Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a/3ec75d43-a4f4-3c43-a039-92451dce5eba.roa
File:                     3ec75d43-a4f4-3c43-a039-92451dce5eba.roa (raw, json)
Hash identifier:          cwvLmdTRAef6+zGad4zzdBYgkY4ydVO/nk+M7BPH8mo=
Subject key identifier:   96:75:00:0B:EB:51:B3:69:39:97:5A:13:01:67:A4:D3:9A:F0:77:D5
Certificate issuer:       /CN=b4c30032-490a-4e49-8e1d-48d69c85212a
Certificate serial:       010D0C9F4328584AB220DD2B7E8A968F33528200
Authority key identifier: 96:82:23:C5:CB:7D:B1:E4:BB:5C:D7:0F:21:B2:5B:2D:D6:22:64:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a/3ec75d43-a4f4-3c43-a039-92451dce5eba.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     14618
IP address blocks:        2605:f80:f100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a/b4c30032-490a-4e49-8e1d-48d69c85212a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a/b4c30032-490a-4e49-8e1d-48d69c85212a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:dd:2b:7e:8a:96:8f:33:52:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4c30032-490a-4e49-8e1d-48d69c85212a
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=20927554-daa6-42f0-9cd1-aa5354210f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:80:e4:a2:ca:b4:b6:6f:32:a8:7f:4c:d6:73:
                    32:61:85:75:95:90:cf:ff:0d:b0:9b:ad:48:49:1b:
                    81:59:8e:dd:ad:c4:7c:b0:65:98:93:ad:4d:6a:b9:
                    55:f4:de:c8:6b:27:38:65:ef:c2:92:6f:24:69:4b:
                    2d:9e:08:6a:e6:34:17:f5:3f:f2:f5:34:c1:81:64:
                    5e:38:bc:0e:ad:8c:b2:f0:80:b4:0c:a8:95:cc:2c:
                    41:22:8e:87:2a:9c:37:66:39:8d:de:9f:1f:61:1a:
                    cd:18:87:eb:0c:81:e3:ab:88:53:bd:a4:4b:26:f9:
                    2a:6f:dc:8e:4a:3b:52:7a:df:12:35:96:8b:87:e0:
                    cc:d7:37:83:21:ff:e6:3d:c3:28:34:e2:88:6c:e4:
                    4c:16:40:08:5e:64:8f:85:0d:b3:c1:d5:4c:80:28:
                    57:4d:23:f4:b3:f9:18:50:4e:58:88:15:47:ba:69:
                    af:93:5f:17:22:a7:56:5e:78:ca:1d:fa:55:2a:1e:
                    d8:6c:18:43:b6:ad:83:a8:8b:6b:7e:ea:74:f8:cd:
                    a8:2c:1c:2a:25:bf:46:cf:ef:57:3a:b6:47:d8:4f:
                    e3:f8:76:b7:f9:21:06:95:13:f8:81:a0:88:36:c1:
                    cf:35:45:52:05:0f:31:94:de:1a:e5:9e:fe:b1:e8:
                    5e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:75:00:0B:EB:51:B3:69:39:97:5A:13:01:67:A4:D3:9A:F0:77:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a/3ec75d43-a4f4-3c43-a039-92451dce5eba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a/b4c30032-490a-4e49-8e1d-48d69c85212a.crl

            X509v3 Authority Key Identifier:
                keyid:96:82:23:C5:CB:7D:B1:E4:BB:5C:D7:0F:21:B2:5B:2D:D6:22:64:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b4c30032-490a-4e49-8e1d-48d69c85212a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f80:f100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:c1:84:cf:5e:65:fe:9f:85:2f:c6:c7:c5:73:4e:f0:c9:d1:
         6c:d4:b6:c9:5c:8d:57:4d:b5:6e:9a:95:88:5c:e0:43:57:40:
         dc:67:4a:32:95:c2:2e:95:8d:4a:45:af:e1:33:7b:f9:1f:4b:
         60:f7:69:39:08:43:37:22:70:d2:7c:31:8a:8c:b6:2d:b0:f5:
         75:d1:33:1a:a1:f6:e4:31:81:98:07:79:55:8c:f8:8f:59:8f:
         c6:51:88:6f:33:c6:40:a6:2d:16:0b:24:5d:69:ae:73:70:9d:
         28:fc:de:31:87:f0:26:39:9b:67:33:38:6d:7c:7c:1f:bf:dc:
         0a:bf:30:cd:64:ed:b1:8c:ea:66:ce:7e:58:6f:94:f1:97:f0:
         f2:34:44:d1:93:51:3e:32:86:c9:47:41:35:ef:83:71:1e:f5:
         50:1c:84:98:dd:f1:87:a8:e6:fd:88:7a:a4:a8:15:29:19:b2:
         20:9c:73:43:70:99:af:19:2b:7a:e3:4c:a8:16:e6:b2:d4:d7:
         36:10:fe:62:ff:f0:99:75:09:44:2b:a0:cf:61:98:cf:63:4e:
         b8:b2:5b:cb:0b:df:b6:9d:b2:cf:c6:c8:f1:f3:18:e6:a1:f1:
         41:54:c1:bb:c4:77:ff:b0:de:4a:4e:ef:66:70:56:50:f5:8a:
         06:41:33:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:25:56 2025 by rpki-client