Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/3461eb29-77a1-3af2-b9c7-4d61df31689a.roa
File:                     3461eb29-77a1-3af2-b9c7-4d61df31689a.roa (raw, json)
Hash identifier:          OB4yMkSnH4jB9XVlhlOwm4mj9H3PF8lIlzlIHlLewXE=
Subject key identifier:   EC:B8:2A:7E:4A:91:B7:2E:4F:F6:EB:5D:38:A1:F8:C0:58:33:72:61
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584A6290CF03BD117F2DEE807D40
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/3461eb29-77a1-3af2-b9c7-4d61df31689a.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     19165
IP address blocks:        2604:5500:ac00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:cf:03:bd:11:7f:2d:ee:80:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=535ac4aa-9440-4ffa-961c-911f0e41c94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ad:59:6e:68:41:16:22:bd:f9:fb:df:68:eb:
                    b2:c0:4e:2b:b4:5e:37:c5:49:e4:8c:a5:80:0b:1f:
                    a0:2f:e1:d4:03:42:e1:57:6e:d2:55:68:27:bd:8f:
                    b0:ad:54:57:e3:40:da:4f:dc:12:b3:28:43:6f:e1:
                    08:57:53:fa:ca:cb:41:ce:a3:71:f5:9d:3e:1b:45:
                    16:b6:38:c5:78:fb:36:95:2c:00:18:54:82:ab:17:
                    40:8e:7d:75:ba:4b:42:dd:c1:b8:b9:f2:1f:ac:a5:
                    ba:7a:45:e1:3e:8c:45:2e:3a:df:9b:72:21:38:1a:
                    be:4d:fb:a4:41:26:dc:5a:92:04:69:7b:22:e0:6f:
                    d9:37:6d:69:dc:dc:95:3d:27:1d:b8:fd:2e:e0:10:
                    64:77:cc:7f:ed:fe:ae:14:3b:07:c9:ae:85:6c:65:
                    60:79:16:fc:19:5d:ac:83:35:d2:84:a7:9f:c1:f2:
                    74:b4:e3:ce:48:16:35:24:bc:0f:f8:c4:78:42:29:
                    db:b8:39:e9:6e:cc:7d:23:74:99:fa:df:2b:3d:fa:
                    36:84:b3:cb:a3:e4:17:e3:58:32:b6:a2:c0:01:04:
                    db:e4:10:b4:b5:49:4e:ef:da:8a:ab:1d:65:73:2b:
                    50:5c:15:59:c6:84:14:29:4e:2c:e8:f4:96:a0:af:
                    b5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B8:2A:7E:4A:91:B7:2E:4F:F6:EB:5D:38:A1:F8:C0:58:33:72:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/3461eb29-77a1-3af2-b9c7-4d61df31689a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500:ac00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:83:7a:fe:b1:ac:e9:40:6e:15:64:ab:d1:9c:09:dc:f9:06:
         7e:c4:8c:41:ff:f5:a7:e7:1b:7b:f0:70:33:2d:dd:50:8b:f0:
         57:0e:9b:8b:a8:83:70:2a:fe:ce:3e:2a:49:67:34:80:8e:64:
         8c:cd:ac:02:b7:99:3a:30:c0:28:06:3c:3b:25:32:cc:a9:5a:
         f9:6e:f3:e5:3b:2f:45:3a:b3:9e:a8:eb:eb:f3:3b:4c:4a:0d:
         1d:85:20:48:df:78:c1:a4:7b:e4:22:26:45:64:9c:ff:ea:e2:
         0f:ba:12:6d:4f:bf:e0:f5:00:91:52:80:87:6c:df:ef:f5:25:
         99:19:75:18:39:85:00:ce:a9:bd:8a:c5:8c:67:1f:f1:ce:7d:
         5b:d1:d1:e7:fd:bf:09:d2:e7:33:2e:c0:05:56:b5:ca:40:3a:
         76:9c:89:39:3b:92:ea:c7:1d:e6:22:65:f1:b6:dd:13:47:fa:
         70:af:3e:a6:f6:d5:91:57:e5:b0:ce:94:5b:51:ac:23:28:ee:
         dc:dd:26:50:8c:62:17:cb:07:96:22:f6:49:a9:16:eb:61:e3:
         d7:13:d8:9a:55:db:b8:ea:2d:6d:d7:51:2d:78:14:d7:d8:71:
         3a:3c:56:f1:fa:13:01:bf:c3:b0:9b:21:f9:e5:25:3d:a5:c8:
         43:53:c8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:46:55 2025 by rpki-client