Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/045c24b8-a486-3aa2-95ef-291079741bda.roa
File:                     045c24b8-a486-3aa2-95ef-291079741bda.roa (raw, json)
Hash identifier:          Dbiy5AEZi22TNYf8ORBUUMCUd66v5CX5JuDd0D/zaOQ=
Subject key identifier:   E5:37:0B:15:37:9B:B5:E9:F3:CC:EB:1A:B8:61:1A:41:B0:2C:50:17
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9633D7F653A03D4816BC80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/045c24b8-a486-3aa2-95ef-291079741bda.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:8111::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:33:d7:f6:53:a0:3d:48:16:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=3d9d04eb-2360-4c4f-b559-bdc327286dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:53:ea:38:0f:7b:bb:45:60:1c:ec:76:51:03:
                    0a:5b:2a:6a:02:f1:b9:50:fd:5a:f4:e5:f6:37:65:
                    3b:87:c9:52:93:2d:ef:bc:b8:87:38:2d:fa:d2:9f:
                    71:ba:0d:9c:8e:9b:82:ef:e2:07:34:90:c5:7a:6a:
                    cb:c4:95:ff:27:43:f4:23:ab:a4:2f:22:ab:df:13:
                    53:7b:3c:67:82:be:fc:e1:35:50:bd:76:17:9a:1e:
                    9e:8b:a9:89:92:92:65:2f:3e:09:b3:68:ac:0b:38:
                    aa:05:e8:f3:a9:e1:3d:b1:2b:b6:89:00:a1:22:c1:
                    53:b3:c4:23:70:48:7c:c9:db:95:ae:12:62:00:72:
                    99:3b:66:a7:32:90:10:19:91:1a:b2:50:0c:b9:58:
                    78:c6:3c:31:7a:b5:4a:a0:08:0e:d5:f9:fd:b7:07:
                    23:9a:3e:a3:45:ec:18:e5:ab:7b:d7:21:4b:92:80:
                    95:d7:4f:aa:2e:34:1b:e4:e2:42:6c:4f:d3:51:0b:
                    81:5c:b4:d2:25:b7:ce:dd:93:98:97:78:84:f3:d6:
                    c8:de:5b:4d:f0:f0:29:ca:c0:a6:67:49:83:eb:c7:
                    21:49:d8:0d:90:30:78:f8:58:db:ff:7e:ac:ef:c1:
                    7d:9e:57:67:f5:e0:78:90:9f:b5:8a:9e:86:59:af:
                    48:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:37:0B:15:37:9B:B5:E9:F3:CC:EB:1A:B8:61:1A:41:B0:2C:50:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/045c24b8-a486-3aa2-95ef-291079741bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b5:ff:01:b6:23:12:6c:00:21:85:ba:85:0c:47:81:85:5a:
         f8:c6:5c:d4:80:94:ad:e7:e9:75:c6:f3:a8:16:c1:f2:6d:18:
         89:ab:9c:af:f0:c1:1c:2e:2f:a8:dc:6d:9e:a0:a4:f0:6f:6a:
         18:14:7f:be:e8:c1:7c:23:5c:5d:e3:4f:7f:25:59:ab:f7:6c:
         60:00:b3:db:f6:a9:fd:2f:fe:30:05:98:9f:9e:0f:e3:7d:bd:
         2d:6e:ec:bf:09:89:6a:ec:d3:b8:41:b3:b8:4d:4f:69:5c:6b:
         f9:9f:48:92:9f:b4:7d:34:e0:c6:7f:fd:cc:12:7e:dd:c0:fd:
         cd:b0:7a:b5:cb:4e:7c:ef:8e:c9:81:ab:a5:cb:19:49:65:59:
         0e:01:a6:b6:46:55:1c:a9:3c:89:34:03:1b:64:90:33:45:15:
         92:d1:ea:51:a4:a9:80:2b:77:d2:b5:14:59:c7:d4:8e:25:a9:
         f7:2f:ae:bd:1d:37:25:20:2e:83:72:9d:f1:ff:33:2b:1f:88:
         f6:7b:01:ac:dd:86:78:50:41:58:62:25:f8:ef:a3:42:05:80:
         37:3a:9d:3e:77:91:22:2c:79:74:65:d8:f2:11:8f:0c:5a:c4:
         12:e2:94:79:12:36:a8:59:3b:78:76:24:ee:96:95:2c:ba:75:
         e5:de:f6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:09 2025 by rpki-client