Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d8e6d83-e74a-3770-9184-66819ec17579.roa
File:                     6d8e6d83-e74a-3770-9184-66819ec17579.roa (raw, json)
Hash identifier:          qhSomyb6RXqNX4fRvNc9/+nIvr213fiNVAnikmD6gd0=
Subject key identifier:   74:0D:35:9B:F4:69:10:CF:25:93:00:12:61:C3:60:D9:32:02:AB:88
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B4081C6CDE1FEB9972AED6B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d8e6d83-e74a-3770-9184-66819ec17579.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        2600:1409:4800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:c6:cd:e1:fe:b9:97:2a:ed:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=78fd7680-73c0-4cfa-bc8b-5321ef793fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c2:4a:eb:0c:9c:f6:6a:4f:fd:c2:56:50:95:
                    8d:b9:8f:85:3c:4d:28:95:f2:fb:ae:a6:d0:ab:7e:
                    e8:0e:ea:cc:82:11:be:c1:6e:4d:68:5d:ec:c6:c6:
                    34:bf:7b:48:e6:2c:aa:c2:3c:cf:42:00:54:a4:c4:
                    3f:a6:39:fb:2f:97:06:67:17:cd:3d:b5:cc:00:37:
                    22:42:63:87:60:73:12:33:13:7e:34:ac:d1:24:61:
                    7c:af:60:2e:6c:8e:0b:de:41:72:f8:36:13:b0:06:
                    18:fb:16:61:eb:d1:9e:aa:7d:9c:7a:73:12:9a:77:
                    1a:5c:4e:8e:69:c6:eb:4b:ae:c2:ef:98:6f:96:65:
                    94:46:d9:ba:4d:f5:33:1c:58:ac:c5:89:e8:50:e2:
                    66:74:05:bc:91:ab:39:27:45:06:2d:58:cf:1b:fc:
                    fa:90:29:ed:8f:28:b7:a5:e1:d9:99:e0:e5:3a:a2:
                    83:1b:21:d8:ca:cb:08:37:f8:04:c5:bc:73:00:a5:
                    46:09:4d:76:15:70:82:31:19:d7:32:c3:97:b8:51:
                    c4:df:dd:96:fa:f2:ff:49:83:81:6a:da:96:08:3e:
                    60:76:6a:02:08:17:63:a0:7c:06:51:9f:4b:b3:12:
                    ea:71:52:43:6b:e0:94:90:8c:20:f1:87:6d:e8:b8:
                    e1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0D:35:9B:F4:69:10:CF:25:93:00:12:61:C3:60:D9:32:02:AB:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6d8e6d83-e74a-3770-9184-66819ec17579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1409:4800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:79:1f:06:40:89:33:eb:e6:63:56:51:a9:a9:b2:38:01:a4:
         53:74:7e:37:be:2f:ae:6b:14:3f:a2:b1:15:23:f4:d1:9c:96:
         5d:91:2a:2e:9d:07:86:c2:58:be:89:6e:0a:d7:6e:10:0d:57:
         e6:0a:e3:c4:8a:28:01:de:0f:20:a3:96:57:78:66:c1:78:ab:
         1d:86:8b:cb:44:f6:41:09:22:84:61:0e:d3:42:a1:8a:7f:69:
         17:47:74:ac:de:98:07:82:c4:f0:54:7a:cc:04:ed:1e:02:79:
         3a:df:89:9c:35:92:51:30:82:89:26:26:8e:02:5e:c8:44:b5:
         d0:58:a1:93:ed:a3:42:93:ce:89:65:fc:7f:b5:51:44:0e:c8:
         e9:e1:95:b6:09:98:4f:cb:3e:fa:2e:f6:1d:48:ca:1f:83:c7:
         f5:04:91:0b:56:74:ae:bb:92:27:7e:2f:ad:6b:22:fe:c4:d1:
         3d:db:86:8c:3f:ba:d6:a8:41:eb:a6:9c:e7:4a:b7:ec:f3:60:
         74:8e:24:f8:d7:c6:d8:2b:96:54:01:2a:6d:7e:ba:77:4d:ac:
         ba:58:c3:2c:68:aa:f2:ef:65:88:af:cb:90:cb:ac:4e:5e:d8:
         52:f9:0b:b6:ad:f2:c4:f3:9f:45:54:30:de:87:e6:92:5a:81:
         4b:c1:9c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:05:42 2025 by rpki-client