Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/014e8ffb-add6-34df-827f-8a3fc4c30b8c.roa
File:                     014e8ffb-add6-34df-827f-8a3fc4c30b8c.roa (raw, json)
Hash identifier:          pA2IhPwHZhNiZGPBucI40qEkSFuQVTwFgWxbAYr/U7o=
Subject key identifier:   16:BE:A2:52:C6:96:7C:CF:A3:2B:DD:2F:90:B3:99:01:F0:A3:0A:81
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E965954C97CCAA9D09BBDC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/014e8ffb-add6-34df-827f-8a3fc4c30b8c.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:809e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:59:54:c9:7c:ca:a9:d0:9b:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=b4ca6e1d-9907-4d83-8681-532ca1d5b8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6e:3d:8f:76:f4:da:0d:5a:56:c8:77:52:89:
                    e0:9e:f0:3c:6b:63:86:c4:f6:ee:54:05:a5:32:fb:
                    94:ce:28:1b:85:64:60:2a:94:45:8f:0e:2e:54:62:
                    05:c2:79:25:e7:4d:05:80:34:d5:c7:a9:5c:4a:03:
                    d8:c6:25:8a:e8:6b:04:57:90:5f:3a:57:b3:cf:d6:
                    6f:84:81:29:03:50:d4:44:af:1c:ba:d1:e1:aa:a6:
                    85:53:5e:87:84:83:38:27:e4:3e:75:75:80:30:ac:
                    70:24:4d:ae:ba:26:2a:1d:54:f9:17:93:b6:3f:ef:
                    b0:e4:f1:7b:a1:cb:dd:a2:23:93:8a:f2:92:ba:63:
                    b9:de:0b:30:cd:95:4a:2b:96:a3:f2:f1:0d:c7:20:
                    a5:b3:c1:35:e2:61:b2:23:a8:76:60:66:e0:37:2e:
                    c0:58:3f:f5:10:c3:33:53:cb:ea:7f:78:47:a3:1c:
                    e5:95:ae:16:1d:11:e7:78:c0:ab:47:43:27:56:e5:
                    b3:69:03:87:55:04:68:75:0f:bd:f9:cf:55:d7:5b:
                    5b:2c:cb:2d:34:17:d3:56:f9:90:66:e5:c0:95:8e:
                    17:6d:cc:7d:8f:b0:44:87:61:df:17:53:26:c1:66:
                    11:59:88:f9:0d:57:93:98:31:8e:4b:9b:09:8c:eb:
                    9e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BE:A2:52:C6:96:7C:CF:A3:2B:DD:2F:90:B3:99:01:F0:A3:0A:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/014e8ffb-add6-34df-827f-8a3fc4c30b8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:809e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:73:ac:de:fe:8f:96:2f:e4:0b:17:a2:0a:c2:88:4a:d1:17:
         c6:64:83:d4:4b:8d:e4:e8:87:90:71:ca:44:b5:94:04:a2:7f:
         39:e1:d2:7d:de:a0:93:14:4b:bb:3a:7c:17:ad:66:fc:00:9b:
         4a:ee:1d:29:a6:c5:e1:b5:d3:e0:24:a0:3d:89:d3:c5:8a:3e:
         c9:d9:5a:b4:9c:7b:a8:7e:46:1f:58:5f:91:4e:38:c3:02:13:
         4e:d4:4a:5a:1b:4a:93:5a:65:de:f6:31:49:d4:8c:47:6c:bf:
         3e:b4:f4:38:a0:96:39:7d:e1:fa:8b:f9:55:d7:52:62:8d:32:
         55:36:28:5b:ef:a6:1c:a3:ef:89:fa:d9:b6:30:98:ea:2a:77:
         91:61:c4:8c:4a:5c:13:c1:f7:58:16:bb:1a:2a:29:7f:6a:37:
         55:ec:e5:97:11:fd:d2:0f:c4:ef:29:5f:18:bb:81:46:b5:58:
         f5:c4:f0:44:04:0b:a5:5b:78:b6:1b:a4:f0:85:2e:12:e4:d5:
         56:40:d5:01:cf:94:7d:24:24:e0:c0:43:04:7f:d0:6c:28:4f:
         d1:ac:65:82:36:0a:54:df:fa:02:f9:08:27:7d:e9:3d:76:77:
         cf:3d:2b:8a:29:1b:a4:78:fe:5f:d8:cd:4e:88:9b:46:ad:63:
         09:54:83:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:18:11 2025 by rpki-client