Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03ff2a67-7ed0-37d1-938c-255c5ef6b444.roa
File:                     03ff2a67-7ed0-37d1-938c-255c5ef6b444.roa (raw, json)
Hash identifier:          MelwLpUNQ1B2Nf3WvhzqFPMrwNm9R5ZbZCR6JrPwKME=
Subject key identifier:   53:6F:07:36:6A:EA:3A:D7:F6:BD:4A:38:5F:41:E2:B8:05:D5:32:76
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B48E1CAF2E67A303742556280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03ff2a67-7ed0-37d1-938c-255c5ef6b444.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        2600:1488:a280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:ca:f2:e6:7a:30:37:42:55:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=e9960002-78bf-44a9-ab66-bc8f601f1e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:64:5c:6a:d5:ba:78:f4:10:18:cf:e6:ae:f8:
                    86:96:09:6b:66:6e:99:f8:63:c1:b2:2d:ae:53:91:
                    dc:8b:73:5d:3a:71:e6:f4:d5:23:59:df:ea:b1:49:
                    ef:d7:cd:98:57:80:75:2c:12:5d:f7:41:88:76:35:
                    02:d8:eb:b0:f5:c0:93:89:15:cf:1c:84:cf:13:3b:
                    20:75:9e:17:38:91:73:6c:a2:e8:41:a8:7e:4c:cb:
                    74:20:6a:7e:af:65:a0:4a:85:33:e9:2b:c4:07:8c:
                    2d:47:44:76:35:12:7a:87:df:d9:f7:c0:72:17:39:
                    0a:e4:1e:96:a2:77:29:06:39:58:ba:8b:16:54:f2:
                    c1:03:40:c4:cf:34:db:a2:f8:df:05:8f:1a:2b:fb:
                    bc:97:6b:08:f9:c4:90:bd:24:65:2a:cf:8a:24:83:
                    45:5b:3c:a8:47:31:88:06:ee:42:0e:48:e4:2a:a9:
                    ec:c4:92:48:6e:9d:07:b5:f4:93:93:2d:df:24:3c:
                    94:d0:bc:c5:b6:cf:ad:bd:9a:e5:aa:ea:a5:d8:f7:
                    60:01:f5:05:fa:01:dc:92:78:de:63:a5:47:13:7b:
                    c4:5a:b6:fe:55:fa:8d:1c:8b:6f:7f:c0:27:ed:d8:
                    d4:cb:ce:5f:a9:8f:da:72:96:bf:5d:76:9e:0e:cc:
                    c6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6F:07:36:6A:EA:3A:D7:F6:BD:4A:38:5F:41:E2:B8:05:D5:32:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03ff2a67-7ed0-37d1-938c-255c5ef6b444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:a280::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:92:5d:cc:86:a6:a7:75:81:b9:de:44:0e:65:d5:72:ed:69:
         3b:fd:c4:03:e2:bb:7c:94:94:62:e3:1a:74:f2:b9:2e:e0:1f:
         d2:ff:4b:b6:20:9a:72:4d:a7:c4:69:a2:dc:06:99:3c:5c:68:
         37:7f:2e:1c:7a:5e:b7:f6:13:32:e5:b7:a0:1c:e2:c7:b4:6d:
         9d:39:9f:4a:83:be:f4:9d:f4:74:77:38:94:65:60:61:29:da:
         78:43:b9:d3:c3:de:ac:b1:af:5b:e9:87:7d:a4:ce:60:5c:df:
         ad:99:b3:bf:d6:86:b0:cd:de:b8:54:1f:65:d7:ef:2e:3e:98:
         4c:e8:a3:4f:b2:4d:ad:db:15:30:d9:86:5f:c1:a8:cd:12:20:
         7e:0a:2d:c9:a3:af:de:fc:df:08:c9:e3:ef:a3:71:7d:08:b0:
         17:ae:ab:cc:37:43:48:f0:a5:16:dd:00:44:22:8d:db:f2:96:
         c4:ae:6d:e5:63:c9:a9:17:22:fe:51:17:96:50:b2:30:78:39:
         aa:3e:89:e8:e9:21:fa:12:a6:0b:27:1a:0c:a6:71:0e:77:62:
         f3:54:ad:9e:d8:2e:21:db:2d:da:9c:32:d7:e0:97:2c:35:ff:
         7b:ad:85:0a:fd:c7:b5:04:04:fc:cc:67:db:90:65:11:20:14:
         88:50:6a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:27:34 2025 by rpki-client