Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8229e571-aaab-32d9-b383-431c54df3a46.roa
File:                     8229e571-aaab-32d9-b383-431c54df3a46.roa (raw, json)
Hash identifier:          QE6knRE/JkB/YS9hrkDNUr4v5iQeNOtYFF4uF+GeK44=
Subject key identifier:   28:14:12:FE:72:CA:9F:A2:A9:41:DC:AD:A7:39:6C:B0:E8:D5:50:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE44674F6EFBBBBCACD840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8229e571-aaab-32d9-b383-431c54df3a46.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        2603:3015:1e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:44:67:4f:6e:fb:bb:bc:ac:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=a63fc3ec-0067-4692-8a3e-532803121a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:56:a4:2b:78:5c:b1:1f:6b:3b:56:df:51:5f:
                    34:37:02:d4:fa:6c:2e:eb:4d:71:56:ea:c6:d0:ad:
                    ef:8e:68:e6:b3:a3:93:c4:31:55:c5:37:9e:46:89:
                    a5:64:c9:7b:a4:c5:b2:b1:d0:10:5b:da:bf:f1:9b:
                    90:a8:b0:d0:e2:32:2e:89:1d:c1:7c:e5:fe:69:0c:
                    c2:34:b6:53:72:aa:e6:2e:e6:3d:e5:14:bf:eb:43:
                    a7:c0:d5:3c:cd:52:e5:d7:20:96:a6:0b:cd:fb:0f:
                    ee:f2:aa:2b:91:ee:1c:83:c2:46:3f:21:a8:a5:54:
                    ca:02:63:98:ba:60:ed:38:9d:d0:73:1a:da:7d:b9:
                    33:5c:60:04:a3:a5:3c:19:79:37:45:73:f5:34:a7:
                    2a:34:bf:03:c8:c7:f7:f8:a2:8f:c9:e6:27:dd:be:
                    a6:bd:98:86:a3:98:6d:64:bc:d3:04:bf:96:79:9c:
                    22:0b:17:38:16:43:f8:fa:6e:a9:76:55:87:c1:6f:
                    cd:4c:55:4b:d1:4c:9d:f0:85:12:aa:22:09:8c:c1:
                    b5:10:bf:a2:c5:fb:7a:0d:a5:a3:87:f7:1d:0d:aa:
                    2f:13:c5:77:60:10:c2:21:b0:4c:ad:6a:77:01:5f:
                    14:ad:89:e5:79:ea:e4:08:d9:e9:12:94:6c:9b:16:
                    44:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:14:12:FE:72:CA:9F:A2:A9:41:DC:AD:A7:39:6C:B0:E8:D5:50:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8229e571-aaab-32d9-b383-431c54df3a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3015:1e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:ac:04:04:1f:2c:ea:f3:ba:93:0b:a3:a9:d2:ad:40:7c:57:
         1d:70:9d:1e:79:df:86:df:30:67:a3:49:fe:42:7a:3f:b4:6a:
         25:3d:65:86:11:b2:58:ba:ad:01:57:c6:fa:7d:cb:4c:2c:d3:
         b3:2c:4e:2d:4e:75:8d:a5:a6:80:0a:b6:e2:38:e6:91:8d:25:
         f5:43:6e:bd:48:1f:f7:8a:fa:3d:4f:2e:64:13:72:72:6a:1f:
         76:d7:0e:8e:72:04:d7:e1:5f:20:d0:11:66:c8:53:9a:61:54:
         43:4f:17:08:11:e0:d2:74:9f:a2:4e:0c:35:f7:52:b4:2c:b9:
         6e:84:aa:70:47:e3:bc:21:67:1d:97:6d:ae:fb:75:29:37:9f:
         c3:b4:63:89:00:4c:68:e3:86:bc:96:1c:5c:10:44:c2:40:a6:
         2a:e5:6f:ba:da:d9:d4:23:2a:9a:fc:d2:52:88:77:00:26:0b:
         a6:c4:1b:0f:79:66:02:ad:9c:2b:1a:8a:79:7c:6e:61:37:6c:
         8e:98:2e:b0:51:58:ad:01:d0:87:6f:87:4c:78:d6:d6:43:6e:
         44:6a:28:0e:f4:9f:c3:97:90:07:01:4c:f9:6e:59:40:6a:08:
         d0:2f:a1:55:2b:8e:d5:38:0a:e9:85:51:93:a1:2c:4f:4a:52:
         38:3b:20:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:44:32 2025 by rpki-client