Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d9676341-649a-455a-996d-1bf21249eaef/1eedb35b-9843-3bf8-9a2a-d615c05489f3.roa
File:                     1eedb35b-9843-3bf8-9a2a-d615c05489f3.roa (raw, json)
Hash identifier:          XywrR/+mZmjWj3avBSvnKOmJT6HPWREBcb2uSqGKYTU=
Subject key identifier:   8F:92:FD:6A:99:C0:6D:DB:90:BC:48:B9:27:CC:C8:8F:04:D9:D9:53
Certificate issuer:       /CN=d9676341-649a-455a-996d-1bf21249eaef
Certificate serial:       010D0C9F4328584A7A4B4B0CE020A03A4862C080
Authority key identifier: 19:88:90:E9:13:98:65:31:94:9D:62:5C:1F:4F:16:4C:2A:B5:A1:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d9676341-649a-455a-996d-1bf21249eaef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d9676341-649a-455a-996d-1bf21249eaef/1eedb35b-9843-3bf8-9a2a-d615c05489f3.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     19451
IP address blocks:        2607:a0c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d9676341-649a-455a-996d-1bf21249eaef/d9676341-649a-455a-996d-1bf21249eaef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d9676341-649a-455a-996d-1bf21249eaef/d9676341-649a-455a-996d-1bf21249eaef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d9676341-649a-455a-996d-1bf21249eaef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:4b:0c:e0:20:a0:3a:48:62:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9676341-649a-455a-996d-1bf21249eaef
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=f4dc431a-cc63-41eb-8e1f-9aac20106e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0f:ea:c4:6d:7b:cd:72:4c:17:94:1d:b7:6d:
                    14:40:fe:dc:8d:4a:b8:2c:17:0a:22:33:cb:65:2b:
                    a7:57:21:14:8c:14:a5:96:b9:95:7b:58:c4:26:a3:
                    eb:c4:11:a5:d3:49:de:9a:0d:d9:80:39:a0:37:24:
                    d7:1b:d4:6c:30:31:6e:e2:a9:c6:58:c4:e9:ce:0f:
                    bf:b2:8b:94:2c:63:6c:f7:41:ef:a7:21:33:7d:bc:
                    51:70:67:5f:64:ee:1a:92:35:b8:5b:a9:f4:17:ec:
                    b5:81:c4:53:ca:14:c0:11:a9:ae:61:f8:78:a5:2b:
                    0c:b5:3e:19:24:1e:4b:66:f8:a7:76:25:ac:ed:1f:
                    b3:06:28:53:d5:82:d4:51:e7:9c:a1:3c:62:b3:ac:
                    38:9d:88:c6:87:33:91:fc:c3:e8:a0:bb:89:7b:ea:
                    84:c0:1e:22:7a:fa:02:61:8e:b2:74:d6:e1:62:9b:
                    2c:31:37:d3:fb:09:01:6c:32:9c:3d:d7:4b:7c:f4:
                    f5:2e:b0:e2:ae:bb:16:05:7c:ce:81:19:ce:34:82:
                    f6:9a:32:8e:8e:ee:03:ed:fe:6b:c7:63:05:e3:48:
                    40:44:77:0f:cc:5e:ee:ce:27:8e:5d:57:6c:6b:d1:
                    b0:5b:de:be:ed:99:17:8d:0d:a4:2b:81:47:f5:c7:
                    04:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:92:FD:6A:99:C0:6D:DB:90:BC:48:B9:27:CC:C8:8F:04:D9:D9:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d9676341-649a-455a-996d-1bf21249eaef/1eedb35b-9843-3bf8-9a2a-d615c05489f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d9676341-649a-455a-996d-1bf21249eaef/d9676341-649a-455a-996d-1bf21249eaef.crl

            X509v3 Authority Key Identifier:
                keyid:19:88:90:E9:13:98:65:31:94:9D:62:5C:1F:4F:16:4C:2A:B5:A1:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d9676341-649a-455a-996d-1bf21249eaef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a0c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c3:a0:6c:33:6c:d6:eb:ae:be:31:1a:64:3d:30:ff:ea:2d:
         ca:39:f9:d1:b6:8f:12:0d:6f:1c:7b:e4:14:3c:94:60:ed:fe:
         c5:fa:5b:eb:f3:05:e5:d5:8d:fe:b0:ed:f5:ae:44:0a:b9:45:
         71:01:28:24:ba:c7:53:a1:ec:77:91:3f:d9:4f:7c:68:64:63:
         29:80:ba:c3:cf:ca:1b:b5:d4:a7:97:dd:fd:cb:ce:cc:fa:5e:
         f6:61:23:f9:3e:94:62:27:ba:d6:55:f5:fc:f0:3e:82:24:ca:
         4f:ce:17:8a:05:1f:f0:4b:da:95:28:82:fb:be:2b:f5:2d:1f:
         4e:a2:44:92:07:6a:a7:c3:5d:4f:87:0c:76:86:5a:36:18:51:
         48:92:61:f5:3b:0c:97:44:58:81:04:12:41:d5:e7:92:28:6a:
         ac:26:82:84:9e:b8:df:4c:ee:00:a8:03:14:ab:32:97:ac:c2:
         2f:1d:ea:ad:c2:8e:37:a8:77:bc:bb:c0:97:f5:93:f5:83:e2:
         56:6c:b4:9e:b5:9a:19:6c:27:bd:ca:c5:f1:ef:e1:5f:ab:4e:
         c7:47:29:78:f8:8b:72:b9:ff:66:c9:e0:13:76:28:85:dd:ba:
         bf:2d:6c:b0:76:7e:f3:68:f5:6d:37:72:af:a4:21:15:ba:8f:
         a2:28:f8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:26:11 2025 by rpki-client