Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5295a8dc-3ac8-3455-ad69-07b1906fcdd9.roa
File:                     5295a8dc-3ac8-3455-ad69-07b1906fcdd9.roa (raw, json)
Hash identifier:          Nf9dQwwntQ3QQgorwnI7LNlyUZ4lYoKQDc7CqRIqyn4=
Subject key identifier:   E3:7A:7F:EA:2F:02:DC:0F:1C:2E:C9:B1:75:3B:D7:5E:0F:AF:70:A6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5765D59BC5B889E70701F600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5295a8dc-3ac8-3455-ad69-07b1906fcdd9.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     20940
IP address blocks:        2600:1417:4f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:d5:9b:c5:b8:89:e7:07:01:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=e956c65d-86d3-42de-a3b4-e2a77e18cef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3c:a8:e4:81:86:8d:ab:b4:29:b9:eb:d2:4a:
                    8a:14:e3:b0:ff:58:d4:2f:5e:bb:51:f7:33:e0:5b:
                    21:fb:fe:d6:de:db:6e:0e:fe:b1:12:c4:66:dc:d9:
                    c5:8b:e1:6a:f5:e4:89:2a:c6:46:44:52:b4:27:a8:
                    54:e2:24:80:ee:3e:1b:be:77:43:aa:81:22:f7:55:
                    9d:ed:36:06:16:de:93:ba:da:ad:8b:48:8f:d1:6c:
                    da:7f:96:32:f3:a3:e1:d8:e6:ad:57:a4:d8:e5:4e:
                    7b:f6:f0:b3:b8:a0:27:64:58:9a:4f:1b:72:cd:0c:
                    95:6f:20:1f:26:e7:61:81:8f:80:2f:cb:0d:d7:42:
                    45:18:bc:e4:43:0d:31:6a:86:17:1e:08:72:d6:21:
                    b1:8a:5f:a7:55:da:f5:21:b0:ab:1b:dc:ce:f7:1d:
                    78:3f:84:52:76:20:c9:16:21:c0:b6:3d:8c:16:06:
                    6f:c2:0d:e6:74:77:a4:ef:d2:05:ef:cc:f7:05:0f:
                    d1:a3:b6:34:1c:72:61:42:f0:c0:9f:2e:2c:ec:e2:
                    39:31:68:c2:c3:ff:ab:40:87:0b:8f:35:e4:39:28:
                    6e:f8:ee:09:2c:fd:eb:7e:b8:b6:c3:a2:74:b5:01:
                    01:0a:09:20:ec:16:ae:54:dc:2e:09:42:1a:a6:a5:
                    e8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7A:7F:EA:2F:02:DC:0F:1C:2E:C9:B1:75:3B:D7:5E:0F:AF:70:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5295a8dc-3ac8-3455-ad69-07b1906fcdd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:4f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ac:e6:64:f8:34:d1:82:de:da:aa:7f:96:c8:c6:b5:de:c8:
         0e:d4:be:09:f0:72:07:ec:ab:0d:1d:01:b1:a7:19:9f:60:ae:
         4e:5c:37:2f:54:2b:97:91:f3:51:a1:4c:54:cc:5b:9d:2f:a8:
         e4:90:17:35:ba:e1:6d:7d:c1:a0:82:3b:34:a8:fc:e3:27:b7:
         d3:18:df:4c:08:15:59:88:4c:64:fc:05:11:49:9e:f2:c0:16:
         aa:58:1f:14:ec:f6:5a:49:7a:7b:7a:d2:6a:ce:9c:f0:83:fe:
         51:c4:3a:5b:20:44:3f:2d:41:ea:72:c1:72:18:f0:a1:f5:1b:
         e9:b1:4c:ea:a0:2e:b5:f7:7c:9b:d4:58:14:a9:0a:e7:f6:56:
         c5:b6:dd:1c:f8:f4:15:a5:1b:fb:46:e5:27:8d:e4:71:28:85:
         32:37:53:f7:88:2b:14:1f:64:3e:23:06:a0:0c:e8:75:30:e4:
         5b:57:7c:dd:75:7e:78:bf:bd:ae:59:19:3e:a2:a9:36:de:70:
         99:d2:09:ab:45:9a:73:98:00:75:62:f0:e0:b8:3e:30:46:ed:
         7c:98:69:36:5b:45:d4:8f:e5:31:38:55:61:62:de:61:f9:da:
         cc:13:27:bf:4b:e8:46:6d:c3:8e:71:27:2c:16:8c:b0:dd:a6:
         01:34:47:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:22:22 2025 by rpki-client