Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/69ca785a-e5ce-3779-b79a-bcf68ce14de8.roa
File:                     69ca785a-e5ce-3779-b79a-bcf68ce14de8.roa (raw, json)
Hash identifier:          hJsYXRdHID4Ir0Ftfrf+3DWzf8KS+ZfRmYI8R+KdwdE=
Subject key identifier:   E8:C2:F3:26:D3:C1:A3:11:0B:B8:B8:31:3B:0E:21:DB:68:5D:6D:0A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A90A1050F87DC9BD9DBB49200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/69ca785a-e5ce-3779-b79a-bcf68ce14de8.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     7029
IP address blocks:        2604:cb00:3200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a1:05:0f:87:dc:9b:d9:db:b4:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=e4d6461e-fbee-42a5-9c78-b9b01032a5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ec:39:bf:6b:d5:16:20:c7:f3:fe:65:25:5e:
                    63:7a:5e:ac:d7:1a:3b:d0:28:a2:ae:a6:f6:cf:df:
                    bc:70:2f:fb:ae:f9:14:4d:e3:d4:32:9f:1d:a9:97:
                    94:29:9a:8e:c5:b8:65:23:b1:53:b9:99:05:7b:c5:
                    20:af:a5:38:86:56:e4:fe:a8:03:19:64:d7:67:66:
                    9e:3a:cd:78:b7:2e:c7:1c:cb:c5:a7:e8:da:94:1f:
                    e3:7e:9d:3c:c3:fc:47:21:f2:5a:de:08:73:00:f9:
                    62:4d:5a:46:da:57:60:00:29:4c:33:7e:e4:24:8a:
                    a5:ea:31:51:af:17:0f:aa:f8:4e:79:62:d5:f7:ac:
                    7d:49:25:dc:dc:22:94:30:de:33:50:ef:0f:3e:10:
                    f3:04:f1:f3:cf:83:b1:da:0e:f5:ac:55:24:29:d5:
                    15:7c:66:fe:4e:36:57:7c:72:2b:02:0d:ee:fb:8e:
                    3b:87:ff:bc:4c:57:a2:d0:6e:df:3d:95:2f:92:8f:
                    ce:43:1c:47:61:e6:d6:87:b0:fa:60:ad:20:55:36:
                    eb:d7:93:85:63:7c:56:04:e7:de:d8:57:6e:72:46:
                    42:9c:df:66:8f:51:e1:94:fa:6a:1f:1e:2e:62:c9:
                    50:9d:d4:9b:32:de:8a:37:de:26:7e:4e:30:ba:e0:
                    a5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C2:F3:26:D3:C1:A3:11:0B:B8:B8:31:3B:0E:21:DB:68:5D:6D:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/69ca785a-e5ce-3779-b79a-bcf68ce14de8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:64:47:77:d3:38:f4:6d:cb:98:af:43:4a:0a:14:9b:77:73:
         1b:cd:81:10:42:d2:68:f4:5b:aa:fd:3f:45:dc:b5:e4:f1:e8:
         00:d0:a0:dc:bd:39:bf:30:ca:0f:53:76:65:9f:f4:89:8f:0d:
         df:c6:38:45:2a:46:45:87:f4:77:1e:14:e2:dc:ac:13:84:7e:
         10:c3:12:67:a3:d6:58:14:0a:5c:e4:a1:e1:8b:5f:99:07:1a:
         19:25:9a:4e:ce:9e:d9:f9:e1:69:2d:48:e4:62:40:09:87:1e:
         31:28:38:fc:41:b0:2f:3e:3d:b3:2c:58:82:bb:a3:6d:26:f4:
         d3:93:67:28:df:41:07:cc:6a:22:6e:55:bf:55:0a:99:a1:95:
         4f:7b:78:ac:5c:84:17:56:1e:c0:e8:bd:1c:1f:34:53:7e:1b:
         97:40:b8:e9:ff:56:3f:77:c9:5d:e8:ff:13:32:64:9d:b5:7e:
         94:c8:6f:59:4a:f5:2d:01:47:ce:54:58:fb:42:d3:58:3e:3b:
         d2:1e:ea:8c:6c:95:64:b6:c0:3c:25:3b:84:ed:40:dd:5d:0b:
         1c:39:36:c1:3e:78:ab:29:2b:23:bb:cd:24:02:48:4e:0d:14:
         50:fa:55:8b:c4:7d:ee:6b:f5:3d:49:c9:be:7b:89:e9:d7:2b:
         2b:c9:32:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:57:48 2025 by rpki-client