Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2da97da-9f52-3269-b02d-ae5684bc41ad.roa
File:                     e2da97da-9f52-3269-b02d-ae5684bc41ad.roa (raw, json)
Hash identifier:          R0NvAi00GOwMU29PdJ8LSjNGxDRWMTRFyuMuf1RTLZA=
Subject key identifier:   A3:09:F4:BC:C9:BD:96:29:ED:26:E2:28:63:95:BD:38:12:DA:42:53
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EDA52AF31743CCA8684D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2da97da-9f52-3269-b02d-ae5684bc41ad.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        2603:3005:6600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:a5:2a:f3:17:43:cc:a8:68:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=cb0b3628-d76f-4b93-afc8-1b9e3b8e19b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c9:f1:7b:e8:3a:8c:93:2e:aa:1e:13:e9:75:
                    bb:80:46:04:65:00:98:b9:c2:1c:57:7d:57:c7:54:
                    9d:96:14:64:24:99:94:86:ca:3a:73:35:2c:68:4b:
                    39:ab:2f:2e:ff:9c:1c:32:0a:7f:cb:1f:df:5d:72:
                    f5:dc:1f:6e:1a:19:f4:3a:94:06:b0:74:96:ce:25:
                    1e:93:b9:5c:df:fe:fa:22:e4:e2:9a:df:0d:a2:c2:
                    1f:df:96:7a:e1:dd:ac:fe:3e:31:98:1b:d0:7f:2c:
                    af:06:5a:6d:1f:97:09:d4:e3:ce:45:0e:53:5c:89:
                    3b:90:0a:74:88:fc:ac:47:e3:56:a7:f7:db:97:d6:
                    42:5b:a4:77:e6:d2:5f:da:6f:66:c8:c7:fc:2a:9f:
                    0a:85:10:52:c6:66:12:0a:b6:33:cd:6f:85:d1:c2:
                    c8:4c:2a:66:15:51:ff:d9:8b:d9:d2:ff:0b:d6:2e:
                    ea:86:0b:ba:f3:f7:78:f2:2d:3d:57:e2:7f:c7:f2:
                    aa:e0:08:53:09:08:91:44:f0:b6:48:40:64:61:36:
                    ea:7f:42:49:bd:8d:f0:0b:77:4e:09:fe:4e:42:d3:
                    ca:8a:c5:04:38:c2:0d:81:47:6a:bb:b0:61:66:31:
                    21:d6:30:ab:3b:1e:5e:d8:96:fa:89:17:e9:bb:06:
                    ff:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:09:F4:BC:C9:BD:96:29:ED:26:E2:28:63:95:BD:38:12:DA:42:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2da97da-9f52-3269-b02d-ae5684bc41ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3005:6600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:47:2d:86:2f:17:55:c7:be:b0:da:13:51:98:ec:02:8b:39:
         8a:60:4b:e6:e8:f9:fc:a3:80:4f:d8:97:49:d2:35:b8:94:2c:
         86:e4:ca:d6:92:bc:9b:14:43:ef:d1:c5:85:03:f9:a9:00:b7:
         16:09:7b:87:51:fc:c7:fc:39:99:8a:e6:a8:5e:7b:99:ff:40:
         44:ec:20:a1:64:58:26:f2:7a:d0:fd:68:bf:25:7f:df:b3:b7:
         95:68:a3:d6:1f:27:63:25:8a:bd:eb:fd:d0:fb:f4:26:3a:9d:
         78:fa:5e:70:af:b8:0d:cf:55:15:ce:f6:20:f6:15:cf:32:74:
         db:5d:3d:e8:11:e3:5d:fc:f2:50:b9:0e:9b:de:2d:ca:09:fc:
         6b:f6:2e:8a:98:99:6e:31:90:37:f0:67:73:dc:ac:f3:a7:68:
         03:bd:46:99:6c:d6:e9:95:34:cb:d1:f1:af:f4:05:8f:11:9d:
         2c:72:01:14:f6:8d:ba:6c:aa:b0:92:50:ca:6a:8d:51:86:29:
         4e:02:5b:cf:b5:c6:f3:a8:d3:57:a9:35:7a:6b:d6:8a:5c:35:
         37:a5:fb:18:42:9a:99:c8:0b:92:fd:27:9e:0d:6e:90:90:c9:
         93:c2:eb:ea:bd:53:05:e4:8a:8d:e0:be:80:37:6e:1e:95:81:
         76:c2:80:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:05:31 2025 by rpki-client