9:0e:43:19:20:53:33:82:ed:
                    99:04:61:c2:58:3a:27:8b:a0:cc:b3:26:47:fd:6f:
                    6b:8e:43:a4:5e:db:0e:e2:2f:92:c0:75:cf:f2:bd:
                    94:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0B:64:3E:11:22:B5:51:D6:BA:FC:A3:C6:F7:3E:0C:E4:EC:85:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/06fbf2c0-813d-3842-8c17-978a309b106c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl

            X509v3 Authority Key Identifier:
                keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:129:6010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:64:0b:90:98:4d:c4:8c:fa:5d:de:ad:d2:13:68:2e:c2:b0:
         84:37:de:0a:02:1b:b7:75:06:de:96:d9:2f:c6:24:5d:a5:c8:
         24:5c:0a:5e:57:28:9a:2c:73:d0:3a:2b:53:4c:7e:10:9e:81:
         3a:f0:30:a1:b8:cb:cf:54:b1:24:fc:e7:df:35:90:06:75:69:
         e5:cb:34:76:b7:f3:2a:9e:0c:9f:6f:89:cb:95:25:96:03:90:
         31:c7:8b:53:80:a0:a4:f3:da:11:2b:2b:46:63:22:7b:46:5b:
         b0:a5:92:83:a6:71:6b:e4:ac:aa:87:0e:3d:17:f6:39:2e:d4:
         cc:0d:78:f5:f7:fa:c4:14:f0:a0:9a:4e:76:34:eb:e3:16:20:
         cc:50:c9:b9:8f:05:b6:14:ea:3c:2a:1a:ee:a4:90:21:6a:18:
         d6:ca:50:46:d3:d2:a4:dd:ac:5a:ed:d9:ea:6a:6f:9c:46:f7:
         93:e3:ad:89:90:2e:e0:b9:7f:f2:95:77:db:93:3d:e5:89:af:
         05:29:27:63:28:17:a9:4c:b4:db:99:5c:a7:59:d7:49:8b:1b:
         59:5b:0f:8b:4a:ab:2c:5e:32:10:5b:a1:2f:80:9c:fe:2f:05:
         70:64:a2:14:6a:38:a5:b0:30:08:75:81:21:46:ea:48:ae:ad:
         6a:6f:17:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:04 2025 by rpki-client