Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa
File:                     3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa (raw, json)
Hash identifier:          9waIVRV83qq35fye1YpHjeMyMWpnQo2CeZ0t2DcIEDU=
Subject key identifier:   B4:13:81:87:9A:C4:B2:41:4A:4E:A6:CF:03:0D:A8:34:CC:82:F7:86
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584A682600568BD90647EC519E3A
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397182
IP address blocks:        2606:c7c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:00:56:8b:d9:06:47:ec:51:9e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=5935eb14-c7d6-462e-b999-f0c3d0c06048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:63:5a:8a:fe:f5:f2:6b:9c:7d:6f:57:d8:22:
                    cb:44:67:39:ed:39:32:c7:88:d9:97:85:8a:eb:40:
                    3b:43:48:3c:1a:31:8f:60:3b:6f:02:f2:19:06:3c:
                    cf:e3:d9:4f:db:e3:51:92:94:e7:bd:e6:91:d2:7c:
                    33:31:fe:ca:a6:3c:39:0d:e4:08:05:48:5e:87:6b:
                    fb:60:d9:51:cb:29:12:63:5a:47:57:9a:1a:19:6d:
                    f1:70:61:78:16:b1:b6:45:04:62:59:1a:dc:a4:ea:
                    47:23:2e:13:13:86:a0:39:8d:13:84:43:0e:3a:59:
                    c1:78:29:18:c9:41:2e:51:95:b1:b0:eb:cf:0c:d2:
                    e7:2a:9d:04:36:a5:b9:01:95:48:1a:57:33:b5:96:
                    52:e6:69:c2:19:40:2d:4a:8b:23:3c:48:4e:a9:b0:
                    b1:13:be:df:0f:14:d0:ac:87:03:72:d5:14:e0:b1:
                    00:be:b6:7e:b9:22:03:6d:43:d0:4c:cf:0c:47:01:
                    99:03:55:1f:3d:13:44:b6:6f:ba:a9:53:5a:b5:ff:
                    89:09:33:b7:18:2d:2d:16:21:7d:0a:e1:48:b4:7f:
                    c3:4f:62:6a:90:b7:e6:0a:22:1e:6d:c6:58:8d:dc:
                    db:8c:21:cb:e8:02:95:13:98:9d:a7:3a:84:07:2c:
                    c3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:13:81:87:9A:C4:B2:41:4A:4E:A6:CF:03:0D:A8:34:CC:82:F7:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:6f:3b:08:61:12:03:d4:13:af:a1:62:de:94:3a:88:7c:c1:
         54:ed:c5:7e:41:dc:9b:d0:23:39:41:b8:88:96:cf:62:f0:fb:
         a2:b6:35:21:c2:d5:61:2e:c7:77:69:50:d9:ed:53:80:79:dd:
         b9:5a:7c:06:99:80:fe:50:e3:d3:aa:28:40:7d:6e:ae:d6:85:
         be:4b:7c:64:cf:50:e6:85:e9:61:0e:77:db:7b:84:be:39:ba:
         31:dd:7b:f3:1d:a4:3e:e3:ec:9f:0e:6f:f8:9a:eb:62:ba:38:
         34:ce:c1:af:67:1f:e4:20:9a:c2:44:bf:77:ae:3f:d2:ba:59:
         3a:40:65:b5:32:23:18:28:95:a8:b6:1d:f3:93:70:78:d3:df:
         ab:f2:37:97:a7:e7:52:10:21:b5:74:ad:31:a1:f1:13:32:c6:
         c6:bf:3f:8f:fd:cf:0e:d5:6e:6c:a2:47:79:36:6b:2c:36:f3:
         0f:99:df:fa:14:19:fb:cb:1b:d8:6f:ad:79:1c:78:7a:12:b8:
         81:ae:6b:16:02:0f:1f:51:66:14:7a:37:91:81:ef:09:9c:5d:
         c8:2c:2a:80:cf:e5:8f:15:ff:92:7c:e0:20:23:cb:a6:87:d6:
         71:0e:da:6d:14:68:27:26:94:88:03:ab:0f:e1:b3:b9:f1:02:
         6d:7f:97:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:24 2025 by rpki-client