Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/75d979a3-a4b0-3ea6-907a-0a409a227e52.roa
File:                     75d979a3-a4b0-3ea6-907a-0a409a227e52.roa (raw, json)
Hash identifier:          p5q45/tBK6pATLnfiCFI03YPOLkifp6MYV9ul7wBgtE=
Subject key identifier:   7E:42:BF:6A:14:68:23:F2:37:3B:9E:0C:A9:4A:23:12:F5:D5:D5:20
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161012C8A8D5BED829E2C80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/75d979a3-a4b0-3ea6-907a-0a409a227e52.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     11351
IP address blocks:        2600:6000:faac::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:01:2c:8a:8d:5b:ed:82:9e:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=d9cf836c-69cb-412b-8c1b-15cce6e31d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:82:4c:c4:35:13:99:6e:9a:b5:f0:b4:07:26:
                    49:82:77:0d:d9:aa:bf:d0:89:78:45:af:4d:41:c0:
                    25:d3:b4:65:3e:3d:a6:a1:d2:81:58:20:51:dc:7a:
                    e3:a7:94:c6:c5:4a:e4:57:4e:7d:47:34:8a:37:08:
                    cb:8f:11:93:38:be:5b:78:10:1d:aa:d5:f0:1d:8e:
                    84:b0:d5:6f:e8:61:cc:df:c1:dd:fc:e6:e6:a2:06:
                    18:8c:61:b4:a8:13:0e:35:a7:91:46:03:dd:c5:2f:
                    e7:31:4a:9f:7d:42:1f:a2:fd:0a:4f:c6:eb:d1:5e:
                    f6:e3:b7:3e:53:20:9c:35:73:9f:94:b2:f1:e4:e3:
                    50:4c:ef:9e:50:c0:97:c8:8f:db:d4:e5:b9:9a:3a:
                    58:21:53:4a:f1:6b:0d:23:df:3d:38:82:17:ef:88:
                    60:f3:0b:6b:af:8b:0e:27:65:b9:1e:6a:f6:14:dd:
                    85:46:4a:ce:18:2e:2b:83:f9:fa:40:72:df:b5:25:
                    fc:ff:9d:7f:d1:6f:a3:3b:0c:aa:58:6c:bc:5a:f6:
                    fc:3f:f8:51:9c:bb:5a:9b:6e:80:f3:0e:ff:2a:6c:
                    cb:e9:c4:ce:05:00:05:f0:36:64:d7:4f:ac:fc:a0:
                    70:c0:24:82:d6:a4:95:70:6a:92:42:fd:bf:c2:a2:
                    32:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:42:BF:6A:14:68:23:F2:37:3B:9E:0C:A9:4A:23:12:F5:D5:D5:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/75d979a3-a4b0-3ea6-907a-0a409a227e52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6000:faac::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:62:4e:73:e8:3f:1b:91:2f:11:37:d2:66:08:28:65:b7:96:
         3f:53:66:6a:7d:ff:ec:41:c6:36:d2:90:07:2d:12:aa:b3:33:
         07:95:60:9f:cb:8f:26:e7:5e:93:f5:77:28:62:61:e1:99:11:
         9e:b4:60:e0:7a:12:ca:6c:31:7e:d7:ac:41:01:c6:e1:60:a8:
         ac:5d:8c:64:31:72:69:f1:1b:b2:3e:f4:7b:57:78:2b:1b:82:
         d8:52:56:59:e7:29:4c:1d:a7:f3:09:86:12:37:5c:f6:9f:f4:
         ca:84:44:5a:45:25:20:73:f1:7d:b4:27:37:21:94:e3:a6:b3:
         86:7c:af:58:ef:e6:27:23:d4:79:08:e2:5b:a1:c7:c8:a8:fd:
         52:f3:e3:f0:4b:29:1e:4a:e0:63:38:68:71:46:fd:40:85:aa:
         97:94:de:0b:84:63:f4:b1:4a:c9:a4:27:8e:d3:05:b1:20:6c:
         4b:74:6b:eb:36:d8:ef:5f:dc:ba:45:fe:29:49:40:ad:fc:b8:
         8b:1e:f9:75:76:d6:ba:e8:62:8f:a2:26:87:04:50:f0:4d:cb:
         29:0e:0a:a4:45:a3:61:8d:45:ab:74:19:d4:a0:5c:a6:d3:b9:
         cc:ee:e2:42:b9:16:0a:e8:e5:91:bb:00:50:cb:72:9f:01:69:
         bf:66:18:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:19:02 2025 by rpki-client