Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/26f32db4-0e97-34cb-a76e-e82e4a203f4d.roa
File:                     26f32db4-0e97-34cb-a76e-e82e4a203f4d.roa (raw, json)
Hash identifier:          oEnM5+UlczcXaM/IyoglkyEBmiaxEQJosArmcpe6JZs=
Subject key identifier:   96:A2:E4:26:43:B7:18:42:79:CC:B6:1E:D4:87:56:58:29:75:D2:D2
Certificate issuer:       /CN=4eac16a1-7e9c-4f8e-9e2c-913f3a675d18
Certificate serial:       010D0C9F4328584A7D15F8C4EF83AC2CB7ABB900
Authority key identifier: 56:83:24:37:A6:0D:F4:93:34:1D:6F:6D:30:C2:9D:0B:08:CE:72:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/26f32db4-0e97-34cb-a76e-e82e4a203f4d.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     11666
IP address blocks:        2607:f1f0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:f8:c4:ef:83:ac:2c:b7:ab:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eac16a1-7e9c-4f8e-9e2c-913f3a675d18
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=4a0356fd-edd5-4c64-b8af-7d77f548bbdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ac:1c:8e:e4:44:e7:36:dc:d5:e5:0d:cc:a6:
                    59:42:8f:56:ee:ee:f3:18:3d:ee:89:29:bf:b2:45:
                    7d:26:8d:e4:7b:d4:2a:21:31:60:df:a4:14:c2:c0:
                    5b:b7:a1:86:cb:59:81:8f:0d:02:e3:52:6e:90:67:
                    3d:e9:60:09:8a:3e:e4:5a:c2:d5:fd:bd:18:72:0c:
                    93:b8:af:05:67:da:5c:8e:b2:96:73:e9:bf:73:d7:
                    b5:18:80:45:9b:3e:6c:d9:4b:a3:38:ef:09:76:f5:
                    d5:e9:53:f8:20:5f:6b:5a:8a:8c:2e:47:0e:83:8e:
                    18:cf:76:b3:eb:6b:a7:b9:1b:9b:74:85:48:cf:32:
                    a5:68:f6:77:d9:8e:d5:40:cb:78:15:ec:e2:31:c6:
                    e9:0f:01:9e:bb:93:59:cd:fb:3f:73:11:da:f6:7d:
                    be:34:01:17:6e:aa:18:f5:cb:f6:d7:99:70:03:c1:
                    de:b2:a5:cd:67:41:ac:b8:1c:11:2c:1f:83:fe:8f:
                    8c:8b:6a:d4:24:9b:76:15:94:48:f5:63:24:6c:7a:
                    89:20:23:8c:5c:d3:7d:96:e0:33:75:4e:f7:ba:cc:
                    87:e8:45:47:1e:32:9a:df:a2:97:d9:89:2f:74:1a:
                    ba:a0:8a:5d:e9:e7:30:1d:ef:60:f9:32:a0:4f:fe:
                    a3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A2:E4:26:43:B7:18:42:79:CC:B6:1E:D4:87:56:58:29:75:D2:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/26f32db4-0e97-34cb-a76e-e82e4a203f4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.crl

            X509v3 Authority Key Identifier:
                keyid:56:83:24:37:A6:0D:F4:93:34:1D:6F:6D:30:C2:9D:0B:08:CE:72:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f1f0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:30:ed:d5:fe:cb:12:5b:0e:52:00:5e:50:4e:60:01:02:aa:
         fa:00:ca:93:9a:d8:26:bc:18:ba:7b:1e:8b:02:96:53:ad:28:
         5d:97:75:9a:fe:6d:e2:81:6d:f8:b7:22:fc:cf:56:ba:35:d4:
         46:8a:c0:3e:a9:6a:4b:d4:25:d1:ba:20:06:8e:06:be:49:a7:
         55:21:de:a2:12:48:56:8b:e0:ea:bf:3d:1d:0b:dc:6e:c3:13:
         43:a0:bb:3e:e4:94:26:3e:72:ee:6f:fa:e3:cf:2c:f5:9b:c5:
         7d:c4:f9:81:19:bf:c7:93:5b:14:00:1d:e8:ec:d3:4e:44:f1:
         0d:fd:48:d1:64:07:9e:2d:ad:4e:77:ab:96:be:0d:70:25:f2:
         5b:4e:93:30:76:32:39:62:ef:dc:f4:68:b6:87:d5:2d:73:75:
         29:11:dd:ef:d5:a0:23:a1:ca:d3:ca:7c:8f:4c:9e:b6:16:93:
         f0:18:1c:b6:f9:68:67:a6:94:93:7d:34:dd:f4:46:e3:be:5e:
         69:41:cb:29:c5:a7:fb:d5:36:d0:49:f8:01:cd:b1:45:ef:6d:
         98:34:d8:d0:eb:0c:75:1e:21:64:e3:c2:e8:e5:78:4a:c5:b2:
         38:94:ba:43:84:e1:4a:cb:7f:7a:cf:1d:d6:bb:c2:e5:93:4c:
         5b:01:59:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:13:35 2025 by rpki-client