Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/eca1e3e0-dd49-3b73-b53c-4bd48f84dfd2.roa
File:                     eca1e3e0-dd49-3b73-b53c-4bd48f84dfd2.roa (raw, json)
Hash identifier:          xxZLwajhc88Z9OY5SxwMyy/omo90HTw3m3JmJj91x0A=
Subject key identifier:   30:51:BA:4D:2D:0A:CF:1B:E3:19:EF:01:50:F7:54:F2:2F:50:D3:28
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584AA6F62B897A6FB934912E6B80
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/eca1e3e0-dd49-3b73-b53c-4bd48f84dfd2.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     20773
IP address blocks:        2603:5:2100::/40 maxlen: 48
                          2603:5:2200::/40 maxlen: 48
                          2603:5:2f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:2b:89:7a:6f:b9:34:91:2e:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=ed751483-3fa0-4e8f-b4e6-88de04c53d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:29:14:88:5c:fb:29:21:c7:40:48:d8:92:62:
                    f5:6f:91:c1:15:24:b6:d4:61:2b:39:44:30:6f:a1:
                    ee:ae:02:c2:78:83:b2:7a:92:bb:f0:ba:7f:d7:0a:
                    0d:98:cb:f0:75:ff:39:a8:8d:61:84:46:41:ff:35:
                    a4:6b:e2:3c:59:1d:44:d8:85:e3:e0:b3:9e:35:ed:
                    79:05:74:de:71:47:af:0d:9f:06:ef:97:0e:81:03:
                    b9:83:7f:9e:1c:88:24:ce:ec:dc:72:53:31:1a:bc:
                    12:bb:d6:61:e9:3c:43:ae:bb:0e:63:0d:2e:55:05:
                    8a:8b:6c:f8:8c:58:8c:6c:76:4c:bf:a4:83:ed:dd:
                    b1:ff:0f:79:e5:4a:1d:82:31:62:f6:2a:08:96:fc:
                    b6:35:e9:c1:14:69:ea:30:15:42:19:b4:fb:6d:26:
                    70:5d:97:f1:a7:2f:83:bb:3e:e8:97:b0:db:df:ad:
                    fd:af:45:11:ef:b7:e7:dd:d3:21:75:93:1d:6a:32:
                    c2:97:55:c0:e7:70:c6:a3:bc:1c:1e:e8:95:0b:fb:
                    73:a4:d0:22:21:31:3a:c2:fc:9e:ec:34:93:be:78:
                    de:d0:a7:04:18:09:50:3d:e2:f8:2a:7f:e6:03:3a:
                    74:15:5e:02:e9:cc:48:a2:d2:53:e2:f5:0d:53:31:
                    e0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:51:BA:4D:2D:0A:CF:1B:E3:19:EF:01:50:F7:54:F2:2F:50:D3:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/eca1e3e0-dd49-3b73-b53c-4bd48f84dfd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:5:2100::-2603:5:22ff:ffff:ffff:ffff:ffff:ffff
                  2603:5:2f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ff:20:dc:4b:a4:5d:2d:d6:bb:38:91:c1:fb:0c:53:53:33:
         64:3b:cd:62:36:3a:21:0b:2d:51:57:c8:b5:d3:36:bc:c8:bb:
         8b:9b:a4:87:09:3b:2f:d6:2f:c5:62:c8:30:72:62:2f:01:9f:
         be:96:5b:4b:eb:36:ac:44:db:cb:6d:f9:03:1b:8d:74:54:04:
         b6:9d:99:59:bc:38:dc:da:c6:44:f4:17:2b:99:f2:8a:cd:41:
         9e:b4:86:e0:49:76:0e:bd:07:b5:de:83:9b:74:29:a9:69:b8:
         0b:83:63:04:f6:8f:e3:98:9b:67:c0:81:a8:92:81:58:0c:c4:
         d9:4d:a3:60:af:bf:da:53:9f:c7:99:48:e2:cb:37:eb:e5:b4:
         76:58:a8:1e:07:fd:d4:3d:b3:d6:24:f9:3a:25:88:41:43:b5:
         21:ff:79:db:97:1e:eb:e3:50:38:13:45:c6:2c:0d:7f:a0:ac:
         96:68:49:bf:4a:93:bb:29:fe:bf:ae:8c:53:91:82:7a:09:d6:
         aa:e7:a0:cf:7a:f0:40:a9:fa:3d:b4:c1:2b:07:07:98:8d:6c:
         1b:62:05:ff:7f:7f:73:33:e4:45:75:2e:c0:56:c2:4a:65:39:
         58:7d:f9:96:76:60:de:85:47:5c:bc:56:db:c7:bb:e5:d1:82:
         3e:48:98:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:33:19 2025 by rpki-client