Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/99c34139-a1d2-32dd-b5f4-2aa9631586f1.roa
File:                     99c34139-a1d2-32dd-b5f4-2aa9631586f1.roa (raw, json)
Hash identifier:          c4zlExdn8yPOktvQjOjxXqUTkejsjbqGenYBrfxJZYM=
Subject key identifier:   8B:74:E4:31:6D:FE:32:5A:BC:98:A5:A4:C0:3C:A1:BC:DF:26:86:E2
Certificate issuer:       /CN=a1a8e018-88f4-4067-935e-ef8e20a553c5
Certificate serial:       010D0C9F4328584A43DB09AC2EC1BA1B42C48500
Authority key identifier: 75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/99c34139-a1d2-32dd-b5f4-2aa9631586f1.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     14432
IP address blocks:        2602:f965:80::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:09:ac:2e:c1:ba:1b:42:c4:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a8e018-88f4-4067-935e-ef8e20a553c5
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=e816f884-d36f-49bf-8107-849856270401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6b:24:89:c4:38:ef:92:87:5e:75:b5:1c:d2:
                    c5:ba:7e:1a:62:85:9a:6a:4c:30:49:86:0d:d5:1e:
                    73:4e:e5:e3:4e:4c:5c:3e:34:23:10:78:c6:3f:be:
                    91:13:d0:48:d1:f1:6e:5c:ad:38:14:e9:35:9e:68:
                    be:18:28:63:b1:85:ac:91:9a:bf:98:9f:03:0e:85:
                    96:f7:24:30:15:02:87:99:db:33:45:8a:a5:57:11:
                    88:6b:08:65:f3:bb:ce:94:04:fb:6b:2c:7b:59:83:
                    ab:f3:4d:e6:4a:72:78:70:8e:93:5b:6e:0c:eb:f8:
                    68:e7:d7:ad:cf:a0:45:fd:9a:8d:c5:06:3b:c4:3c:
                    3d:f3:f8:52:93:e1:43:e6:76:ea:1d:e1:1a:d4:2f:
                    26:fc:03:5d:a1:48:3d:1a:ab:e4:a4:f6:26:99:8a:
                    3e:3b:a7:fa:ef:23:b6:7b:82:65:5f:6a:42:26:5a:
                    89:60:8f:ad:bc:47:c3:fb:d2:ed:41:0e:21:75:01:
                    07:e6:c2:aa:23:dc:8c:e1:39:5a:62:20:3a:8d:47:
                    a9:e6:12:6d:f9:8e:5b:fd:8e:fd:c8:21:af:ea:57:
                    5b:f7:26:1e:b3:4c:d5:99:b6:e7:0a:ae:8b:50:58:
                    f7:0e:54:17:8c:28:a2:11:5e:37:43:cb:2c:f3:0b:
                    87:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:74:E4:31:6D:FE:32:5A:BC:98:A5:A4:C0:3C:A1:BC:DF:26:86:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/99c34139-a1d2-32dd-b5f4-2aa9631586f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl

            X509v3 Authority Key Identifier:
                keyid:75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f965:80::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:4c:39:72:cb:88:93:6b:c5:6c:30:d0:77:a9:9a:d0:54:11:
         41:54:ee:86:57:64:a5:56:51:84:7e:59:00:e1:83:a6:d5:63:
         c9:4d:d7:6c:25:3d:fb:69:4b:ea:8b:26:54:f5:34:aa:f2:03:
         7d:88:b5:54:e1:bb:8a:50:80:1b:0c:0a:76:ed:74:a2:cc:e3:
         ad:43:12:84:84:cf:d6:34:47:10:ab:2e:02:2a:1d:18:46:75:
         1d:46:ea:2a:ec:8d:f1:43:24:c2:74:08:7d:32:1d:b0:2b:21:
         16:1d:03:aa:b9:5a:9d:cd:d0:d7:f3:41:a1:79:8a:1f:25:77:
         fb:7a:23:e7:cf:a0:e5:0b:28:33:da:46:16:31:b5:02:e1:2c:
         33:d4:de:62:96:f4:d0:c7:ef:49:8e:54:16:a5:b1:db:52:24:
         f2:87:da:e6:5b:d2:a6:06:87:bf:ac:00:29:e2:fd:75:16:d1:
         2e:24:a9:95:70:6f:35:03:94:59:a8:1b:5f:de:d5:15:bd:88:
         20:24:d1:46:2e:3a:94:c6:70:60:3d:38:0b:13:ce:a1:4c:8c:
         56:31:3a:c6:24:d3:7b:3f:af:5b:59:92:40:89:c5:0c:54:ea:
         5d:bf:ba:34:dd:78:7f:3e:bd:51:13:98:be:4d:8d:91:92:55:
         52:7e:3c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:25:29 2025 by rpki-client