Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ead1ae72-d305-3cce-b540-56f062e645b1.roa
File:                     ead1ae72-d305-3cce-b540-56f062e645b1.roa (raw, json)
Hash identifier:          1fSsq/dLkc38xKxQWkvVdamKAquMP7WM4y9BYXSqoAo=
Subject key identifier:   52:0A:79:CA:E0:47:9C:50:6A:86:87:29:32:7D:DF:19:44:A4:15:A3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB220EBA6EF6E7D6AD6880D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ead1ae72-d305-3cce-b540-56f062e645b1.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     7016
IP address blocks:        2601:989:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:eb:a6:ef:6e:7d:6a:d6:88:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=a8c1a0b0-4a13-4ea9-9248-2373aa9c9256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:cd:38:c3:0f:0e:39:4d:e8:c9:7a:79:b1:
                    e9:7d:65:92:c9:90:df:01:aa:f0:b8:1b:31:f4:bd:
                    24:4c:65:08:e3:18:88:90:c4:27:db:25:11:68:36:
                    4a:ff:02:a2:73:98:af:d8:f6:41:6c:57:94:4c:5f:
                    66:3e:fd:10:82:58:1d:6c:fb:5e:35:9a:24:34:d8:
                    3b:78:db:e2:ac:6e:6a:63:3f:0f:26:63:4e:dc:af:
                    01:2e:a5:63:cb:2a:2a:93:31:ba:a7:7f:86:60:ce:
                    91:da:ca:70:f1:56:75:56:45:1f:a9:60:61:4f:22:
                    44:df:30:aa:66:d0:ee:6c:c5:17:91:b7:2a:ea:7e:
                    92:39:b8:9c:a5:50:ef:33:92:f8:01:aa:cd:7f:c3:
                    85:59:57:66:60:e3:c3:df:ff:07:30:bd:e9:aa:a4:
                    11:f1:ab:99:56:6e:e2:96:85:9c:ea:8d:46:da:32:
                    a7:69:27:f5:4b:19:5c:6d:fd:c2:b8:56:a0:12:22:
                    a1:b5:b4:bd:d8:29:c3:e3:8e:bf:ac:0a:bb:1e:1e:
                    58:d5:50:9b:e4:c0:8a:56:97:a2:19:a5:71:16:20:
                    bc:5f:b5:1e:c4:99:3d:bf:12:ae:71:40:48:af:27:
                    59:c4:e5:e8:88:83:26:25:48:81:61:93:32:af:af:
                    1e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0A:79:CA:E0:47:9C:50:6A:86:87:29:32:7D:DF:19:44:A4:15:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ead1ae72-d305-3cce-b540-56f062e645b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:989:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:0d:e8:2f:76:63:36:79:35:c7:08:63:a7:45:72:38:bb:11:
         5d:ef:92:83:3f:18:4a:c1:a8:ad:26:f6:9b:f4:df:32:48:32:
         84:92:87:14:14:96:db:86:a5:59:9a:59:b0:86:7e:f5:4a:b9:
         78:59:8b:11:85:0d:4a:ec:c0:c8:07:26:5b:57:1e:9f:16:4c:
         21:6d:50:bd:64:53:57:33:03:d3:3d:2d:63:80:ec:4a:76:50:
         8d:7a:8d:98:b8:fe:d0:43:03:ae:f7:4f:ec:a5:a1:e6:2f:5b:
         20:21:7a:ac:93:20:6f:c4:5f:a8:ea:51:e8:85:ac:58:95:bc:
         f9:20:b5:9e:86:e5:9e:c7:ea:67:b0:c9:48:70:59:62:78:6b:
         f0:79:a0:b1:55:6f:28:73:81:e7:8e:10:ec:f7:25:d2:f8:6c:
         a5:65:10:a8:c0:99:04:0c:4a:c7:b4:54:b1:b4:2e:dd:4b:96:
         11:2a:a3:bc:8d:c9:62:59:9c:bb:f6:c2:43:8d:5c:87:85:31:
         35:89:06:a2:27:ed:7f:b7:3c:f7:52:32:b2:a3:85:5b:06:c7:
         32:1b:1e:df:95:f5:86:61:6f:5b:53:ce:8e:04:df:80:62:db:
         e4:94:e0:9b:0f:5e:f1:2e:fb:09:0e:b4:3c:1f:76:7d:8d:88:
         22:24:b5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:07:20 2025 by rpki-client