Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28d1b2e9-680c-3cf8-b3f6-6d023c9c9f20.roa
File:                     28d1b2e9-680c-3cf8-b3f6-6d023c9c9f20.roa (raw, json)
Hash identifier:          +IVL7auFNNfPA/GlbgxiKUM9ub8NMwMTPlqCuiVb/5U=
Subject key identifier:   E1:DE:03:19:1C:29:89:4C:6F:52:35:D6:1E:C4:E4:E6:E1:9E:0D:4B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E962E7224C21C4AAFF4B760
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28d1b2e9-680c-3cf8-b3f6-6d023c9c9f20.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:814b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:2e:72:24:c2:1c:4a:af:f4:b7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=535fb369-c55a-4027-9cc1-129d8925002a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:4f:1c:65:72:50:0c:cd:76:26:d6:33:48:
                    24:21:8a:20:7f:9a:7a:6c:60:ac:1e:17:61:28:59:
                    bd:57:40:f8:92:21:92:00:b4:ab:da:7e:e6:98:fb:
                    34:36:5e:2e:4e:54:20:dc:d6:74:06:9a:d6:42:37:
                    a8:a3:a9:e4:e2:16:95:ac:89:8c:94:0c:81:6e:22:
                    b8:68:90:78:05:9d:8a:1f:6f:5b:9c:85:8e:c2:3d:
                    c8:22:74:f3:d1:46:45:af:64:d1:14:08:b2:a2:0b:
                    c2:ed:10:6f:70:cd:af:4a:4f:f9:41:f3:a4:5b:8f:
                    16:f7:0f:6b:b1:7b:ef:f7:2e:61:00:53:fa:77:5f:
                    51:0f:21:2b:20:44:5e:14:04:42:30:a8:10:4d:f8:
                    a9:25:70:88:2d:e7:df:2e:9c:c3:8e:0d:78:19:c6:
                    0d:2d:ec:a2:04:c5:ab:9a:e0:20:90:3d:c0:cb:6a:
                    7c:99:ed:95:02:43:7d:1f:3b:dd:3e:12:33:f9:51:
                    94:e0:1d:18:ff:22:be:f0:76:f4:06:7c:f2:dc:6c:
                    ba:07:6d:b6:89:bd:59:bf:43:d3:87:36:9a:5b:0b:
                    5a:d8:3d:b4:87:0f:33:1e:28:ef:3a:ff:2c:98:13:
                    88:64:b4:40:21:fc:48:e3:61:a4:a2:75:3a:75:46:
                    53:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DE:03:19:1C:29:89:4C:6F:52:35:D6:1E:C4:E4:E6:E1:9E:0D:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/28d1b2e9-680c-3cf8-b3f6-6d023c9c9f20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:814b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ad:d9:8a:9a:6e:8d:b9:03:89:0c:8f:c0:1c:13:1a:6c:95:
         bb:6d:05:a8:ba:64:5e:2e:bc:ca:a7:f1:20:d4:40:b5:a6:1f:
         7c:06:1a:85:bb:85:09:5c:5b:d5:4b:a7:25:bc:2b:47:21:58:
         5e:84:d9:77:a3:fb:f4:2b:4a:29:08:11:14:00:46:33:5e:fd:
         9f:d5:65:75:0f:d3:8c:f9:01:7d:81:3d:84:fe:f0:49:08:a6:
         82:b3:d5:13:ab:a6:94:33:a0:37:1e:62:02:ef:f6:2f:4f:db:
         1b:35:68:52:36:e9:90:bf:de:fb:46:ce:0b:7c:92:5b:0c:be:
         38:87:8e:5d:1d:08:28:10:72:30:ae:b7:a5:b5:36:32:3b:1e:
         59:5b:57:70:ef:f8:01:bb:7f:f0:61:56:40:88:c6:f6:93:f0:
         9a:64:7f:f2:8d:39:8e:e5:42:fe:3f:7b:a2:eb:91:c8:4a:75:
         6e:8e:4b:03:49:69:e3:5f:8d:07:36:8f:18:fa:b6:2b:f0:28:
         97:58:8c:0d:e3:97:cb:c9:1f:16:7a:2d:c3:d0:50:b3:ea:22:
         42:55:bf:c2:86:89:dc:80:55:e3:db:83:cf:a3:91:61:e9:cd:
         70:3a:06:85:24:12:73:a2:e1:ac:4e:66:69:31:51:ef:7d:dc:
         b4:d7:18:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:45:32 2025 by rpki-client