Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/0b66f002-b341-353f-bbf9-a6feaab98ca1.roa
File:                     0b66f002-b341-353f-bbf9-a6feaab98ca1.roa (raw, json)
Hash identifier:          UMkn+riVupXkbnGzK2pE6T/6OfQX54XwbOK1tGvbY2E=
Subject key identifier:   E6:AD:B3:8F:40:8A:2F:C5:00:E4:12:03:E7:4A:94:C9:3E:7A:F5:9C
Certificate issuer:       /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
Certificate serial:       010D0C9F4328584B95A79F6CA4041726A419D480
Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/0b66f002-b341-353f-bbf9-a6feaab98ca1.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     397444
IP address blocks:        2620:6e:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:9f:6c:a4:04:17:26:a4:19:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=8da0b2bb-15a8-4377-82ba-306b3621efd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:49:df:9e:17:7c:c2:91:f7:0a:8e:3f:1f:0f:
                    aa:8d:94:6f:7f:81:2b:97:8b:bd:6c:8f:33:b7:f9:
                    cb:51:be:af:f0:c8:9b:9e:be:61:32:c9:cd:7f:63:
                    ab:09:85:cb:7a:f2:94:aa:5e:94:07:42:ba:69:18:
                    ab:e1:15:ef:6b:fd:b3:9b:ce:f4:ee:46:4d:e1:36:
                    ec:ff:63:76:31:87:3c:d8:53:e4:65:86:0c:52:0e:
                    02:6c:8e:e4:c5:05:a3:2e:c2:cb:93:c1:fc:62:cc:
                    66:37:89:5e:6a:c0:9e:e4:12:67:46:f5:73:e3:8d:
                    4f:7a:2d:f5:10:82:ed:2c:2b:f2:84:fc:80:46:c8:
                    6f:59:0b:47:2d:22:72:22:06:cd:c7:58:76:68:04:
                    c2:17:91:8b:bc:af:9b:24:20:e8:2b:8f:7e:67:9a:
                    5c:f9:61:29:58:eb:77:e1:a3:24:b1:38:91:94:f8:
                    90:b7:12:26:ee:d2:02:2f:de:58:ff:b9:14:9f:eb:
                    74:32:6f:62:b0:f7:88:83:47:d1:98:af:be:b0:0c:
                    1e:20:4d:1b:dd:09:d4:eb:b4:38:60:38:8c:3e:37:
                    33:e8:61:ec:f4:b4:b6:b6:11:3d:1c:f2:b7:cd:22:
                    39:9a:9d:5d:77:38:50:61:b3:20:64:d3:1e:23:5b:
                    a2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AD:B3:8F:40:8A:2F:C5:00:E4:12:03:E7:4A:94:C9:3E:7A:F5:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/0b66f002-b341-353f-bbf9-a6feaab98ca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl

            X509v3 Authority Key Identifier:
                keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:6e:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:85:48:fc:dc:32:fd:75:16:c3:57:6f:c3:13:cb:f5:85:8a:
         5b:8d:a0:59:f8:74:b5:d9:33:62:cc:ce:8b:4e:46:98:59:1a:
         12:75:4c:71:26:32:7f:95:6b:a6:9e:34:69:e0:97:f5:1d:58:
         8e:4b:9b:4c:4c:45:e0:61:23:4d:91:af:7d:ef:33:bf:0f:cf:
         9b:21:6c:c0:19:9a:69:1b:fe:00:0c:2d:3d:c8:39:97:8c:9f:
         70:de:23:4b:73:b6:6f:68:a8:93:0f:58:d5:5c:c0:e4:f7:7c:
         99:30:fe:df:c2:dc:d6:98:49:00:4c:60:d8:ac:f1:00:2e:ea:
         dc:74:15:0a:d3:f7:9b:b6:a8:c9:09:6b:9d:62:be:4f:13:20:
         04:48:fc:db:08:e9:6c:de:b2:81:9d:04:3f:cc:2b:90:59:f8:
         ed:8a:b6:8c:5b:b2:d4:71:7a:c2:11:09:f5:60:3d:5e:f9:27:
         6b:47:9f:a5:a1:6a:7c:0d:fb:e4:66:7f:11:81:b1:cc:6b:b5:
         16:da:4f:c2:07:57:f1:2d:d9:25:03:2e:74:df:c1:83:5e:39:
         3b:6a:33:7c:e9:06:a7:67:d6:10:38:56:bd:7c:66:0f:d7:1c:
         94:38:3f:5f:5a:ef:6d:e7:e8:ef:33:d6:71:37:0c:77:44:a4:
         81:76:ed:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:11 2025 by rpki-client