Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b2e53da8-5865-32f3-8e85-5c9b3fde9510.roa
File:                     b2e53da8-5865-32f3-8e85-5c9b3fde9510.roa (raw, json)
Hash identifier:          rr9MiMZQ7d1ZW3vubGc3SG3rIBpQ0gkacc1ci0Eyh3w=
Subject key identifier:   20:C1:72:BE:8F:B0:EC:4B:58:CF:D3:65:95:14:7C:83:E4:3A:08:18
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB0114291CB177D4F06F1E0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b2e53da8-5865-32f3-8e85-5c9b3fde9510.roa
Signing time:             Sun 03 Aug 2025 02:35:52 +0000
ROA not before:           Sun 03 Aug 2025 02:35:52 +0000
ROA not after:            Sat 01 Nov 2025 02:35:52 +0000
asID:                     22616
IP address blocks:        2605:4300:1400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:11:42:91:cb:17:7d:4f:06:f1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:52 2025 GMT
            Not After : Nov  1 02:35:52 2025 GMT
        Subject: CN=91aec36e-f788-47b1-8f22-00427610529c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:75:9e:98:23:73:3e:68:d6:89:8d:d6:d4:56:
                    6e:63:5f:94:08:63:2d:21:f0:13:89:8b:c3:b5:a0:
                    70:36:35:07:84:e5:ac:34:fe:5f:1b:a2:df:37:bc:
                    bf:0f:26:f1:da:9f:2b:d2:e2:81:b0:71:ca:d6:f8:
                    40:53:68:ae:0a:5a:e2:b1:f9:40:32:f5:0c:ea:e5:
                    57:fc:61:1e:ae:02:e4:e3:83:64:90:b7:97:5a:0c:
                    2a:1b:0b:26:a2:4b:59:02:25:9c:2a:84:3b:e2:aa:
                    67:b2:00:09:c2:23:0b:d6:45:34:ab:80:5e:e6:b7:
                    e2:be:af:76:f7:4e:0e:c6:29:13:ea:77:c6:a6:9b:
                    19:3e:d2:75:1f:ec:88:f9:d3:9c:81:4c:f7:42:de:
                    37:93:0f:0b:4f:96:4e:c1:13:6f:31:c5:af:51:da:
                    d3:d0:61:57:97:82:01:71:d3:01:5f:8a:fe:da:83:
                    6f:61:d2:35:78:cd:93:2b:66:dd:3b:0c:0e:19:c0:
                    c1:d4:ce:70:6a:47:b2:33:08:1c:e4:03:c9:cb:bf:
                    7e:6c:70:b0:31:bb:56:ff:07:73:08:ca:5f:56:51:
                    9a:b9:b3:2a:97:47:24:23:14:71:ca:2b:11:8e:b1:
                    4c:0c:bc:80:a9:d3:0f:0a:36:1e:c9:ec:a2:90:3f:
                    b7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C1:72:BE:8F:B0:EC:4B:58:CF:D3:65:95:14:7C:83:E4:3A:08:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b2e53da8-5865-32f3-8e85-5c9b3fde9510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:1400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:bd:26:20:c7:74:ba:2c:52:ee:b3:1e:f9:cc:2d:d4:d0:19:
         5f:4d:31:e4:bc:8a:42:eb:28:2b:3e:89:94:42:d1:c2:d1:41:
         3b:94:0b:70:84:8f:76:b5:fb:b6:74:76:7f:f1:53:2c:83:6a:
         a6:5d:56:6e:59:21:7b:85:28:37:e7:af:d6:ae:c2:c0:8a:74:
         2d:06:d5:89:8b:43:8f:c5:60:5b:98:d8:57:96:d2:40:76:0d:
         29:33:11:8f:08:d3:a5:96:4a:ac:25:7a:d2:c8:32:f8:b7:16:
         7b:a9:d5:e7:3f:30:6f:cd:13:a0:bb:bc:3b:d8:a1:eb:de:c8:
         ef:40:39:05:04:a2:3e:67:38:58:ab:38:09:69:55:19:a9:e7:
         7b:c5:4b:91:fc:02:62:5d:e9:30:30:15:8e:f2:a4:46:ee:f4:
         81:1f:42:ba:e7:47:7f:45:f5:86:79:e4:07:2d:d4:ad:1d:34:
         b7:9c:06:4a:e5:95:f5:a4:5c:0e:bf:1b:97:13:fa:34:1b:a5:
         ea:80:02:b6:bd:c3:0a:e1:1a:74:56:64:97:32:e7:67:8c:9f:
         09:9c:d4:b8:8b:67:56:47:87:fa:5f:f6:58:7f:e8:ec:52:49:
         57:b8:77:fb:f9:d1:6b:c5:14:05:0c:bb:ba:ec:34:d0:af:71:
         f6:b9:91:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:23:13 2025 by rpki-client