Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7c1e0126-d41e-3924-99a0-e7a1cd008156.roa
File:                     7c1e0126-d41e-3924-99a0-e7a1cd008156.roa (raw, json)
Hash identifier:          +dASW47BQzbsVWdfZx4qnC423cZU2Oebs7xK5koegAk=
Subject key identifier:   31:C5:E6:01:01:8A:52:1E:43:31:19:55:4B:D9:DB:85:D6:97:2A:B1
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584A7A4B468CE104B0D473AFC428
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7c1e0126-d41e-3924-99a0-e7a1cd008156.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     394437
IP address blocks:        2606:a780::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:46:8c:e1:04:b0:d4:73:af:c4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=faa9d533-5283-4b64-84bf-100408c164c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4b:90:7f:85:01:4a:8f:3a:c5:a8:a5:01:92:
                    67:96:78:03:cf:9c:95:91:02:cc:89:80:41:cd:54:
                    25:da:f0:7e:a5:cd:d2:e8:2a:1d:0d:96:0f:0d:e0:
                    b3:0e:4d:c9:c9:9c:2c:11:fa:b9:0f:77:43:f2:af:
                    b0:11:7a:7d:45:3c:33:c9:c0:28:77:cb:34:80:37:
                    95:52:b7:7e:31:69:5b:d6:19:db:bf:bf:54:ce:64:
                    2f:6c:5f:0a:2d:e7:6f:a6:9e:9a:f3:f4:5b:99:8a:
                    92:c8:82:86:75:87:9d:e3:12:37:c2:a1:e7:44:92:
                    9a:fa:fe:32:c5:b7:86:01:41:95:af:c2:c2:6c:b8:
                    c5:f3:61:b4:d6:91:b9:97:b1:90:3f:cb:95:52:9f:
                    9f:5d:79:93:21:24:50:61:d1:f4:35:e8:fe:5e:51:
                    b7:ac:89:dd:ba:c5:70:3c:0f:c9:b1:42:56:c1:bf:
                    85:34:09:07:60:97:ef:14:53:4b:ea:ad:ac:53:f5:
                    80:b0:b5:5c:45:ed:a2:c3:ba:ad:5b:71:00:a7:3e:
                    de:ef:dd:8b:61:41:57:95:d7:e4:30:43:4c:7e:8a:
                    9b:f2:a3:0b:3e:ca:79:36:81:5d:d6:3b:42:15:70:
                    61:4b:e0:1d:be:80:de:cd:40:67:cb:60:17:f8:9e:
                    a8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C5:E6:01:01:8A:52:1E:43:31:19:55:4B:D9:DB:85:D6:97:2A:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/7c1e0126-d41e-3924-99a0-e7a1cd008156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:68:d2:36:70:29:be:82:89:d1:26:8a:7a:40:33:1b:97:cd:
         85:b1:2c:ca:21:6a:f4:06:89:2b:bd:c6:ae:64:e3:b5:6c:07:
         cb:de:2c:f7:96:70:fa:89:7a:bb:e3:4a:bf:1d:08:d3:e5:98:
         22:93:3b:02:8e:77:26:15:57:d1:fa:46:28:0f:89:c3:a3:f1:
         a6:23:7d:2c:fe:aa:7c:4b:c3:79:af:5e:37:ae:e5:49:ba:ce:
         e8:f1:10:38:e7:12:7d:bb:7d:af:6d:4f:92:db:92:c0:83:a0:
         6b:ac:1a:c3:2b:4d:85:d5:0c:ea:24:44:a3:a7:4c:c0:d0:ce:
         8a:63:e4:6c:45:f1:4e:ae:cb:56:1e:37:e4:cf:e2:be:2c:cf:
         46:9f:7f:51:53:07:50:32:05:b6:6a:af:6c:71:ca:15:cb:a2:
         c0:0c:e6:89:73:47:16:e9:40:3f:6c:fe:23:27:07:fe:ab:84:
         bf:28:32:43:d6:27:42:c3:f0:4f:9d:e8:84:89:18:52:6b:73:
         2d:a2:c0:52:50:ca:89:48:b2:0b:0a:8a:b9:35:2f:4d:3b:7f:
         4f:55:37:1b:39:bd:79:08:eb:48:59:dd:3f:c6:c0:41:c2:3c:
         c7:fb:02:5d:6a:60:35:55:f6:35:ab:60:62:87:2b:b3:2a:e1:
         5e:b7:c9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:06:52 2025 by rpki-client