Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bcd860ff-3f0b-351e-b081-3768c60b5295.roa
File:                     bcd860ff-3f0b-351e-b081-3768c60b5295.roa (raw, json)
Hash identifier:          zXRepsCKzDhh7xuzf4jpaVVABIYMu98SUIsSsKq/meY=
Subject key identifier:   01:92:F6:44:C3:67:73:C4:4C:1E:C0:DE:0B:99:06:38:9F:DE:C8:24
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB0124872A79D838D45B380
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bcd860ff-3f0b-351e-b081-3768c60b5295.roa
Signing time:             Sun 03 Aug 2025 02:35:53 +0000
ROA not before:           Sun 03 Aug 2025 02:35:53 +0000
ROA not after:            Sat 01 Nov 2025 02:35:53 +0000
asID:                     22616
IP address blocks:        2605:4300:2e00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:12:48:72:a7:9d:83:8d:45:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:53 2025 GMT
            Not After : Nov  1 02:35:53 2025 GMT
        Subject: CN=f590f0b8-1680-4a5b-bd6d-d8093a5f4a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:08:4a:3c:50:85:8e:aa:6f:a6:20:85:0a:ee:
                    08:f5:82:b9:93:91:2e:14:2c:4a:69:5a:03:8a:cf:
                    60:70:5d:3c:77:2f:7b:82:85:7e:57:9f:07:d9:b9:
                    6e:c0:a3:5d:26:eb:ee:e5:c7:d6:b6:f2:42:ef:d8:
                    e4:15:ad:95:1f:c3:d8:b0:d6:9c:a3:a7:6a:98:a6:
                    91:9b:2b:96:b7:9a:72:81:9c:0d:9e:d1:a7:bc:63:
                    bb:bf:bf:c5:dd:ea:00:58:bb:e0:4d:a6:5b:0c:db:
                    c0:3f:92:47:25:b6:f2:cf:ef:1f:69:b1:bf:dc:d0:
                    a9:6c:e0:6d:ca:fc:5a:93:b3:70:00:63:ba:51:1e:
                    ee:31:96:f0:39:1d:ac:9d:cf:ed:fe:c4:96:88:36:
                    d4:72:0c:06:ab:3c:84:e7:be:c6:3d:e0:7b:8d:41:
                    19:23:af:b0:52:9a:d3:8d:9f:c2:a6:14:4d:ab:15:
                    df:af:0a:c8:2e:f0:07:6f:4b:ec:68:8a:53:62:2f:
                    ff:e1:ee:ed:36:c0:c8:48:b3:d9:cd:b1:d6:aa:1d:
                    a6:b9:84:18:c7:1e:79:e9:7d:ab:d6:18:53:09:b2:
                    e2:45:96:52:5d:c5:6e:63:61:ca:e9:5f:84:3b:f4:
                    47:29:5c:2c:64:76:36:35:93:d1:34:87:e7:5f:fa:
                    1a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:92:F6:44:C3:67:73:C4:4C:1E:C0:DE:0B:99:06:38:9F:DE:C8:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bcd860ff-3f0b-351e-b081-3768c60b5295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:09:e7:7e:ed:3e:33:20:58:9a:05:b2:2a:41:1e:c3:6a:7d:
         91:5e:51:da:73:41:fc:91:dd:5a:dc:9e:a4:4a:8e:f0:34:71:
         fe:c3:66:c9:19:34:76:02:57:02:44:ee:dc:b1:ff:58:bb:c8:
         e6:f1:88:02:25:b5:bc:b0:93:c5:77:ff:7f:65:b2:d6:e1:a9:
         d6:5e:34:1e:1d:16:2a:6b:1f:8e:35:96:40:e9:f9:f0:7b:d3:
         e0:17:f9:a7:2d:e5:b1:d9:f5:b3:d4:00:25:7f:72:fb:22:f3:
         dd:dc:4f:cc:87:98:10:49:14:0c:d9:6f:b0:3f:05:ea:9d:d1:
         cf:3f:eb:43:43:95:bc:40:d9:a8:09:ea:dd:7b:7e:cd:73:60:
         36:8c:9c:d8:6d:50:98:20:e0:f0:81:e2:56:cf:ad:e3:17:c4:
         8a:5e:b7:58:dc:1e:fe:08:1b:f9:36:0a:5c:51:52:2b:0a:87:
         23:95:b0:3c:87:f8:4d:ab:4d:82:73:fe:76:14:7e:39:c3:b9:
         e3:1c:2d:89:1f:2a:c9:d1:4e:29:ae:74:61:02:f3:b7:7f:18:
         7b:fb:24:d8:e8:ad:e7:b0:a2:34:27:f0:c3:56:97:f5:74:4a:
         cc:e5:55:f4:8f:2c:60:34:36:0f:bc:08:eb:05:48:b8:a8:5e:
         5a:de:89:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:04:59 2025 by rpki-client