Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/17bf31ef-ac67-301a-92f1-a1b3af89d16c.roa
File:                     17bf31ef-ac67-301a-92f1-a1b3af89d16c.roa (raw, json)
Hash identifier:          MuoVwvO+Km3dCGHE8sUwHZB7qBtOJoYCj4U7DTSBNY0=
Subject key identifier:   1E:0F:D0:02:0F:B7:DA:F5:43:7A:D5:84:2B:43:EA:1B:A8:30:8C:D3
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB011901C6B4425088E7B80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/17bf31ef-ac67-301a-92f1-a1b3af89d16c.roa
Signing time:             Sun 03 Aug 2025 02:35:52 +0000
ROA not before:           Sun 03 Aug 2025 02:35:52 +0000
ROA not after:            Sat 01 Nov 2025 02:35:52 +0000
asID:                     22616
IP address blocks:        2605:4300:1f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:11:90:1c:6b:44:25:08:8e:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:52 2025 GMT
            Not After : Nov  1 02:35:52 2025 GMT
        Subject: CN=93cc954c-ea00-4177-90fe-22f85a0a3cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2c:44:35:8e:8a:96:76:2a:5a:75:67:d7:06:
                    2d:c6:4a:a6:70:44:46:ed:79:0f:16:12:a0:d8:96:
                    33:f1:59:b4:c3:54:fc:0b:c6:83:96:37:29:96:8c:
                    06:b1:1a:1c:33:b4:c5:30:c3:9a:77:bf:f1:6d:1b:
                    3d:6d:d6:3e:41:4d:f5:4c:65:f0:d1:56:98:98:e2:
                    c6:98:cd:ef:91:1f:71:e2:b4:1c:aa:65:35:19:de:
                    96:58:bc:37:8f:80:f5:23:a7:d2:bb:21:fb:95:15:
                    ff:63:25:b4:ed:3b:b9:ca:3e:67:6d:7b:a0:6d:83:
                    d4:2c:9a:e8:4a:17:80:59:ff:a4:10:65:55:c9:85:
                    23:32:a9:98:b5:c5:3c:2f:f3:ab:a2:e8:e8:ee:85:
                    b7:54:17:54:9a:da:55:ef:2b:69:2f:20:22:d4:b5:
                    22:d0:9b:22:c4:77:f1:3f:d4:9c:bb:b4:b8:b2:ea:
                    42:cb:9b:d0:c8:3c:73:c4:ce:08:93:a7:5e:63:6f:
                    0b:25:55:9b:a5:9c:db:02:f5:82:ce:08:95:9a:42:
                    3a:8e:70:cc:54:8e:d9:17:6b:d4:83:cf:d6:eb:7b:
                    42:27:30:bb:9b:35:af:62:f4:e8:0a:f0:d7:ea:d2:
                    58:0e:f1:31:a6:ae:5c:69:f3:c4:c1:05:b7:68:c3:
                    58:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0F:D0:02:0F:B7:DA:F5:43:7A:D5:84:2B:43:EA:1B:A8:30:8C:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/17bf31ef-ac67-301a-92f1-a1b3af89d16c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:1f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:db:a4:1b:f9:68:2d:e2:04:ba:ae:7a:eb:cd:42:ed:6c:ff:
         e0:a0:00:ad:39:99:d0:b8:3d:3e:6d:be:c8:5e:f5:52:c7:a4:
         5f:73:ec:d8:2b:79:d7:46:6f:85:67:4f:d4:4a:92:5e:1b:c7:
         1c:a1:d2:28:48:24:71:7c:c6:e1:ee:ce:4b:22:6b:86:72:2b:
         68:4e:d6:a7:6b:22:0e:80:aa:20:0a:c9:22:65:79:2b:30:d5:
         95:50:66:da:a8:ef:30:3f:95:10:17:8c:b4:f5:69:04:3d:47:
         51:73:d3:f1:b0:bd:77:1b:2b:94:8a:e8:9d:e3:5e:2f:71:13:
         e3:2b:28:03:62:92:66:18:a9:bf:e3:9f:86:78:c2:c3:78:de:
         d0:94:96:36:db:63:d6:4d:d2:4b:7e:25:68:89:57:66:53:7e:
         e8:06:f5:92:2d:4d:0c:22:34:d4:a4:97:f3:be:72:9f:f3:cc:
         9e:13:72:0b:81:5f:09:bf:63:f8:bb:ef:25:a5:58:69:ae:2f:
         a9:38:c7:a1:ab:45:d3:d4:ae:73:59:de:21:72:00:f8:0b:c4:
         9d:93:c6:52:dc:eb:cd:6b:ba:d4:bc:0c:5f:47:86:b9:f0:ae:
         99:e0:45:61:87:af:ed:77:22:cf:75:df:cb:10:c2:a2:1b:bb:
         09:92:2e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:24:48 2025 by rpki-client