Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/396eef46-a3f9-3221-b915-e98916566c30.roa
File:                     396eef46-a3f9-3221-b915-e98916566c30.roa (raw, json)
Hash identifier:          Zafd+JYYoz38Oz+9cWaZhkLPlv0kjzp/xeulln4KNtM=
Subject key identifier:   4A:32:12:4C:78:E7:60:C8:77:28:38:95:D5:5F:E8:87:8E:0A:25:FE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB220F201C8EEBB954FC71680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/396eef46-a3f9-3221-b915-e98916566c30.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        2603:3014:1900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:f2:01:c8:ee:bb:95:4f:c7:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=f504c245-b611-4bbb-8889-d44cc20bb02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1b:f4:6d:cc:15:0d:ae:fc:2a:b9:d5:5a:bb:
                    36:01:c0:c1:aa:80:90:48:27:3f:53:3e:20:e9:38:
                    27:b3:74:0a:70:a3:d0:6a:e5:b5:96:e2:e5:85:a7:
                    0a:bb:df:c0:17:00:a1:b3:ff:d5:34:53:0f:fd:99:
                    e3:16:52:6a:98:bd:b4:c4:62:1e:e4:53:ec:32:a9:
                    d1:62:a0:82:cf:0c:84:8e:e0:11:47:cf:04:93:3e:
                    96:79:df:ff:83:5b:50:4c:ce:cc:ad:20:69:bc:9a:
                    60:cc:01:2d:ae:44:74:a0:16:9b:9a:46:66:ae:2a:
                    d8:17:fe:ca:ce:92:1e:d0:97:13:43:4d:c2:e5:bf:
                    0b:1a:3a:c7:fa:56:b8:6d:08:4e:11:d5:e7:57:6f:
                    c1:89:39:7d:d3:8b:05:12:06:33:47:83:b6:16:3d:
                    be:e9:7d:b9:51:94:d0:5d:e1:94:dd:5b:28:38:08:
                    99:1c:b3:b8:d9:98:75:6b:d8:7a:76:cf:bb:60:0e:
                    94:c1:23:0a:0b:95:34:02:d3:00:66:15:72:8e:09:
                    9d:33:4a:4c:e8:7c:8c:0c:45:8b:9a:cd:95:22:09:
                    37:2c:08:4d:06:c6:47:40:5e:4c:63:2c:14:6a:76:
                    21:07:74:bd:9e:2a:5c:f4:5a:57:d4:44:fc:93:82:
                    bf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:32:12:4C:78:E7:60:C8:77:28:38:95:D5:5F:E8:87:8E:0A:25:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/396eef46-a3f9-3221-b915-e98916566c30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3014:1900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:b7:45:a9:3e:d0:ee:ec:58:fa:4f:cd:a5:39:ce:e7:ab:22:
         18:59:ea:95:b2:40:9b:f9:0d:8a:69:03:5e:b9:f5:1c:6a:24:
         d9:c6:ce:86:4e:d4:b6:b1:e1:8d:3c:fd:8b:c5:bf:8e:64:05:
         60:81:2c:cd:55:23:93:fd:3c:ac:22:98:11:a6:d4:42:d5:ed:
         8b:93:e8:e7:98:ee:4c:ef:93:4f:af:e4:69:ba:03:de:ae:7a:
         cb:18:9f:73:12:4d:64:c5:05:80:43:cc:a5:42:88:db:4f:eb:
         42:50:1d:e8:d9:7f:fc:e8:a9:0f:6d:c1:0a:15:ac:0e:0a:87:
         0b:d0:8d:f5:e4:0a:e7:99:51:9a:82:ad:9d:7a:0a:51:50:95:
         b6:3d:50:71:d0:2d:da:82:02:a1:39:7c:4a:e3:66:26:42:61:
         ab:a5:ba:a4:73:4c:5f:60:f3:9d:08:64:dc:90:05:50:08:3f:
         d9:69:04:00:ac:74:ff:2d:15:62:93:45:9d:1f:f3:9c:d0:b7:
         32:c8:eb:83:06:08:df:38:3c:8b:e0:92:c7:ca:94:b1:3d:2b:
         4f:96:37:8d:01:5e:c7:87:44:66:4f:36:a7:4c:a3:11:c2:a4:
         a0:aa:10:25:dd:d4:12:bb:23:5a:24:e5:b8:fc:f3:40:23:9a:
         e5:26:5b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:35:07 2025 by rpki-client