Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/50ed8739-975a-3a90-9381-8342f4d01a7b.roa
File:                     50ed8739-975a-3a90-9381-8342f4d01a7b.roa (raw, json)
Hash identifier:          wfuyyIPXP8PoyYF1WFn6F0KhsNLdQi8kUXgp8Z7x3QQ=
Subject key identifier:   0A:5F:96:B7:F2:2D:A0:4B:6A:88:39:CA:53:17:1C:5D:77:F1:8C:BB
Certificate issuer:       /CN=d2294e65-4da1-4c07-9bc0-820cdb1e2c48
Certificate serial:       010D0C9F4328584A9FFBA21814958A04CFE85200
Authority key identifier: A2:FA:26:93:6E:E2:D1:F0:D6:4F:44:71:93:66:33:0D:F3:27:A1:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/50ed8739-975a-3a90-9381-8342f4d01a7b.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     2552
IP address blocks:        2606:fd80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a2:18:14:95:8a:04:cf:e8:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2294e65-4da1-4c07-9bc0-820cdb1e2c48
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=5c6f87f0-f7d7-4246-bc06-2d41201a385e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2f:aa:98:79:60:ef:8f:8f:d9:e9:02:f7:98:
                    28:75:2d:ec:b8:c5:30:cc:8e:ea:db:72:cc:7d:34:
                    4d:1d:81:3e:ba:dd:99:b8:21:6d:2e:03:08:c2:ec:
                    b0:6f:77:04:32:c0:2d:c7:c9:95:49:30:1d:9d:ef:
                    14:b2:11:e2:02:f7:8e:b1:9c:c4:13:dc:fe:6f:d0:
                    38:09:6b:61:5c:d9:95:ca:1e:0a:df:de:39:e0:30:
                    39:6d:d4:fc:1a:bb:f3:50:0b:a1:e5:3b:51:32:59:
                    cd:8c:18:b2:ef:9e:9c:56:f8:93:26:76:d5:f2:03:
                    43:13:f4:23:b3:61:d2:04:ae:4e:56:47:da:ed:31:
                    85:51:3d:42:ea:da:8a:48:53:b9:49:39:90:e9:bd:
                    1e:5c:c1:b3:27:04:83:7e:26:2c:42:9d:a1:1b:22:
                    3c:f1:d9:e5:46:27:bb:ac:31:fb:d2:ca:05:0a:17:
                    ed:c1:aa:c0:11:bc:48:24:aa:96:e2:b3:83:5f:70:
                    6d:13:9e:8f:de:6a:4d:75:26:5f:b0:07:fa:ac:4d:
                    e2:6f:45:18:40:d9:86:26:9a:71:66:3e:41:87:55:
                    8a:52:6b:02:6c:be:75:db:a7:76:19:4d:02:23:c6:
                    f2:3c:e1:cb:88:a1:c6:39:da:48:fc:2f:ae:8e:3b:
                    54:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5F:96:B7:F2:2D:A0:4B:6A:88:39:CA:53:17:1C:5D:77:F1:8C:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/50ed8739-975a-3a90-9381-8342f4d01a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.crl

            X509v3 Authority Key Identifier:
                keyid:A2:FA:26:93:6E:E2:D1:F0:D6:4F:44:71:93:66:33:0D:F3:27:A1:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fd80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:5f:af:00:f9:0d:16:8e:ae:ff:75:29:61:6b:21:94:d4:5f:
         04:f3:b0:29:17:09:fc:84:8e:de:15:05:ea:27:e9:f0:95:7b:
         9c:9c:da:da:a9:dc:32:14:3d:4f:84:90:67:86:29:f3:13:db:
         41:86:1f:57:2d:d3:2e:b1:27:5c:f2:b6:b7:2c:f3:be:3c:8e:
         36:51:d9:2e:31:a5:12:1f:c7:d3:0d:67:be:aa:07:1f:bf:5a:
         c2:a4:01:5d:24:96:5f:0f:1b:e8:40:af:68:ba:62:ab:25:2c:
         5d:a1:12:32:04:c2:f4:85:cd:1e:b6:d9:71:0f:f5:89:68:5d:
         9f:63:9f:e6:86:64:43:b8:b3:ee:43:d1:73:9c:e3:88:a4:0e:
         60:e0:1f:20:08:8a:f8:51:b2:98:24:de:1a:c8:ff:1c:cf:43:
         73:a6:72:86:f7:14:9e:7c:35:92:a2:ee:5a:ae:0e:43:61:74:
         44:40:8b:76:a1:63:04:3f:51:4f:2c:38:f2:0b:0d:9d:f4:79:
         6f:a5:5d:60:b5:a3:31:83:04:63:b1:c4:ac:79:fa:40:40:f5:
         bc:f4:70:50:43:21:ad:87:13:8c:79:01:74:1a:3c:db:58:8b:
         a9:a9:72:f0:83:d5:a9:f9:0e:0b:e1:2f:94:92:68:28:25:d9:
         91:87:2a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:22:54 2025 by rpki-client