Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/7828ca5e-d6ec-37fe-a176-bcb9ebde9efa.roa
File:                     7828ca5e-d6ec-37fe-a176-bcb9ebde9efa.roa (raw, json)
Hash identifier:          SQCRZYT2eLIsa3RMKg61tIbx0fwCErFcBYqT+4JUbRQ=
Subject key identifier:   54:0E:B4:E1:36:65:1A:B9:6C:31:F2:01:2C:DA:39:1E:43:A2:9A:CD
Certificate issuer:       /CN=66610284-035b-4928-833d-55f67bcdadc1
Certificate serial:       010D0C9F4328584AC446410B06683F88FE2A8D00
Authority key identifier: 32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/7828ca5e-d6ec-37fe-a176-bcb9ebde9efa.roa
Signing time:             Wed 06 Aug 2025 13:00:42 +0000
ROA not before:           Wed 06 Aug 2025 13:00:42 +0000
ROA not after:            Tue 04 Nov 2025 14:00:42 +0000
asID:                     395887
IP address blocks:        2602:fb95:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c4:46:41:0b:06:68:3f:88:fe:2a:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66610284-035b-4928-833d-55f67bcdadc1
        Validity
            Not Before: Aug  6 13:00:42 2025 GMT
            Not After : Nov  4 14:00:42 2025 GMT
        Subject: CN=ea56ee0c-ab95-41a6-8f16-f11dac8621d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:70:ae:92:99:22:44:83:cf:bc:13:05:9d:1a:
                    38:b8:90:be:67:68:2b:7c:cb:cd:5b:1a:6b:cf:44:
                    13:ee:2b:06:ab:7d:7d:99:3f:c9:ad:85:dd:54:05:
                    3b:5c:e7:13:27:b0:85:55:8f:bf:a1:23:2d:17:41:
                    2a:ee:08:b2:0f:61:f2:49:a4:0b:5f:39:26:f3:98:
                    1a:62:92:55:d0:e1:3f:95:a9:b0:51:c0:5d:56:a4:
                    7c:27:d1:57:01:90:9c:eb:6d:9f:23:82:0a:ee:66:
                    a5:f8:13:27:17:ef:db:19:d3:ab:90:1e:4f:cc:2c:
                    12:b2:64:48:65:a4:ce:1c:ff:54:18:8d:66:20:ca:
                    e3:84:c9:7b:29:73:a0:3c:52:bb:00:1f:e8:05:89:
                    90:25:0d:b9:14:06:12:2b:b0:78:b3:91:11:63:20:
                    90:ea:86:30:1d:59:3a:0b:40:1e:73:b1:fd:82:3b:
                    ad:3b:e7:6c:e5:fc:62:9b:34:d2:81:16:9c:4b:04:
                    fb:ce:83:96:9b:2c:e8:6a:e6:69:17:88:4b:ca:fa:
                    95:59:ff:2d:a8:11:a4:f6:d9:c6:4c:bf:c1:a8:1f:
                    14:0d:e6:0e:67:b6:d3:c3:86:27:8d:d4:c3:30:c0:
                    8a:2d:92:a2:d0:f6:64:cf:a0:fb:d0:00:39:91:6b:
                    b8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0E:B4:E1:36:65:1A:B9:6C:31:F2:01:2C:DA:39:1E:43:A2:9A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/7828ca5e-d6ec-37fe-a176-bcb9ebde9efa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl

            X509v3 Authority Key Identifier:
                keyid:32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb95:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:6b:31:3c:09:72:13:73:4e:3a:41:21:78:16:03:58:87:9d:
         5b:66:30:05:68:b2:6e:4a:e3:3c:82:d1:89:0a:d1:a6:63:06:
         99:aa:79:e3:2c:75:72:08:f1:61:67:e6:54:a7:2f:bf:1d:44:
         42:1d:e6:60:b8:ed:0e:55:35:0b:f5:4d:6c:c6:30:e4:e5:dd:
         95:75:45:64:d7:cc:71:d5:09:8a:09:4c:ce:db:a1:2a:60:ec:
         d7:ab:29:1b:10:46:25:af:98:91:c4:56:55:b4:3f:94:24:24:
         bc:7a:d5:95:ec:a8:02:12:84:9d:d5:41:a7:8a:f7:97:36:b7:
         12:ff:7b:13:06:39:0b:d4:43:15:d8:49:f5:94:ce:78:14:c1:
         41:fa:5d:e6:4b:ae:24:b9:05:28:96:3c:c8:79:11:e6:b6:dd:
         fc:c3:cb:6a:73:5f:3a:b6:f6:e8:85:e9:6a:f1:31:8f:83:c7:
         45:03:72:47:f2:60:d3:49:34:8f:8e:63:48:a5:b7:f9:3b:3f:
         9e:c3:09:d0:db:c9:ef:f5:24:33:7c:ec:66:bc:f7:47:ca:80:
         12:1c:e6:77:fa:09:11:b0:7c:a2:c1:04:8c:0d:3a:14:8b:34:
         aa:69:1e:b3:71:08:8d:e5:30:71:49:b7:a1:a6:ad:c4:5e:ad:
         dd:ef:23:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:31 2025 by rpki-client