Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/f7ae8bbe-3eb4-38d8-bd99-308670525a46.roa
File:                     f7ae8bbe-3eb4-38d8-bd99-308670525a46.roa (raw, json)
Hash identifier:          VtG90DsV8SNMWBXA6wSDk5+DGt1outd+hNWno75i+/Y=
Subject key identifier:   27:A9:90:32:69:CC:23:23:B9:D8:ED:DA:C7:50:79:87:46:9C:ED:D6
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584A8DD5FD3AEA62484D99CD6F80
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/f7ae8bbe-3eb4-38d8-bd99-308670525a46.roa
Signing time:             Fri 18 Jul 2025 01:00:48 +0000
ROA not before:           Fri 18 Jul 2025 01:00:48 +0000
ROA not after:            Thu 16 Oct 2025 01:00:48 +0000
asID:                     396422
IP address blocks:        2604:81c0:3d5::/48 maxlen: 48
                          2604:81c0:3d5c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:d5:fd:3a:ea:62:48:4d:99:cd:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Jul 18 01:00:48 2025 GMT
            Not After : Oct 16 01:00:48 2025 GMT
        Subject: CN=be62be49-08cb-4180-bd54-93ab22cf3d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:09:d1:bc:36:96:c9:eb:58:59:f4:72:d7:00:
                    6b:b3:ad:22:f5:22:ec:95:6f:00:89:e2:ae:f8:ea:
                    79:49:fa:0e:bb:64:1c:50:24:03:9f:1f:82:ce:89:
                    cc:95:05:b4:6e:5b:42:1f:21:cc:00:08:bb:cb:15:
                    b2:da:e7:62:2b:aa:00:46:23:82:13:64:93:8e:6c:
                    64:a2:dd:01:82:ab:0e:86:7c:2b:40:86:f4:be:80:
                    48:76:5c:f4:9e:ba:4e:38:81:a4:c8:d1:70:74:bb:
                    54:9e:d5:d5:23:c0:1a:bf:7d:e3:c3:e8:9f:1f:67:
                    b1:f6:78:7c:a0:95:7b:6f:00:36:ab:af:14:84:d0:
                    86:c0:70:b5:cb:04:7c:80:d2:7b:f1:b9:43:73:49:
                    01:52:4a:f8:80:e4:ca:b1:29:37:33:e1:c1:97:91:
                    5a:b1:03:57:51:64:e1:2a:d2:10:f0:0e:a3:c3:09:
                    53:fb:43:92:d8:d8:f2:d3:2d:60:52:13:4d:b4:08:
                    46:b9:d4:af:79:a1:5e:0d:08:b5:d8:6b:3c:22:cc:
                    01:f3:d0:cf:3e:b6:4a:9e:d4:dc:d1:b3:28:0a:40:
                    c0:92:54:f3:b2:79:bc:70:95:85:d8:73:7b:f9:93:
                    2e:b3:f1:20:29:c9:ad:3d:f3:5d:67:f1:31:6d:ad:
                    1b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A9:90:32:69:CC:23:23:B9:D8:ED:DA:C7:50:79:87:46:9C:ED:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/f7ae8bbe-3eb4-38d8-bd99-308670525a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:81c0:3d5::/48
                  2604:81c0:3d5c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:92:26:1d:3c:1e:68:c2:f5:7d:b4:9f:dd:4b:40:9c:78:0a:
         9f:10:b0:d6:c9:d2:d0:ea:64:89:35:3d:5f:71:30:10:27:df:
         4d:c4:e7:a3:d4:28:d7:9b:d5:0c:7d:ef:82:5d:dc:63:ac:83:
         94:56:b8:63:c8:61:f9:23:a7:9c:26:99:91:0a:88:cd:ea:99:
         e6:a4:12:8b:82:b1:17:74:64:aa:05:16:07:20:35:8e:a3:16:
         93:3c:76:a5:78:4e:41:5a:be:1d:9b:aa:ff:7f:c8:a4:44:ed:
         6d:d8:c2:27:e5:98:2e:0d:4a:69:68:bb:33:bf:9b:d6:a1:ed:
         a1:4f:c5:65:46:15:80:28:58:2d:3d:8b:ec:4e:a5:f1:1c:88:
         67:bc:5a:1f:db:08:29:f8:8c:01:a0:57:c6:a7:ad:7b:c2:b1:
         b2:e9:9e:00:c0:52:76:5d:4d:7c:83:f7:61:1e:b5:fe:55:0d:
         ba:65:42:fb:63:ad:bb:05:32:12:75:d9:5c:2b:b1:78:bd:22:
         3d:3c:47:db:ec:6a:5c:10:ce:dd:fd:98:ef:20:7e:db:9b:22:
         87:ba:67:00:a3:4b:83:bf:5a:ad:8d:4e:bb:55:91:5d:7a:fe:
         8d:4b:82:e9:93:ed:d9:81:c1:30:fc:fd:5a:04:77:1d:21:a4:
         a7:9d:ef:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:39:25 2025 by rpki-client