Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70b5c84f-45b2-37cf-975d-05d01fdb3ac0.roa
File:                     70b5c84f-45b2-37cf-975d-05d01fdb3ac0.roa (raw, json)
Hash identifier:          dGYeYs9h7mOkOKHJR43hHY9BXqGfhyqZ3jKsHsgJeYc=
Subject key identifier:   B4:CD:62:2A:8E:FB:E8:5A:BA:BD:29:14:41:73:82:8C:D0:E1:E6:CA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B4D11E9243E4E72F895640700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70b5c84f-45b2-37cf-975d-05d01fdb3ac0.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     24319
IP address blocks:        2600:1411:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:e9:24:3e:4e:72:f8:95:64:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=3e76f774-569d-4d88-b40e-13cdf3bc9215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ec:e4:f6:ff:16:21:01:cf:fa:eb:aa:27:f1:
                    07:29:eb:c2:cd:2b:be:31:3a:ef:02:98:77:6a:fa:
                    ee:28:83:e2:97:a6:d3:bc:af:cf:23:06:ad:f5:9d:
                    d5:2f:0b:05:83:6f:92:a3:84:6b:af:a3:20:5a:6a:
                    5e:29:84:23:c5:b9:74:2c:74:4e:34:26:43:ac:db:
                    15:1a:a1:30:05:38:5f:a6:cf:2b:ef:0b:12:73:20:
                    94:ce:13:b9:d5:8f:db:6d:08:00:06:36:d1:40:db:
                    c3:68:d9:22:e8:c1:a5:df:e2:c1:fc:1b:60:b5:c5:
                    99:0f:13:de:9d:ad:88:1f:72:9f:a9:b5:78:2e:b2:
                    c3:11:a8:e6:f4:e7:7a:66:c1:83:fa:8a:52:52:ad:
                    af:94:c3:2a:35:1a:84:a8:d6:fc:09:08:9c:87:92:
                    93:dc:f5:af:e9:8a:2c:33:a3:3a:5a:54:56:6e:c1:
                    20:e1:83:5e:9c:11:8d:07:97:a6:f0:e2:09:d9:47:
                    53:d7:d2:51:60:65:b3:6a:11:77:35:c1:0c:d3:d9:
                    bf:fa:8a:ce:7c:ac:d9:5d:28:d4:cf:da:47:85:15:
                    23:d0:ae:36:6d:02:cd:1a:c3:16:e7:2a:21:96:d0:
                    2e:8e:9c:9d:5f:6c:2b:6f:d1:d9:92:2c:ea:09:13:
                    d5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CD:62:2A:8E:FB:E8:5A:BA:BD:29:14:41:73:82:8C:D0:E1:E6:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70b5c84f-45b2-37cf-975d-05d01fdb3ac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1411:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ef:29:0a:46:41:7c:f9:14:49:86:c0:24:5f:5c:c9:96:f0:
         84:3b:7a:91:02:06:2e:0a:0f:2f:cf:b1:09:90:91:77:d2:1e:
         cb:73:60:f9:9d:76:40:f2:1c:4b:e8:10:6e:f4:54:7b:1c:66:
         dc:7a:d7:24:23:27:70:12:db:cf:00:46:c0:86:3e:e7:f0:2f:
         7c:6e:75:01:67:79:37:e2:a8:61:05:14:5f:13:f1:b5:aa:9e:
         ac:5d:d5:8a:7d:92:65:8a:6d:b7:7c:6c:ee:17:1e:ff:f4:33:
         3f:54:cb:f3:b1:d8:4e:71:53:10:d6:a2:83:c5:db:35:56:c6:
         9f:2b:e2:84:ec:cd:03:b3:ff:da:82:b8:c4:7b:8a:e1:a7:34:
         ca:e2:63:ce:17:89:39:3f:5e:4d:a8:59:fb:89:d3:d9:90:07:
         1b:1d:67:38:b8:db:4e:77:87:4f:c0:34:df:fb:35:d3:45:8d:
         12:09:6f:f9:ca:16:bb:3d:3c:bf:7d:a7:1d:3b:f1:d7:7f:a8:
         fb:a2:dd:93:2e:4a:c2:85:bc:60:e0:b4:e1:34:0e:6f:9a:6d:
         0b:65:5b:ec:18:51:e6:6d:86:de:fa:8a:03:47:07:34:3e:9d:
         5e:84:36:0a:e6:4b:3e:e1:88:e9:b1:2f:55:20:1c:d1:92:e2:
         d9:ab:ff:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:00:34 2025 by rpki-client