Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e58bd57-bc71-3e99-a0c7-ae46128344bb.roa
File:                     2e58bd57-bc71-3e99-a0c7-ae46128344bb.roa (raw, json)
Hash identifier:          d3DTHAqqe6cdUNWypJyGR4zyhxdlG94kCILwanaVfQA=
Subject key identifier:   E6:FA:40:E1:8E:47:5D:76:E2:13:65:64:FA:9A:1D:16:B1:E5:D6:FF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B4081C327D6CEC7527482AE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e58bd57-bc71-3e99-a0c7-ae46128344bb.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        2600:1402:400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:c3:27:d6:ce:c7:52:74:82:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=c7fef4b5-65bd-4f54-b26b-f447d6f9a7eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:b1:c4:c1:bc:e5:9d:ca:da:1a:26:8f:86:
                    cb:f3:22:e7:93:ac:0f:27:57:1e:e4:54:b8:61:87:
                    60:40:3c:dd:de:5c:84:f3:26:9d:17:0f:0a:e3:f2:
                    b3:41:e9:5a:b5:10:51:5e:e6:b8:9b:85:44:ba:d2:
                    9d:2a:ef:b1:eb:97:34:0c:2c:3a:02:7e:4b:5d:c5:
                    85:10:d1:05:53:b0:df:7f:a0:5e:49:4b:f6:6a:1f:
                    2e:5a:fb:07:97:8f:01:a3:b5:da:c8:81:61:38:30:
                    ec:dc:7a:52:23:05:1d:97:ae:a9:35:8f:6c:d5:4e:
                    6a:27:9a:10:4b:40:63:f3:f6:5e:30:26:38:41:c7:
                    ba:0d:e6:42:a8:1c:79:47:fd:60:d4:a8:40:44:f1:
                    5c:48:6d:ce:72:b5:1a:cd:6e:da:f7:e8:3a:89:3f:
                    5e:a1:64:8d:66:21:53:07:a2:58:3b:4f:1d:af:bd:
                    e5:4b:d9:2e:4d:7f:54:91:48:38:0a:77:7a:fa:30:
                    36:8b:45:41:a1:10:24:23:78:b9:c6:60:46:6a:a5:
                    d9:84:fb:f7:e4:66:f2:49:a6:56:ff:fa:60:b8:c8:
                    e1:ad:b7:d5:e9:fa:aa:47:a2:3c:46:c2:83:8a:8f:
                    71:84:49:b9:44:b4:82:f1:1e:1c:9a:24:fa:98:f3:
                    c9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FA:40:E1:8E:47:5D:76:E2:13:65:64:FA:9A:1D:16:B1:E5:D6:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e58bd57-bc71-3e99-a0c7-ae46128344bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1402:400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:6e:f3:e2:e7:ea:9b:af:55:df:89:6b:ce:8c:b2:cd:34:1a:
         ff:bd:9d:91:f4:95:16:33:0f:61:4c:ae:18:9c:2e:81:7b:b6:
         6d:c3:92:24:bf:eb:e0:17:51:76:a7:5b:10:21:fb:99:a5:95:
         7f:55:c9:25:dd:07:a5:68:a8:98:c0:bc:52:75:53:69:b3:57:
         de:0d:04:ef:db:d3:ca:38:ca:35:48:d1:58:52:8c:ed:2d:65:
         3e:39:f2:cd:1b:f0:6b:03:a2:fd:5a:1b:34:79:93:ba:be:b9:
         6a:57:73:c0:af:6e:9a:5d:cc:d0:32:14:34:83:6b:cd:65:b8:
         33:3a:ef:32:44:02:b5:b4:6b:96:20:b1:67:e4:9a:e2:29:86:
         45:f2:a6:7d:1b:68:8a:0f:d9:cc:90:fa:75:4f:ff:c3:ca:4c:
         8f:47:d1:45:65:a0:ad:ff:fa:9e:02:92:22:bf:71:f3:16:c0:
         07:e6:cc:f9:04:49:87:47:52:e5:7e:89:07:3b:5e:e8:5b:18:
         24:4d:9f:60:42:12:ab:f2:fa:a6:3f:b9:e0:9f:62:c6:7a:81:
         0e:f0:4f:d9:6a:87:a5:26:88:b5:6c:6e:65:48:09:cc:2a:aa:
         e5:90:ae:a9:51:59:f8:5f:86:50:da:99:b3:f8:cf:61:7b:b1:
         7e:19:f4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:55:39 2025 by rpki-client