Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ffd406a8-5a81-3c59-8ede-ace6695d0187.roa
File:                     ffd406a8-5a81-3c59-8ede-ace6695d0187.roa (raw, json)
Hash identifier:          etV3L3l0Jco4PMr44zSy9FHI5q0Pr+cvZgBaSLs4axQ=
Subject key identifier:   53:B0:8A:9D:87:89:2A:7A:4D:40:78:78:8D:36:88:E2:40:5B:96:2F
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584AC2E0EF2B1B93C0E90EBC6600
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ffd406a8-5a81-3c59-8ede-ace6695d0187.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        2605:dd40:8990::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:ef:2b:1b:93:c0:e9:0e:bc:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=80c01191-6321-450b-9b99-d781ab419cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:eb:ef:80:fe:15:f8:e8:a9:38:d8:fe:0a:84:
                    95:37:4a:3e:8f:ee:f9:0f:19:84:64:7a:a2:df:17:
                    c5:66:86:20:70:e2:fa:9b:81:31:ca:d8:56:3a:cb:
                    04:7d:27:5d:66:81:0d:a8:3c:de:a7:bc:32:7f:d8:
                    e0:97:f7:ef:df:3a:28:56:80:5a:7f:a9:ef:f4:08:
                    ac:fe:65:91:12:fc:34:7f:64:17:95:cf:b2:8b:e7:
                    9d:d9:02:48:c5:ad:72:35:78:86:5e:cd:6c:8f:07:
                    d5:9a:3b:29:08:60:80:cf:6c:d1:80:4d:5e:ac:3e:
                    99:47:25:16:96:89:2c:51:eb:a1:37:09:df:9d:33:
                    5a:69:4f:b6:ab:10:dc:be:7f:5c:9a:5e:da:2e:7a:
                    d3:06:6d:7a:d6:97:a7:de:b5:a3:78:ab:af:9b:6f:
                    1c:32:aa:50:c5:8f:ea:02:75:de:9c:cb:10:4c:43:
                    64:dd:cf:e6:ab:0c:17:19:05:8b:b3:fc:5d:08:db:
                    ac:5e:d8:e6:78:e0:b6:cb:68:e2:df:38:f8:3f:da:
                    3f:0c:c2:f6:89:25:e8:f9:15:fc:c8:fa:85:ef:ed:
                    54:8e:d9:63:91:6c:70:1c:a8:3e:d0:4b:a2:37:95:
                    96:4c:74:fd:93:86:36:6a:84:ba:d8:43:0a:81:f0:
                    1a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B0:8A:9D:87:89:2A:7A:4D:40:78:78:8D:36:88:E2:40:5B:96:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ffd406a8-5a81-3c59-8ede-ace6695d0187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8990::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:90:94:d0:8d:3a:0e:1a:24:30:0e:4e:6a:10:02:3c:ff:e8:
         58:de:43:ea:de:da:34:c2:36:fb:1e:6c:47:57:3d:a3:cd:cc:
         b5:a1:40:18:a7:c6:ce:c8:ca:82:51:cb:90:66:49:21:4b:a9:
         6e:a2:d9:fb:29:b7:cd:3f:76:70:ba:c9:b8:14:3c:68:2c:19:
         ea:f3:56:01:ae:bd:bf:24:a1:67:4e:7a:07:37:ce:6f:6c:48:
         f2:6b:54:e5:68:5f:31:ca:bd:70:af:c8:f6:b1:3c:79:2e:4c:
         e8:5e:bd:5d:e6:9d:3b:b8:60:5a:69:79:82:07:e2:24:ae:41:
         4c:cf:62:6d:87:5b:0e:15:75:ea:2e:87:49:32:cc:b7:1a:25:
         e4:cf:d9:db:ed:27:f9:68:50:09:fe:75:18:50:ec:e8:d7:a5:
         25:36:0b:5b:dc:3e:b0:16:eb:85:e8:5c:a6:5c:f7:76:00:6a:
         2c:f9:e5:eb:99:df:7a:02:ce:3d:fc:6d:51:6b:f1:01:01:1e:
         2c:0b:16:45:f7:16:13:58:e4:8c:e8:fc:d3:48:06:3b:77:21:
         b7:aa:aa:59:30:d6:90:45:b3:99:a5:0a:c0:9a:7f:27:a3:1a:
         9d:10:21:09:8a:e1:df:c1:bf:39:97:21:54:99:55:3e:2a:61:
         53:a3:3b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:56:57 2025 by rpki-client