Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/d0f32018-fa4b-36d9-9478-1ff3592ac07b.roa
File:                     d0f32018-fa4b-36d9-9478-1ff3592ac07b.roa (raw, json)
Hash identifier:          JRMvkV/Ot4vcb9mWrEdRdnSKna1hAn9NfjonaENfTmk=
Subject key identifier:   AF:83:44:9E:E9:53:89:95:64:8C:6A:BA:7F:08:3B:2B:64:DD:3E:D4
Certificate issuer:       /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
Certificate serial:       010D0C9F4328584AA42B8657E8CAEA6815CB5E80
Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/d0f32018-fa4b-36d9-9478-1ff3592ac07b.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     19528
IP address blocks:        2605:15c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:86:57:e8:ca:ea:68:15:cb:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=79b0d4b4-2c91-4786-9da1-243f1f986eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4b:d0:8d:39:08:5c:94:b3:35:52:e1:99:96:
                    b6:71:bd:c1:09:44:3c:23:e8:6d:1e:6c:07:0e:e9:
                    cf:33:83:64:80:37:67:17:1b:e9:ca:a6:24:08:57:
                    f3:20:27:5f:7d:c1:4a:b5:e6:1d:87:da:c7:e2:88:
                    8e:d6:6c:bf:d1:12:e6:cf:2d:b5:7e:4f:3c:0d:c8:
                    c2:5d:0c:57:7c:eb:77:ed:12:1a:28:a0:a7:f9:2d:
                    0a:fd:c5:e5:d8:be:41:8b:cc:ba:85:dd:a4:f0:ed:
                    ff:0b:c9:8f:62:f6:cf:8f:ba:53:13:13:28:11:91:
                    a4:5b:f6:a2:a3:31:23:e6:56:4e:0e:38:b0:6d:e9:
                    12:cf:20:11:c1:8e:a1:f5:0c:52:a1:3a:d7:66:97:
                    16:48:3f:27:76:55:59:87:6e:9f:1a:60:f6:60:82:
                    e5:a4:27:20:7a:a8:ee:a3:c2:50:19:12:07:82:c9:
                    a8:07:ba:75:b3:30:6d:05:07:bf:d6:76:a7:66:a6:
                    52:69:27:f0:f4:aa:71:67:c3:f8:f5:20:f6:a4:56:
                    d6:10:ee:2a:01:85:23:76:10:4e:33:68:cb:52:33:
                    b9:91:4c:cb:10:1a:07:d1:f0:54:07:bf:32:05:c8:
                    b3:a0:6a:90:98:6a:7c:92:41:37:f1:2a:ab:be:a2:
                    87:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:83:44:9E:E9:53:89:95:64:8C:6A:BA:7F:08:3B:2B:64:DD:3E:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/d0f32018-fa4b-36d9-9478-1ff3592ac07b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl

            X509v3 Authority Key Identifier:
                keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:15c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:16:9f:88:c0:08:f0:83:d2:4a:95:90:86:fb:cc:41:12:39:
         7f:af:3c:3d:44:95:6b:d7:64:de:0d:c9:fe:02:42:5f:d5:81:
         c6:9a:75:9a:cc:ab:87:a9:06:61:b8:d4:1d:a4:3a:d8:8f:d1:
         b5:47:7e:ff:4d:92:ae:7d:7d:e6:b3:ba:c9:f1:b5:1a:eb:8d:
         95:d4:68:2c:54:ef:d2:ef:12:a3:c1:a9:72:ed:7b:e7:e6:03:
         b3:06:a1:5f:2b:bc:80:dd:3a:2e:e8:e4:22:94:1f:77:f9:56:
         51:5f:aa:02:96:be:3d:41:6c:fc:42:57:d5:a0:27:3e:ad:61:
         52:af:d1:71:7d:97:cc:42:57:be:44:d0:89:80:d8:d0:c5:34:
         8c:07:a7:f9:03:89:bb:48:ec:97:72:6b:36:0f:5a:e5:62:be:
         51:48:ee:35:88:3c:51:07:58:93:52:f1:83:c0:7d:98:fe:03:
         92:d9:c0:ad:d2:98:5f:8b:a2:0b:12:17:e4:1c:f1:8e:fc:5a:
         ab:4c:c5:25:b9:f7:98:fa:3f:55:7b:ad:bf:72:21:9a:66:96:
         65:89:94:ea:b0:8e:07:02:bd:a3:8e:f3:2c:ae:37:19:65:be:
         dc:bb:e5:62:e4:ea:86:74:61:e4:68:1b:f6:37:f8:01:4d:1e:
         46:d5:bb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:25:25 2025 by rpki-client