Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a261e4b4-ea47-3ba7-ae28-929fd49d6c63.roa
File:                     a261e4b4-ea47-3ba7-ae28-929fd49d6c63.roa (raw, json)
Hash identifier:          igDJARilIbrjRKl+iM/h5DWADZb6G8g3B5DS3xe/Kd4=
Subject key identifier:   B3:36:E1:61:9D:2E:EB:EF:6E:CD:27:2B:68:C1:D3:E7:BF:43:4E:AB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB220EE1059E7ADE66993D160
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a261e4b4-ea47-3ba7-ae28-929fd49d6c63.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     7016
IP address blocks:        2603:2984::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:ee:10:59:e7:ad:e6:69:93:d1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=293ad683-5d19-49e3-82a6-bba7e34d7eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:01:bd:f6:d7:c5:a5:3a:0c:f2:b4:db:de:4e:
                    ca:40:a8:63:b1:eb:db:05:16:ec:41:3c:78:bc:04:
                    9d:f4:f7:34:29:40:99:f3:5b:3b:f7:60:cc:f8:c8:
                    05:80:88:45:0f:f9:85:6e:9d:37:72:65:6f:ce:7f:
                    fd:43:8d:f8:35:c3:2b:f3:c3:51:d1:ff:d1:92:cd:
                    b6:72:b4:2b:b2:e6:df:c8:c7:72:07:29:87:5b:c7:
                    df:ae:1b:b3:8e:f7:51:b4:08:26:64:bd:3f:24:31:
                    89:75:04:ee:7f:d5:e1:fb:af:62:0e:e3:6b:d0:a2:
                    be:ec:57:47:f4:1b:41:d3:89:35:41:cc:52:d6:8f:
                    a1:1d:47:89:d3:20:e4:45:ac:1c:2c:72:2a:11:a5:
                    07:d2:52:fa:44:bf:c0:4b:8d:9b:0e:83:a7:60:d9:
                    bf:4d:ea:88:70:c2:5a:2d:6d:51:c6:56:82:85:5a:
                    e0:24:f8:ed:60:38:92:cf:f6:7d:0f:18:eb:80:48:
                    a3:82:5f:48:9d:77:23:26:da:d5:cb:50:c4:a3:1b:
                    c1:e9:95:6a:d3:aa:4d:a1:41:70:ac:2d:aa:e9:e1:
                    5a:4a:33:32:e4:b3:bb:7a:2b:f6:ae:bf:d0:7a:1c:
                    d4:96:02:eb:cc:9b:2a:ff:e1:37:77:a6:e2:d5:61:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:36:E1:61:9D:2E:EB:EF:6E:CD:27:2B:68:C1:D3:E7:BF:43:4E:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a261e4b4-ea47-3ba7-ae28-929fd49d6c63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2984::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:a8:ab:eb:49:e8:15:4a:83:e9:2f:cc:25:9b:23:60:ef:1b:
         bb:c6:76:e3:d8:e9:8b:f8:74:14:82:08:96:f7:0d:e9:2e:91:
         2e:1d:59:a1:91:23:c3:6b:6e:60:51:29:01:aa:73:6d:94:47:
         98:bb:d1:db:bb:ff:6e:a8:2e:a5:d9:1d:23:fd:75:e2:b9:32:
         c7:20:30:22:9d:7a:6b:ea:45:c6:7e:bd:03:78:a1:64:fe:bd:
         3a:89:89:c7:84:cc:91:c3:52:90:ad:23:9f:b4:d2:f7:ab:6f:
         ba:85:ff:40:e7:7a:e4:a4:6f:67:38:fe:f7:fd:26:00:b1:fc:
         91:03:83:95:29:a2:04:b3:57:91:4d:40:b4:4d:b7:05:05:b3:
         09:38:3a:e6:3e:2f:f2:f3:25:77:52:82:e9:55:45:86:8c:ad:
         e8:c8:f6:8d:aa:a2:ec:0b:09:36:3a:20:21:bd:d9:d5:8a:c7:
         39:c3:99:4a:91:80:16:ce:61:b1:60:a2:e3:db:92:ab:d7:98:
         9d:b7:85:0e:12:ce:0d:d0:e7:78:c3:cd:8a:4a:d7:74:fd:6f:
         ba:bb:24:d1:f8:12:34:54:85:d5:cb:1a:db:e2:ce:f8:90:90:
         2c:d7:aa:98:8d:8b:e3:b9:68:f3:18:0d:aa:f8:c4:5a:5e:23:
         77:f0:51:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:35:51 2025 by rpki-client