Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/ebb55e36-3ef8-33a5-829f-4de227ff2753.roa
File:                     ebb55e36-3ef8-33a5-829f-4de227ff2753.roa (raw, json)
Hash identifier:          t8YBYm5LTlI1sqVCi1rnBAEnFomoeFbBwAgewHGPXOs=
Subject key identifier:   BA:92:6A:E5:33:82:74:84:E9:66:CA:11:9B:84:1F:C6:BC:37:93:89
Certificate issuer:       /CN=d7c75743-409b-41fb-b744-8345baaf599b
Certificate serial:       010D0C9F4328584A9E961E189C96B02C323CFA80
Authority key identifier: 62:33:C3:19:5C:3A:85:62:DF:B7:57:13:AC:7F:5F:AB:C4:CD:25:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/ebb55e36-3ef8-33a5-829f-4de227ff2753.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     20373
IP address blocks:        2602:f939:99::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:1e:18:9c:96:b0:2c:32:3c:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c75743-409b-41fb-b744-8345baaf599b
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=4f07551a-7af1-4a57-a089-cbb63945b408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:59:7e:7d:37:98:71:1c:f6:ed:60:97:e8:c3:
                    f9:63:60:de:22:d6:7e:7b:d3:0d:37:a7:d5:1f:58:
                    bb:df:5e:62:ec:d6:54:a0:8d:8d:cb:4b:d3:86:5a:
                    fd:b5:f1:bb:f8:17:c6:24:1e:ba:25:3f:63:ce:0e:
                    2b:95:cc:84:90:ee:75:e4:f8:ed:7b:07:06:c9:83:
                    ee:d5:b8:21:e9:91:3b:74:fb:24:ef:e5:7f:ee:25:
                    a7:87:9c:84:c4:a7:93:b3:18:22:d7:f5:21:c9:93:
                    6a:84:0e:63:8b:88:8c:91:7f:da:28:38:f1:0d:68:
                    f2:bf:65:0f:75:82:fc:aa:2d:00:3a:bb:fc:d3:72:
                    aa:d8:cc:ef:1f:3e:48:78:0f:79:a6:c3:17:78:95:
                    72:7d:24:9c:61:5b:14:df:15:7a:e8:92:ca:7c:22:
                    34:95:d4:83:54:53:c7:82:6b:a6:e9:ec:ac:03:cf:
                    36:d5:a2:0c:dc:d4:93:ee:ff:2d:29:1c:53:4e:f1:
                    af:10:a3:45:8a:a8:2f:21:f1:09:a2:9c:84:50:0f:
                    b3:a6:cd:a1:12:de:7f:07:54:40:a6:8c:f0:f6:3a:
                    86:dc:e9:c7:5f:3c:e4:01:af:4b:31:b7:2a:71:d9:
                    94:2d:7b:c1:54:7a:c9:a9:c2:88:bd:91:57:25:32:
                    f6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:92:6A:E5:33:82:74:84:E9:66:CA:11:9B:84:1F:C6:BC:37:93:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/ebb55e36-3ef8-33a5-829f-4de227ff2753.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.crl

            X509v3 Authority Key Identifier:
                keyid:62:33:C3:19:5C:3A:85:62:DF:B7:57:13:AC:7F:5F:AB:C4:CD:25:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f939:99::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:91:ca:20:13:00:46:15:03:60:b1:a2:0c:85:59:f6:30:35:
         1b:ec:cf:7a:64:a4:42:73:44:a2:85:29:4c:60:51:c8:97:82:
         f6:53:35:63:ca:d9:5f:a2:23:8c:6d:6f:5c:bd:f3:e1:95:9a:
         18:c5:24:61:b9:cf:ec:a7:29:2f:3f:a1:41:c6:fc:eb:f0:34:
         04:e6:1b:ff:50:ea:a5:1a:de:ba:0c:3e:25:29:88:ba:0f:0f:
         88:1b:68:14:ca:e1:ad:4c:86:3a:11:0f:75:11:c8:b7:34:3c:
         15:13:34:83:e1:16:e9:c0:e2:2a:a4:32:6a:e9:1c:05:86:67:
         24:12:d2:b4:28:08:8f:58:e5:f2:4c:4a:d8:75:9b:c6:b4:25:
         64:38:6d:56:21:00:fd:e0:2e:9e:e2:f2:57:26:4d:e6:f9:11:
         a3:a6:78:a4:96:6b:e9:b4:90:40:74:d6:bb:26:ba:6d:a5:73:
         a5:ce:f6:0b:80:ca:ef:31:a0:7b:36:f4:2f:b5:27:da:88:8d:
         d0:fb:e6:67:49:50:aa:29:fb:2c:b8:ae:b3:14:be:e3:18:25:
         02:2f:6b:95:2a:75:08:2d:18:fd:8d:ac:60:3a:55:1c:6d:ed:
         b8:b6:77:90:9e:2a:c8:c2:99:e6:fa:90:2e:f3:ef:fd:67:1e:
         54:8b:72:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:43:07 2025 by rpki-client