Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91d57498-df13-30fa-94e1-5fb0851b6dc3.roa
File:                     91d57498-df13-30fa-94e1-5fb0851b6dc3.roa (raw, json)
Hash identifier:          kL943B+3vI7p9w1+orDmw8ebFaZaiMvwRgZg+QrHPVQ=
Subject key identifier:   FA:D0:A2:05:0A:21:3B:0A:F0:59:4A:22:BA:CC:39:90:9E:F8:17:4B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B1C36CB2DD08C1E2EACE7A80F
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91d57498-df13-30fa-94e1-5fb0851b6dc3.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     21342
IP address blocks:        2600:14c0:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:cb:2d:d0:8c:1e:2e:ac:e7:a8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=6f5c3702-ada3-4ba2-b990-04d34c3ef363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2f:7c:fe:a3:a5:7d:f8:70:7a:1c:04:c8:3c:
                    e9:92:c9:fe:f7:dc:b3:34:31:84:3d:f6:33:fd:6f:
                    5a:23:63:ef:85:d5:10:f2:1c:82:ef:29:a6:76:6d:
                    97:5e:49:df:c8:b7:da:07:81:95:4d:0e:25:4f:8f:
                    dd:4a:f6:62:a7:d6:a7:ec:a2:93:ec:9f:2a:c0:54:
                    94:90:76:2c:46:ba:0e:4f:6a:c6:0f:cb:d8:db:de:
                    ea:b4:e2:1f:68:e9:ed:c3:43:54:f8:b4:73:0b:06:
                    8b:60:8a:1a:36:83:0d:bc:65:7e:fe:74:14:35:89:
                    de:00:93:fe:a1:17:0f:91:08:51:36:7e:a5:9f:cc:
                    35:9f:be:cb:86:c3:12:e3:6f:6f:f6:bb:1e:14:08:
                    50:b8:ba:88:f5:22:ae:bd:6c:cb:ea:d2:bc:21:cb:
                    b4:39:1a:ab:db:de:6f:f8:c5:c3:26:fd:17:a7:32:
                    44:dc:46:9a:d0:f2:f6:e1:eb:57:24:21:6d:c0:cd:
                    fa:81:e7:f1:a0:f9:bf:d0:b8:f3:b1:70:6d:33:1b:
                    18:70:22:71:a1:31:8a:32:0c:39:83:7b:52:b1:65:
                    ab:8c:db:55:d9:0a:ca:9c:4d:ae:9d:45:cc:d5:5c:
                    73:4a:9b:e4:8c:28:03:6a:b3:fd:3d:53:8c:05:96:
                    14:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D0:A2:05:0A:21:3B:0A:F0:59:4A:22:BA:CC:39:90:9E:F8:17:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91d57498-df13-30fa-94e1-5fb0851b6dc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:14c0:f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:90:87:be:35:e6:9f:b7:c8:b7:88:48:14:e9:67:d6:b4:90:
         4d:de:33:7f:7d:af:e1:da:37:79:c9:56:21:05:35:44:7f:1d:
         a4:9d:0d:39:8d:1f:0b:a5:65:cb:3d:b4:ad:32:07:cb:62:fd:
         04:c7:9a:38:ba:35:88:a4:a0:9c:68:63:1d:1c:5a:f2:a1:2f:
         32:2d:40:c5:e6:56:be:f3:68:27:2a:13:47:37:41:e0:a0:10:
         71:2c:67:c0:73:55:48:a2:10:2a:4f:df:85:1c:c1:12:e5:98:
         98:01:cc:b9:52:15:b9:f6:25:86:31:93:3c:51:44:1e:0f:46:
         ca:e4:f3:16:6b:6e:2e:d2:27:3c:c4:f6:2e:c4:18:eb:b9:18:
         01:69:6c:d7:f0:42:5c:e4:e2:fd:b1:ec:70:71:28:e9:5a:9a:
         06:63:ad:e0:1a:1d:94:8e:7b:54:7b:99:82:0a:9b:6d:59:08:
         99:aa:69:46:b8:31:e3:5c:8b:6d:3e:95:56:4e:42:55:ba:82:
         bf:f7:0e:ca:d8:7b:40:1d:18:e4:00:51:cb:64:cb:b6:23:55:
         30:ca:32:4f:f0:93:67:4f:af:6b:cf:10:da:77:e3:24:94:25:
         70:ff:39:63:6a:6d:18:68:78:6a:a5:d0:fd:48:60:33:c3:8d:
         9f:f8:61:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:22:13 2025 by rpki-client