Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/38008c1c-3702-3dd3-986f-3285b2a1ad67.roa
File:                     38008c1c-3702-3dd3-986f-3285b2a1ad67.roa (raw, json)
Hash identifier:          RF+Brk+jtRmv0uzSAYlRd22lOp6ZzMrDKnB4Uof/2yU=
Subject key identifier:   02:BF:6D:8D:6D:EA:68:6B:1A:64:E4:A5:F0:B7:61:71:32:AF:AA:DE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E965671E35B8D3FA69168F8
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/38008c1c-3702-3dd3-986f-3285b2a1ad67.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2607:f098:50fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:56:71:e3:5b:8d:3f:a6:91:68:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=c90ec267-55ac-4b3c-a2e1-036a4e013ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:7f:ca:26:ba:dd:9a:3b:e1:6d:73:4d:18:
                    6d:b9:de:19:2e:57:39:3e:3a:35:8e:d2:91:fe:ea:
                    97:68:6f:50:a4:91:f8:c4:24:39:d5:aa:f3:cc:52:
                    b1:63:15:91:66:0a:af:78:0d:de:f8:9d:79:d3:ce:
                    f6:3e:e4:1f:f9:0a:10:79:be:a4:4a:7b:e7:0b:d3:
                    e3:bb:d1:ab:98:29:a3:11:83:51:13:56:80:27:58:
                    37:5d:ea:1b:f6:8f:c9:f1:d1:e9:4a:70:d1:10:70:
                    5c:84:a7:46:13:8a:07:51:06:d0:a9:ef:38:a0:aa:
                    16:dd:e4:6e:f6:f3:c8:37:3b:d8:b3:a4:e2:e5:d8:
                    76:37:93:86:0a:0a:3c:ef:0d:18:23:da:72:97:c3:
                    9a:ff:fc:e5:cc:fc:59:f3:54:5a:aa:2b:c9:2c:ee:
                    09:9c:f8:1c:49:46:d4:da:93:87:b0:ce:1c:b9:dd:
                    6a:fe:b9:0e:7a:b7:85:a8:0f:45:c1:e8:84:b2:9f:
                    f9:fa:12:ae:b6:db:72:10:b4:b1:be:52:50:d7:5a:
                    62:78:49:57:f8:80:8b:9c:ce:55:14:02:d7:04:01:
                    3e:5e:69:15:2e:31:df:ab:40:a1:d8:cf:d6:e7:8b:
                    57:6c:3f:7f:e9:8b:da:28:42:2f:21:e3:d4:57:5f:
                    2f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BF:6D:8D:6D:EA:68:6B:1A:64:E4:A5:F0:B7:61:71:32:AF:AA:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/38008c1c-3702-3dd3-986f-3285b2a1ad67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:50fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:7f:a1:d6:4e:55:94:dc:a4:e1:3e:5c:82:bc:fc:ca:89:da:
         73:32:8d:85:e2:39:6a:9f:e3:6a:28:ec:2c:c5:2a:aa:6d:8f:
         50:40:0a:5c:23:40:c7:21:90:ce:c7:db:72:8b:31:c1:95:66:
         6b:4a:c9:19:ab:d9:c0:74:96:ee:c1:2c:bf:30:c1:16:4b:55:
         4a:c2:6e:97:ae:41:ca:bf:b3:cb:e8:03:32:4a:f3:f9:7e:99:
         bf:97:4d:a6:cb:f0:98:7a:03:3d:d1:fe:76:f6:49:68:1d:e9:
         35:3a:08:ac:cd:50:eb:86:26:f3:82:c1:35:05:57:8c:fd:20:
         66:65:b3:2a:37:e3:f6:ee:97:50:c8:8d:85:39:e9:9c:38:1a:
         5f:e8:de:c8:f7:bc:9b:48:0c:e4:9b:24:24:82:cf:52:01:b3:
         36:5e:3d:78:08:ca:90:53:8f:cd:df:5f:d0:04:c7:80:78:eb:
         ed:32:74:dd:c6:0d:fe:b1:41:65:cc:64:72:06:56:78:a9:e2:
         6d:3b:71:ff:45:83:4b:b0:af:e3:95:d1:32:c7:b6:32:0a:88:
         62:ac:df:1b:7c:c0:5b:be:82:96:9b:bd:00:43:8d:c4:d0:c8:
         ae:a4:4a:e1:f2:36:a7:3b:df:03:6f:34:21:ed:26:ab:8e:d3:
         19:c6:09:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:36 2025 by rpki-client