Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/4614d0d2-f8ee-3ab8-9354-5cb1d0f0fa04.roa
File:                     4614d0d2-f8ee-3ab8-9354-5cb1d0f0fa04.roa (raw, json)
Hash identifier:          Ziefjnn8g3OetX4yhFxsnzv5RA9oFsTiXMuROsJBilA=
Subject key identifier:   01:CD:1C:AE:12:86:D8:8C:6D:E0:78:CB:BC:1D:8E:B1:98:8E:60:9B
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584AAB26616FA8D2355C10B34F80
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/4614d0d2-f8ee-3ab8-9354-5cb1d0f0fa04.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     63023
IP address blocks:        2607:a140:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:61:6f:a8:d2:35:5c:10:b3:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=27de10d3-4684-476c-a2ce-a6d1182d6df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e1:74:d8:8a:78:db:98:2b:7b:a7:29:2d:80:
                    06:92:6b:25:17:e5:1b:00:48:4d:67:cf:99:c1:e7:
                    b5:9a:78:f9:cf:f5:60:c4:8e:95:d4:2f:5d:0b:36:
                    eb:5e:51:5a:4a:d5:40:9a:09:c0:8b:9b:3a:ac:ee:
                    c5:7f:24:62:dd:1a:85:66:5a:ab:3d:24:cf:bf:8d:
                    5d:12:a8:80:5d:68:32:54:9c:17:61:c9:51:6d:c0:
                    6e:a1:b8:6c:29:bf:d8:0d:0d:cb:3c:ba:d7:66:7f:
                    33:36:cf:0d:7a:5f:de:70:8a:cc:d3:53:fe:f1:2d:
                    60:33:59:f1:ee:db:91:45:a2:9a:b1:62:8e:bd:eb:
                    61:49:2d:71:6a:82:0d:6a:ae:91:43:da:56:aa:31:
                    f8:05:e4:b0:f5:a9:96:b1:c4:f0:76:2a:8b:d5:ee:
                    f5:b1:84:12:ee:39:cd:d9:16:d7:31:3d:7f:53:8c:
                    4b:a9:79:54:7f:19:98:5e:00:fb:be:78:26:36:9d:
                    8e:3a:fc:19:b4:02:35:a1:08:d0:5d:f2:96:b2:40:
                    60:45:4a:f4:45:fb:6d:42:6d:68:29:38:9b:30:2e:
                    98:ce:32:fc:af:96:89:5b:ae:93:82:d6:bd:23:b9:
                    cb:21:e7:62:b4:6d:53:3b:4f:02:98:12:bb:ee:49:
                    14:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CD:1C:AE:12:86:D8:8C:6D:E0:78:CB:BC:1D:8E:B1:98:8E:60:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/4614d0d2-f8ee-3ab8-9354-5cb1d0f0fa04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:65:6f:d0:dd:29:e5:89:12:d9:a4:0a:9d:cd:59:bf:a8:04:
         86:0e:de:87:b0:99:0e:87:f9:9a:0f:b5:fe:9d:c2:b8:8e:b4:
         3d:c0:3f:19:61:89:3c:a0:2b:6a:74:f4:58:03:f0:94:3c:45:
         76:af:ef:f8:7d:a5:c1:57:dd:87:ce:6e:23:e7:12:37:07:5b:
         8d:23:de:00:5d:ad:f1:8d:c3:1f:55:0e:e7:8d:4a:96:0e:e6:
         9a:66:b7:34:e2:b4:a0:58:93:ec:4f:ab:47:3f:07:f2:88:b4:
         23:d3:94:41:8a:f8:f4:fe:65:71:a9:8f:f3:d2:5a:d5:74:f4:
         47:76:a8:4c:19:57:07:84:e0:94:ee:da:0e:8d:86:3c:a3:43:
         46:77:0c:49:13:28:90:9f:f9:2a:27:6c:40:ac:bc:16:5b:2f:
         5f:ff:d0:2f:5f:55:e4:f5:95:76:b2:13:10:4a:a8:b3:8c:86:
         0f:85:2e:79:a5:57:4e:0f:2e:89:05:1b:83:b9:aa:ce:f5:2a:
         4e:49:0a:e5:9e:a8:95:3d:90:f6:79:fe:9e:09:81:4c:41:11:
         24:53:55:a8:b4:01:d2:c0:b9:7c:26:e5:e8:3a:23:d2:f1:88:
         83:02:e3:e2:b9:bc:42:8c:0d:c1:4d:49:3f:82:26:6b:8d:91:
         eb:6c:e8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:56 2025 by rpki-client