Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9230dbb8-cd59-383d-87ae-21fa10ccf21e.roa
File:                     9230dbb8-cd59-383d-87ae-21fa10ccf21e.roa (raw, json)
Hash identifier:          qaqTtrt3hbE7Jzo/sLLPsjIjW9+jnKr3qfLQ1i5Lx5k=
Subject key identifier:   BE:2A:D3:D3:95:2F:5F:CC:B9:77:8F:8B:B4:AB:7F:35:46:81:4C:3F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B3821ABF46F61E92902D0FA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9230dbb8-cd59-383d-87ae-21fa10ccf21e.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        2600:141b:9000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:ab:f4:6f:61:e9:29:02:d0:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=7b314cd1-3e1e-43a9-a991-c065916ea37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4d:a9:78:81:a3:46:dd:01:fa:0c:41:50:d4:
                    d2:56:f6:d5:12:5a:64:88:ab:a0:f4:36:9a:11:ca:
                    03:d6:f7:b9:99:98:96:0d:fc:5b:6e:19:d2:a7:17:
                    ae:d6:c0:ad:ed:6e:56:64:be:c4:15:8b:09:e0:cc:
                    45:a8:14:fe:12:2e:9a:30:94:50:f2:e2:d9:0d:5c:
                    83:c2:b8:03:1f:55:c0:c7:e6:5e:d4:69:ab:43:b2:
                    9f:35:fb:1b:1f:3b:af:5d:d2:cf:12:13:6e:65:71:
                    b6:9b:3a:6d:bc:f3:63:73:e1:b2:45:9f:df:8b:57:
                    67:c2:84:6a:de:a7:17:f1:64:60:4a:76:97:6b:3f:
                    0e:84:c8:93:31:ea:aa:20:90:8b:16:5d:2f:b1:15:
                    9c:64:50:e3:75:40:dd:9e:54:43:dc:9f:73:70:df:
                    46:b7:2f:0c:09:67:7f:f1:c4:68:85:f8:b1:5e:58:
                    dd:32:a5:3f:27:11:b5:d6:93:5b:53:49:de:4b:51:
                    2a:98:7f:d1:16:02:4f:72:72:66:31:1a:ea:f8:a1:
                    cf:97:3e:52:45:b5:da:44:ed:a8:47:73:70:65:a4:
                    33:3c:ba:03:59:3e:d4:65:b1:ec:93:ee:58:17:a6:
                    90:65:39:b4:88:7c:8b:f0:64:2c:68:bd:a0:1a:a2:
                    07:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2A:D3:D3:95:2F:5F:CC:B9:77:8F:8B:B4:AB:7F:35:46:81:4C:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9230dbb8-cd59-383d-87ae-21fa10ccf21e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141b:9000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:27:8d:44:55:84:b3:2b:97:a8:e0:cb:ce:b8:af:3e:25:bb:
         98:7e:7b:d7:93:e1:90:67:0d:7d:87:a4:de:d4:51:e8:71:dd:
         3a:dc:77:3d:b1:f2:9e:2a:25:6a:21:f4:92:7d:f5:f4:04:1f:
         61:d0:f2:28:8b:44:23:3e:49:fd:39:6e:0a:11:ea:2c:17:4e:
         12:b0:b3:00:f3:55:e6:1c:3b:c3:7f:ce:d3:10:00:c1:d2:02:
         45:ff:2c:cb:46:0a:d8:f3:ea:52:d1:e8:be:34:2b:73:a6:f8:
         69:6c:fe:2d:c8:61:d9:b0:2c:ab:99:90:14:ef:d4:7f:52:b7:
         c9:02:49:a7:db:fe:8d:bd:48:83:d9:7d:4d:db:d3:4f:2c:ab:
         d7:ca:8d:3e:08:b4:f3:ef:17:63:92:ef:6e:9b:24:eb:70:c2:
         e8:68:6f:96:bd:f6:0e:28:0f:9f:c2:a3:8f:29:93:bb:29:ce:
         62:9d:64:b8:58:67:6e:f5:83:96:c6:e1:1b:1e:74:74:13:a7:
         79:c8:a9:13:62:7d:20:8b:29:81:d2:6c:c1:81:02:f6:83:76:
         3e:10:4f:22:18:43:2f:84:e9:58:c5:1f:32:ed:13:bd:f3:92:
         ac:fd:6e:4b:fe:1a:b1:c8:5f:f8:41:0f:c6:cc:6c:4e:7d:df:
         a6:d9:d3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:32:03 2025 by rpki-client