Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/34b95ee8-66c2-3d4d-99fa-1890bcf86dab.roa
File:                     34b95ee8-66c2-3d4d-99fa-1890bcf86dab.roa (raw, json)
Hash identifier:          WNomk29dK0kjsHwPCyJwGLXAy8700uv0TZmRZGJ6tRI=
Subject key identifier:   D6:25:F2:0D:98:8F:B4:7C:39:36:69:BF:0E:33:E8:5B:B0:E4:E0:F1
Certificate issuer:       /CN=cf35609e-0e1f-484a-af8f-815006d97f11
Certificate serial:       010D0C9F4328584AB91B80DD5341E8995B08E800
Authority key identifier: CE:9A:08:7C:21:06:9C:08:3D:C6:79:BA:DB:B2:28:34:71:1B:2F:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/34b95ee8-66c2-3d4d-99fa-1890bcf86dab.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     14694
IP address blocks:        2620:4e:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:80:dd:53:41:e8:99:5b:08:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf35609e-0e1f-484a-af8f-815006d97f11
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=45a89354-de22-4485-ab60-6723518f3e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:e2:cf:e0:2a:1c:8f:43:f1:14:d5:85:3b:
                    1c:5e:71:b9:b2:e6:ee:fc:91:ac:f4:e6:11:13:51:
                    2a:c5:36:86:0f:3a:3c:ab:50:2e:91:6a:3a:75:1b:
                    27:b6:77:54:d0:9d:9e:ef:a6:ac:b8:31:b7:67:19:
                    0b:5b:4f:bf:ed:47:ea:2c:75:82:ce:c9:6d:ab:33:
                    60:ca:6d:f0:3f:43:19:1f:04:46:64:e3:cf:e5:82:
                    83:09:01:df:8a:b3:b7:ba:88:df:cb:1c:d0:3a:88:
                    58:78:d6:0e:2c:f4:84:67:81:b7:89:10:c6:d0:90:
                    6b:10:64:2e:3c:7b:fb:2b:8b:e8:84:2b:dd:9e:9f:
                    ce:76:51:85:3d:08:cd:10:b0:9c:a0:df:72:bc:13:
                    07:ed:0d:3d:7f:01:df:90:d5:d8:b2:66:b8:10:99:
                    23:84:59:85:a9:cb:5e:3e:b6:f5:3e:d3:43:d5:fa:
                    43:3d:29:51:f8:c6:7e:f9:73:e6:de:18:f4:fd:c5:
                    e0:2b:34:ee:09:e1:9a:0f:76:6f:34:d6:fd:d2:aa:
                    7c:43:89:c4:78:a1:fe:59:c1:63:2a:b8:a1:4e:16:
                    0d:87:d9:92:cc:88:36:86:2e:dc:57:10:b4:ab:d5:
                    fe:f1:b4:21:7d:30:32:e7:34:03:6e:ed:5c:d0:cb:
                    f4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:25:F2:0D:98:8F:B4:7C:39:36:69:BF:0E:33:E8:5B:B0:E4:E0:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/34b95ee8-66c2-3d4d-99fa-1890bcf86dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11/cf35609e-0e1f-484a-af8f-815006d97f11.crl

            X509v3 Authority Key Identifier:
                keyid:CE:9A:08:7C:21:06:9C:08:3D:C6:79:BA:DB:B2:28:34:71:1B:2F:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cf35609e-0e1f-484a-af8f-815006d97f11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:4e:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:23:f8:b6:00:7b:30:64:98:5e:69:31:ae:a9:10:7b:81:a7:
         9c:f7:96:74:c1:df:70:80:a9:15:38:96:3e:9e:ea:63:1a:07:
         7d:8a:06:46:fb:81:48:84:e9:be:45:44:cd:e3:e7:8b:a8:18:
         ba:dd:20:bf:39:dc:ed:89:32:14:c1:16:c0:0b:fa:a1:45:06:
         5f:6d:81:84:ae:7d:c0:81:52:33:5b:19:0c:e6:b7:48:d0:2e:
         bd:55:32:6c:f0:8a:13:b3:6a:a2:88:6f:c2:7b:8b:d0:2f:97:
         10:22:48:a4:6c:44:a6:47:2c:30:1e:d9:75:00:24:3d:e7:fd:
         e6:52:0e:85:0d:d2:59:a0:e9:2f:2c:16:d3:fc:c0:db:54:46:
         da:5c:25:69:ea:8a:17:1b:ae:66:b3:10:d7:9d:bc:f4:cd:51:
         03:41:b5:77:02:25:24:ae:0e:33:12:52:1d:8a:8c:bc:80:92:
         1e:79:34:99:9a:7e:1a:7c:ed:0a:77:ff:32:a4:fd:0d:9d:4c:
         08:04:ea:5f:55:fd:16:b9:fe:32:b4:81:e7:1a:13:bf:14:27:
         58:32:79:bd:fb:45:61:d7:99:c0:20:b6:80:77:a0:f8:be:82:
         7e:46:c3:f4:c4:1b:29:ec:69:98:28:2c:25:da:58:b0:72:6c:
         c0:d9:f7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:53:07 2025 by rpki-client