Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/a44ab146-ae43-36a6-b4b2-83e67bf89a08.roa
File:                     a44ab146-ae43-36a6-b4b2-83e67bf89a08.roa (raw, json)
Hash identifier:          6LBIsLws8fa9gPB4hBfDf7m9bbluZl3khAEsmUoCvrM=
Subject key identifier:   35:35:34:24:41:E8:27:DE:C3:62:8D:02:67:D6:F4:46:96:18:93:F8
Certificate issuer:       /CN=1a767fb3-0911-435a-a3a4-189b82622157
Certificate serial:       010D0C9F4328584A8CAFC3BC5B3CAF5FB52DD800
Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/a44ab146-ae43-36a6-b4b2-83e67bf89a08.roa
Signing time:             Thu 17 Jul 2025 15:08:04 +0000
ROA not before:           Thu 17 Jul 2025 15:08:04 +0000
ROA not after:            Wed 15 Oct 2025 15:08:04 +0000
asID:                     400919
IP address blocks:        2602:817:2005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:af:c3:bc:5b:3c:af:5f:b5:2d:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157
        Validity
            Not Before: Jul 17 15:08:04 2025 GMT
            Not After : Oct 15 15:08:04 2025 GMT
        Subject: CN=55ea5e4a-67d1-4d64-a791-9b3016e6bd47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c3:c2:a5:03:18:96:0d:27:f4:8d:8f:87:21:
                    b2:80:15:01:fc:b3:a4:9f:8b:23:ac:fe:e2:c0:d8:
                    c2:7b:b0:92:d1:36:a1:21:72:80:fa:e4:73:e6:e1:
                    9b:f3:e2:25:3a:04:af:64:f1:f2:55:ea:81:55:d2:
                    1c:11:ed:62:76:6f:25:ba:12:38:c4:76:81:bb:42:
                    5a:fc:fe:c1:fa:4a:da:29:45:6e:e0:82:57:b8:85:
                    a8:6d:cf:d0:e7:96:fa:a6:10:a8:5d:70:74:ae:e7:
                    9d:68:21:89:18:97:44:a5:bb:4f:e0:0b:64:21:1e:
                    24:81:48:ff:6b:7f:46:78:0e:4f:42:cd:c2:03:d7:
                    a6:ad:10:44:83:ac:e4:24:40:47:45:28:10:c4:79:
                    a7:d8:fc:f7:0a:f2:66:53:6a:02:76:87:8c:ce:bc:
                    58:b9:da:6d:59:a7:08:63:14:9b:16:8a:68:6b:9c:
                    f3:22:e6:5f:19:ef:5e:bd:6c:7e:89:13:41:f7:e1:
                    7c:de:4a:f5:e2:e8:b6:32:0e:4f:f3:87:28:61:a3:
                    1d:4b:49:15:1b:5d:c4:e5:28:b8:05:c4:c0:7a:e3:
                    21:f9:94:bb:5e:16:9c:be:a3:9a:98:e0:bd:b8:70:
                    07:1b:5a:24:38:f2:b5:ff:d5:8a:84:6f:25:db:7c:
                    a6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:35:34:24:41:E8:27:DE:C3:62:8D:02:67:D6:F4:46:96:18:93:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/a44ab146-ae43-36a6-b4b2-83e67bf89a08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl

            X509v3 Authority Key Identifier:
                keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:2005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e4:00:fa:c6:20:bb:35:27:50:6c:1c:1d:e1:a5:d9:d3:79:
         c0:bb:d3:54:a7:8a:8e:77:d2:d2:d9:dd:40:5c:2a:a2:88:cc:
         3d:7e:96:65:b9:4a:26:59:50:23:d9:8d:d7:3a:05:76:fb:38:
         6e:b3:4b:51:cc:aa:09:b1:60:1d:10:c0:4a:ea:b1:c7:bf:f0:
         89:40:4c:12:46:84:28:fa:63:b7:ee:8b:e2:55:e1:50:e5:b4:
         a4:f1:29:7b:16:a7:08:c5:9a:73:0d:0f:66:4d:3e:fe:99:49:
         ea:d1:70:f1:89:e2:f1:da:1b:57:e2:76:48:50:7c:f5:45:34:
         a6:25:08:88:57:e9:68:1d:52:5e:0d:06:bc:00:f6:30:4d:3f:
         14:cc:5a:b1:b7:b1:af:7d:20:ae:3c:79:48:75:c5:18:f7:ca:
         54:f5:d3:34:f0:d2:8a:1f:53:4e:1f:90:43:a0:42:8c:52:41:
         b1:76:1e:35:c5:5e:0f:13:44:fe:0d:39:8a:e9:09:17:f2:ad:
         58:dd:56:03:00:e6:59:34:dc:50:a8:33:d9:ea:d7:39:37:63:
         b2:c6:e4:b2:a4:b8:5c:31:e7:46:d6:89:a5:e0:c1:2e:2a:c6:
         c8:db:cd:bf:31:49:ff:87:82:9e:ff:3a:aa:4f:00:0b:85:fa:
         8b:31:0c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:26:59 2025 by rpki-client