Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1b07b7d-0778-3efe-b56c-a9b277d46c5b.roa
File:                     e1b07b7d-0778-3efe-b56c-a9b277d46c5b.roa (raw, json)
Hash identifier:          WCb1zyWxT89bPMR62l5Ps+jbDFjBO3Mdoy5oERHcf6Q=
Subject key identifier:   7D:5B:FE:4E:65:33:59:12:2C:DC:98:61:CC:72:08:0C:F1:05:65:54
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B95A7C9181545A6D6F90CCBC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1b07b7d-0778-3efe-b56c-a9b277d46c5b.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     20940
IP address blocks:        2600:1417:6c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:c9:18:15:45:a6:d6:f9:0c:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=30288a9f-dcf8-4214-8fb1-eaaddca96739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7f:84:5a:c8:68:1b:16:cf:f1:bf:5a:a3:ca:
                    b1:fc:9a:2f:bb:fe:49:a7:cb:e0:79:1c:42:8e:7b:
                    95:3c:ad:47:da:0d:d0:c2:57:6f:70:72:69:8e:fd:
                    35:9f:a4:48:fe:de:c0:25:73:d6:99:c2:ad:52:e9:
                    8b:f4:11:82:62:ff:ce:ed:35:59:41:9a:43:33:ab:
                    2e:d9:1c:87:4d:69:cb:a0:03:5a:b5:75:fd:df:df:
                    48:d5:98:2e:7a:b6:f9:d0:8c:30:fb:7f:c1:a0:56:
                    80:30:e6:79:04:29:b6:4c:02:34:a1:51:46:b2:c7:
                    48:52:01:1c:34:40:65:af:da:34:65:a5:46:2b:25:
                    17:92:63:98:e1:f4:6b:ce:a5:d6:67:d2:59:e3:36:
                    93:00:83:92:4b:06:88:93:dd:bf:4b:b4:dc:9e:40:
                    f9:a2:8d:85:5b:b6:40:1c:56:e9:72:19:f8:41:b6:
                    8b:c1:fe:c4:5d:c4:c0:a3:e4:e0:00:71:d0:34:57:
                    32:ef:43:c6:66:19:1c:7a:bf:39:c7:f8:27:00:c5:
                    9d:ec:6e:bb:14:1f:06:72:85:d1:f6:32:ae:e5:78:
                    02:79:75:73:d2:12:26:0e:e7:21:c3:dd:47:82:dc:
                    87:ec:55:61:9e:23:a9:4b:fc:e3:c5:3d:df:4a:50:
                    ad:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5B:FE:4E:65:33:59:12:2C:DC:98:61:CC:72:08:0C:F1:05:65:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1b07b7d-0778-3efe-b56c-a9b277d46c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:6c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:bd:e3:09:b7:16:11:4b:1b:4d:28:a1:aa:dc:51:ad:36:34:
         cc:e1:76:c3:c9:37:87:05:20:9a:b6:3b:47:b7:3f:a4:49:6b:
         74:97:c9:e1:36:56:b5:ae:a1:be:f4:24:5b:ac:50:c3:f7:1f:
         9c:34:33:a9:31:16:99:ef:0e:ba:b9:f8:e4:78:ec:cc:2d:0b:
         f3:8f:bb:31:6a:50:1e:7f:19:f6:27:72:d4:7b:d1:58:fe:0f:
         0f:0e:e8:ea:be:a4:e0:e6:c3:80:e6:af:f4:5d:69:2c:9b:0c:
         4c:5b:26:2c:47:c1:06:6b:4f:50:61:c4:c0:0f:44:9e:78:6b:
         55:f6:a5:75:c8:ab:64:cd:6f:e3:74:6a:fc:67:11:78:f4:47:
         0e:03:c9:e7:3c:ac:ef:a1:fd:01:2f:0a:80:60:78:4b:b1:75:
         d5:f9:ef:64:39:ab:50:c2:8c:0e:61:21:8a:2e:81:ee:f0:5e:
         ed:a3:9f:22:49:f0:eb:94:cf:2a:3b:2e:36:cb:50:4e:70:84:
         c2:68:3b:6f:84:f4:3b:e2:98:d5:f0:57:64:1a:d5:97:71:0f:
         7b:ee:3a:2c:dd:f7:82:05:01:a0:e9:2f:de:81:a7:58:9f:41:
         53:e5:e6:f0:04:70:90:e9:27:b3:bb:35:ef:fe:e7:66:42:a5:
         df:95:e9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:06:45 2025 by rpki-client