Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/4d1f008f-67a9-308d-9f82-30e56f078c23.roa
File:                     4d1f008f-67a9-308d-9f82-30e56f078c23.roa (raw, json)
Hash identifier:          eHau6AOP+7V5JDhUO8hJOVqA/1aGYrclDYywPrAVP6Y=
Subject key identifier:   31:6C:D8:B8:FF:48:51:EE:9B:3D:5E:C0:BF:15:4A:52:3A:D9:B4:4E
Certificate issuer:       /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial:       010D0C9F4328584ABD4B91BA21843D730F94EB80
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/4d1f008f-67a9-308d-9f82-30e56f078c23.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     30690
IP address blocks:        2602:f99b:a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:91:ba:21:84:3d:73:0f:94:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=8f701bb3-43e6-4e4e-b924-5057f5cbf48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5a:05:ed:a9:cf:27:68:06:ed:aa:39:22:66:
                    61:1b:cb:c9:9f:ae:78:88:6a:1d:ee:0b:3a:1b:f6:
                    50:07:d3:88:c9:d3:7b:22:dd:5f:37:2f:8b:19:b2:
                    3d:a5:32:3d:da:a3:2b:fe:cf:92:f7:2f:e5:7e:27:
                    35:8a:96:a4:d3:b1:6c:88:ec:94:fa:11:ad:d2:49:
                    96:f0:f4:21:ca:73:24:05:d3:30:75:11:f9:4b:bd:
                    91:8b:89:3f:70:23:da:9d:d5:65:44:ed:76:e8:1e:
                    33:78:9d:82:d6:34:6a:f1:f6:ff:6f:d3:3b:a5:f7:
                    50:24:fd:eb:2b:f5:92:a2:e3:4f:d1:e6:cd:3e:1a:
                    7e:70:9d:82:4c:52:d2:24:c5:b9:9a:08:33:76:9d:
                    0a:b5:af:63:d5:d7:0c:05:e1:23:2b:4b:4c:c1:c7:
                    9d:dd:75:73:66:13:82:95:47:4e:b8:53:63:15:76:
                    cf:c4:16:89:78:a3:7b:76:d1:2e:a6:f9:74:fa:83:
                    6a:02:1d:3e:90:0b:3f:f8:f2:de:e6:95:e2:44:1a:
                    4e:02:4a:6b:26:c2:89:8d:9b:ff:5e:fb:60:21:e6:
                    a5:6d:a1:cc:b5:dc:d7:ae:1d:98:7b:fd:ab:af:8b:
                    5c:55:19:65:b9:2b:4e:90:4c:08:42:14:11:c9:b4:
                    ec:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6C:D8:B8:FF:48:51:EE:9B:3D:5E:C0:BF:15:4A:52:3A:D9:B4:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/4d1f008f-67a9-308d-9f82-30e56f078c23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99b:a0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:55:4e:11:a8:2a:df:e8:e2:9d:ba:f7:3d:04:45:75:16:4f:
         08:88:26:f0:68:45:38:c2:27:b8:80:93:35:b2:e2:e9:88:65:
         e8:5a:e7:c4:85:13:86:ee:66:9b:46:74:b5:07:7b:13:07:e6:
         61:01:3f:e3:f6:05:02:37:2c:8c:b3:2f:df:b9:16:86:3b:1f:
         a6:0f:4d:0e:76:b7:22:2c:e4:6d:f4:83:46:d7:c6:72:59:fc:
         e0:91:1e:84:1a:3a:b3:99:8c:00:6f:b6:5c:64:03:74:7b:3d:
         b4:1b:89:c7:34:a2:37:4b:76:00:19:a8:cd:63:92:5a:9a:08:
         5e:3b:00:fb:9f:04:d4:e4:f0:4a:f4:1f:e2:06:0c:5c:51:25:
         c2:c3:c6:e0:fa:45:fe:9a:4c:e3:3a:22:e3:58:42:ed:5c:64:
         f8:60:44:af:b0:56:f3:56:78:bb:68:db:7b:20:39:c1:5d:e0:
         be:69:6a:8a:6d:05:7c:a0:c9:1c:ae:3e:03:3d:6f:d7:f8:3b:
         81:4f:0f:2f:57:fd:cd:72:22:b1:5c:86:8a:0c:74:54:c8:c4:
         7f:97:7d:37:46:b3:d6:26:07:ee:4c:ed:df:df:94:d1:96:aa:
         93:ad:35:a8:4c:8f:8b:ff:4c:5e:14:86:22:65:98:c0:3c:d3:
         62:c3:8c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:22 2025 by rpki-client