Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dba5fe10-e0d7-374b-91b5-1cc8eb6d9e4b.roa
File:                     dba5fe10-e0d7-374b-91b5-1cc8eb6d9e4b.roa (raw, json)
Hash identifier:          Kxhq1bX4hJOcZVoGntswSbGCHNZuL32uQF0+gTM4dlc=
Subject key identifier:   E6:82:05:1E:84:80:B1:B8:31:71:2B:83:84:34:B4:34:B0:F6:6A:5B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB220E932996FA98A7E266240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dba5fe10-e0d7-374b-91b5-1cc8eb6d9e4b.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     7016
IP address blocks:        2601:547:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:e9:32:99:6f:a9:8a:7e:26:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=f878b67b-7b3f-43a6-9bac-4516d2e392bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3e:1a:e8:6d:8b:b1:dd:c9:11:f7:ff:ac:fa:
                    ae:b0:97:04:b3:17:dd:9b:d4:41:9b:c4:2a:25:7a:
                    2d:f7:2d:6e:0e:f4:24:76:ea:13:38:a1:2a:23:41:
                    45:01:14:2b:cf:46:e2:ba:0b:e1:20:c9:aa:1e:5d:
                    24:c8:45:cb:d1:cf:e7:7d:9d:38:ac:ad:97:e1:6c:
                    65:36:7a:c8:85:40:59:0f:01:13:6d:d0:8e:8e:7d:
                    d7:38:c6:4f:a4:8c:05:8e:54:d0:21:59:ba:2c:ce:
                    b8:50:99:21:be:87:20:9e:e1:f4:63:ea:01:07:e9:
                    30:71:3d:83:5e:0d:56:f5:98:0b:12:88:fb:6d:ef:
                    2c:ce:b1:74:78:92:69:64:01:56:3b:83:aa:35:31:
                    94:39:ba:5a:9e:e4:87:2f:80:42:cb:a8:67:fc:fc:
                    cd:5d:c4:95:d0:6b:ed:96:3a:11:81:ed:e2:f9:2a:
                    6b:d0:00:e5:27:44:7d:a8:10:54:9b:f9:b2:cd:dd:
                    68:58:4a:4c:c7:83:df:ec:90:e3:1c:b6:11:5e:34:
                    09:e0:78:65:77:07:6e:78:33:10:ee:f7:9e:7e:50:
                    0c:4e:b0:98:b0:0d:4a:27:25:bc:89:62:83:4d:f5:
                    93:d6:9f:9f:3e:69:4f:ff:10:6a:c8:87:bf:42:ff:
                    99:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:82:05:1E:84:80:B1:B8:31:71:2B:83:84:34:B4:34:B0:F6:6A:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dba5fe10-e0d7-374b-91b5-1cc8eb6d9e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:547:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:7b:34:37:67:89:93:72:e8:be:26:e3:33:15:3c:7e:4e:56:
         e1:7f:12:d2:08:8d:43:74:2c:91:4e:ef:46:f2:cd:1b:20:34:
         fb:c7:76:8d:56:46:6a:cc:1b:e9:21:ab:c4:26:3c:55:1a:38:
         21:7e:0b:13:84:4c:6b:91:35:43:48:b6:e1:34:7f:d1:8f:02:
         4b:87:5b:4a:af:d6:8a:02:1e:49:82:9b:6b:c5:d9:59:6d:f5:
         41:75:df:f7:27:49:70:be:fa:b2:aa:9c:74:9d:61:c4:68:f7:
         7c:40:83:ee:74:5b:db:e6:06:6b:e2:83:ed:65:39:ae:ba:4e:
         ac:6c:e5:e0:80:d7:dd:58:4d:17:18:e7:00:8d:49:75:c0:42:
         ef:b5:45:e8:83:ce:dc:ec:b5:33:a1:4d:9a:62:b3:15:ba:94:
         9f:57:9f:1e:96:23:7d:e7:37:da:bb:cb:11:c4:4e:c4:d3:28:
         5d:fd:52:2e:e5:4d:cf:82:79:f3:3e:eb:81:ab:b1:d5:7c:6e:
         48:03:98:c0:8e:16:f2:02:b5:f6:ec:d8:06:64:32:29:30:ed:
         f5:5f:62:bb:21:31:ce:0a:2c:58:83:e4:f8:6e:25:47:62:f5:
         d3:7f:23:48:85:28:5f:f4:d9:54:4e:82:ce:c7:90:a0:1d:91:
         15:3f:63:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:48:51 2025 by rpki-client