Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/ca06bd9b-beb6-3f78-950b-575c93605483.roa
File:                     ca06bd9b-beb6-3f78-950b-575c93605483.roa (raw, json)
Hash identifier:          mNxu+trR2RjTSmL0OXoL9PczUitEiasEJUJxfkz2TVo=
Subject key identifier:   6E:88:07:80:23:57:B7:A2:36:B7:18:C3:54:07:A1:79:03:C8:67:EA
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584ACB40E6092A6F3F4329ED6840
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/ca06bd9b-beb6-3f78-950b-575c93605483.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     46562
IP address blocks:        2607:6b80:67::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:e6:09:2a:6f:3f:43:29:ed:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=98e8e26b-76fd-4b4a-b7e7-0a61eb0a28d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a5:ed:a2:6e:4f:26:71:97:76:6b:dc:bb:5a:
                    39:7d:7b:d3:db:08:24:a9:a9:06:d6:c5:db:97:32:
                    d1:7b:2f:bf:3b:81:fb:4f:c8:83:13:64:53:14:70:
                    53:24:75:fc:4a:a5:f1:1f:3e:df:41:42:fd:99:ec:
                    49:6b:17:b0:e7:87:18:c8:42:ec:30:74:87:19:9f:
                    de:2c:cb:93:b8:ed:95:ff:8f:64:6c:9f:8f:7d:08:
                    68:22:7b:24:bb:b0:5a:54:86:0a:2e:38:e0:38:f2:
                    0e:59:d1:f6:8d:87:eb:49:c2:d3:a4:ef:19:bf:b9:
                    71:0c:cc:eb:d3:f0:45:e0:9a:b6:1c:7c:71:a0:93:
                    74:ea:e3:e5:b4:4e:1a:00:f5:9c:8f:8e:5b:68:c3:
                    de:23:4e:7b:8d:44:a9:d1:a7:6f:c1:2b:14:4e:c0:
                    47:47:b9:db:bc:2a:57:a8:7b:30:74:10:e9:de:bf:
                    69:36:cf:02:35:d9:22:62:ce:ec:a7:01:81:8f:db:
                    fb:c0:9d:eb:99:c9:45:93:3b:96:43:2d:af:67:c4:
                    1c:d7:cc:f0:ca:86:bb:70:a1:fa:6a:0b:d2:59:60:
                    89:30:38:55:ed:c5:1d:85:91:66:d5:9e:92:11:e6:
                    31:70:3f:6b:a5:e4:d1:f7:0b:52:0f:f6:40:f5:f4:
                    a0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:88:07:80:23:57:B7:A2:36:B7:18:C3:54:07:A1:79:03:C8:67:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/ca06bd9b-beb6-3f78-950b-575c93605483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:67::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:00:e3:51:4a:c9:47:34:68:02:c6:45:5f:ba:72:9f:27:18:
         9b:6b:c1:db:6e:25:8b:64:4a:ba:8c:a8:63:d5:39:84:7d:46:
         bb:6f:27:b2:09:a7:e8:ca:10:72:bc:f3:85:5f:d0:16:3c:2c:
         28:f3:65:c9:da:43:57:9f:db:37:0e:c0:4b:77:9b:1d:10:27:
         d5:47:e3:03:e9:12:c7:06:38:d8:3f:dd:23:19:a6:f3:e7:09:
         69:d6:d3:ce:f8:98:ae:d0:1a:db:ca:23:28:11:91:b1:8f:29:
         eb:76:76:87:d2:2d:22:fd:e0:5d:6c:c7:5c:56:1e:06:63:7e:
         f4:c3:6c:66:ea:53:89:20:55:46:fd:ed:e9:0e:d3:59:d8:19:
         52:c8:02:a1:65:a0:f3:87:14:ec:97:b7:96:7d:25:0f:5e:04:
         7e:bb:94:67:c6:db:26:6b:4a:12:d1:23:f9:18:4c:94:5e:4a:
         30:e4:ef:b9:ec:0e:6c:f8:38:b8:cf:3d:ff:cf:76:99:f9:37:
         8f:5a:16:dc:6c:b8:b8:f0:74:e0:2d:79:a8:c8:1f:9f:f3:42:
         b9:02:e3:1f:48:b4:d3:f7:33:52:d9:0c:f2:05:8a:69:be:79:
         0f:ef:1e:35:07:ef:be:38:15:36:e3:d2:56:6a:55:7d:9d:66:
         92:e4:90:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:54:52 2025 by rpki-client