Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/9ae0641d-b943-3842-bbf8-8eb56b10806b.roa
File:                     9ae0641d-b943-3842-bbf8-8eb56b10806b.roa (raw, json)
Hash identifier:          61jetAXqkjodTdRmksDq8Y/eR5uf7ODJdHrxXNLexUA=
Subject key identifier:   85:84:D8:D4:51:D0:37:CD:0B:A7:01:44:C4:B9:3C:0D:3D:78:67:BA
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584AAB2661207BADFE9DB487A800
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/9ae0641d-b943-3842-bbf8-8eb56b10806b.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     63023
IP address blocks:        2607:a140:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:61:20:7b:ad:fe:9d:b4:87:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=3f49a53e-3c5e-4f46-a710-00d4e4bc74d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:01:f3:48:85:28:98:b5:b6:db:48:71:11:
                    8f:49:a3:76:9b:93:1c:1f:2c:68:f7:a1:1d:7c:72:
                    50:61:7e:39:46:10:02:49:e6:39:25:3a:66:0f:36:
                    24:31:e6:45:b8:8d:9d:ae:8a:8e:c5:09:89:b7:36:
                    22:ca:5e:10:0f:b3:6b:11:9e:31:83:f4:79:d0:3d:
                    4d:0a:f2:06:ba:61:e2:69:5e:4e:44:34:94:99:a7:
                    46:9f:66:0a:11:b9:f3:19:a3:59:e2:ab:ca:5e:48:
                    5d:43:e6:53:e5:e2:8f:02:1a:6f:71:61:b5:8b:3f:
                    11:a8:1c:c3:bd:c6:ce:a6:c0:14:48:16:f8:8a:07:
                    04:41:5e:d5:83:70:80:89:a0:47:9d:5e:45:19:23:
                    e7:c7:4f:58:2d:b2:8f:d2:88:bd:59:1e:ba:b6:64:
                    0c:ad:cc:ad:91:9e:53:43:e6:64:a0:13:06:c3:bd:
                    e6:90:04:6d:38:57:a5:39:de:af:0c:32:b5:ef:c6:
                    9e:d6:f4:6c:cc:55:91:50:8c:fd:57:2c:3b:7a:7d:
                    e3:91:af:d7:10:1f:f6:d4:4c:f4:27:97:46:13:dd:
                    22:58:81:93:38:44:15:bd:9d:1a:cf:7d:d5:da:73:
                    2f:03:ee:d1:cf:56:36:68:85:44:0b:ef:f5:07:2f:
                    61:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:84:D8:D4:51:D0:37:CD:0B:A7:01:44:C4:B9:3C:0D:3D:78:67:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/9ae0641d-b943-3842-bbf8-8eb56b10806b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:66:fd:fd:3b:e9:0a:d2:db:f5:01:c6:00:4d:8a:c9:e2:b8:
         65:e6:df:55:ec:bb:6b:d6:0e:5d:90:ba:dc:74:6d:b2:3d:6c:
         19:a0:09:e0:cd:ce:16:05:f5:7d:e8:cc:24:ee:05:bd:26:7e:
         37:e8:79:81:88:e7:c3:fc:b4:ca:a1:f5:48:cc:29:61:ba:19:
         4b:39:20:54:ed:1d:f2:17:66:66:7f:4e:75:1b:a7:d4:a2:f3:
         12:67:b0:94:0c:56:d8:af:cd:c9:9a:35:4c:ee:36:30:4b:a5:
         4a:55:ef:e0:a8:d4:4a:17:b1:26:e2:2e:3d:f6:1a:ae:34:85:
         bc:5d:29:1e:1e:fd:8b:e6:93:74:5d:48:64:55:81:1b:9c:23:
         6e:c2:1b:ba:97:1e:e3:21:11:02:4b:43:7e:d7:28:29:b8:31:
         1d:9e:6f:61:d4:04:17:5b:0a:0f:f1:b3:a2:f7:23:42:0d:e0:
         5e:d0:71:1f:ed:b4:ee:41:39:73:f7:6f:92:12:52:01:7f:2e:
         c0:25:b6:cc:14:11:03:00:1b:51:84:d8:99:ef:a4:f8:08:bd:
         36:f6:3f:c0:db:68:82:94:ee:eb:06:dd:a3:65:8f:d8:af:78:
         9d:22:be:c1:ed:b3:7a:2c:de:6d:cd:03:e3:2c:f5:b3:8d:51:
         d9:92:c8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:50:08 2025 by rpki-client