Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/4f84b05a-ec64-3df9-b442-827939e56648.roa
File:                     4f84b05a-ec64-3df9-b442-827939e56648.roa (raw, json)
Hash identifier:          BpMtFaGlL4i86rzjRpqW51lP1Q3zAT3DQZHLaIimj14=
Subject key identifier:   38:23:A1:18:E7:A6:77:94:68:11:F8:68:8D:DA:47:BA:1D:8E:8F:D4
Certificate issuer:       /CN=c0ae1cff-309c-40d1-9760-3a89a481e998
Certificate serial:       010D0C9F4328584AAB265AC8E55BA31030B42700
Authority key identifier: 3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/4f84b05a-ec64-3df9-b442-827939e56648.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     14907
IP address blocks:        2620:0:863::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:5a:c8:e5:5b:a3:10:30:b4:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ae1cff-309c-40d1-9760-3a89a481e998
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=f88ff9a8-72ba-48df-9621-a4dcd91f2e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:83:a6:ef:e0:5e:52:1a:78:e8:c5:c4:47:e9:
                    cf:4c:db:ae:a8:8a:7c:61:e3:9f:5e:21:a7:09:16:
                    bf:30:37:e8:45:b6:c0:1e:e7:d6:42:56:de:9a:bf:
                    e5:7b:49:31:07:9f:cd:01:80:9c:24:aa:0b:1b:1f:
                    8d:2e:ea:68:81:d0:05:71:58:34:50:be:05:9e:cf:
                    b2:e2:64:d3:f2:82:1e:d2:f0:08:84:bb:cd:e8:e6:
                    74:8b:85:c2:6c:95:63:6a:b9:f8:58:a6:d0:10:d1:
                    4b:d6:8f:20:0f:85:4b:cb:d1:c6:d2:e4:6f:0b:e4:
                    bf:79:a0:ed:38:0e:d3:59:65:79:ec:ee:b5:ff:42:
                    cf:ec:e3:70:6a:2c:02:bb:82:d1:46:23:40:02:a3:
                    72:e0:74:32:8b:62:63:42:6a:d5:50:36:71:80:42:
                    25:dc:25:b2:3c:58:b3:aa:95:5f:df:9f:f0:b1:6e:
                    a5:c3:fe:b0:8b:37:22:ab:3e:c5:a3:77:6d:51:ae:
                    75:a8:d8:50:ab:f0:7e:e3:52:11:ee:6b:b0:8f:35:
                    ca:ee:56:2c:da:0c:b8:2c:23:9a:5d:10:28:37:ff:
                    64:46:f6:cd:43:d1:a7:ab:ee:b8:4c:c6:e7:a4:12:
                    a8:65:eb:2a:0e:05:fc:a4:d1:da:3a:d6:a0:67:be:
                    40:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:23:A1:18:E7:A6:77:94:68:11:F8:68:8D:DA:47:BA:1D:8E:8F:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/4f84b05a-ec64-3df9-b442-827939e56648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl

            X509v3 Authority Key Identifier:
                keyid:3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:863::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:56:fd:2c:34:d1:fd:5e:8a:b2:f9:fc:de:47:9e:fc:24:e4:
         7d:d6:03:41:99:96:f1:b3:ce:17:97:21:b4:06:e8:b1:96:93:
         2b:8a:23:4c:d5:e7:28:14:c0:38:03:4d:2c:45:53:49:f4:74:
         13:61:b2:96:00:2a:c7:aa:6c:9d:af:58:ad:46:35:a7:ff:70:
         c1:fd:d8:77:b1:1f:7b:68:4a:28:bc:cd:5b:bf:0c:3d:75:dd:
         94:c4:74:7a:95:bb:e6:5b:07:f6:8b:19:82:29:33:a5:76:e9:
         bc:76:df:e7:2e:83:a4:dc:95:ab:3e:e9:2d:4e:a7:e2:1d:ba:
         da:48:ea:f9:2d:b2:ec:46:40:66:38:6a:5b:6b:33:6c:f1:14:
         c7:46:f0:28:7f:24:14:0a:a8:3c:93:81:1b:b1:85:c4:ed:ac:
         aa:2e:68:9f:a2:42:78:7a:62:ad:d6:75:58:2d:1e:5d:e5:23:
         b1:a3:10:7e:d4:67:6a:53:a1:42:78:6b:b2:76:f1:e9:54:95:
         bc:fd:02:65:3c:bb:aa:49:05:73:79:2e:1b:2e:b3:14:bf:49:
         ac:76:38:00:db:fb:45:14:4e:d5:89:de:cb:3a:17:d2:39:c2:
         0d:c7:88:fc:36:72:ad:09:23:43:06:a5:64:09:33:40:2c:5a:
         02:c4:b2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:03:04 2025 by rpki-client