Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/71d70320-47a7-34ad-bc0e-65f795016969.roa
File:                     71d70320-47a7-34ad-bc0e-65f795016969.roa (raw, json)
Hash identifier:          EVKQ80rI4iPN6jH/NQG+b8EPktV75mY7y8NNr2I8+Fw=
Subject key identifier:   30:C4:C6:D3:9C:2A:B1:08:1F:40:A5:58:10:C5:3D:39:37:AD:C9:BB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E965E3767194A4A7F6ABD90
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/71d70320-47a7-34ad-bc0e-65f795016969.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:8004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:5e:37:67:19:4a:4a:7f:6a:bd:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=c1da6847-1d28-4f3f-91bb-a0e0a11138dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:16:35:f9:4f:a4:2f:06:fa:80:c9:8b:ea:6e:
                    cd:4f:82:43:e3:41:21:18:ae:2b:97:f6:4d:ec:b5:
                    b7:e9:fd:fa:f2:49:ab:1c:0d:36:99:1a:c9:a3:6f:
                    bb:46:45:64:58:f5:c7:68:b1:17:b1:bc:31:9b:10:
                    43:4e:13:7b:71:55:b4:7e:e5:a6:19:2e:89:c9:ee:
                    a6:88:6c:75:c9:3a:23:5f:78:52:3a:ae:c8:f3:56:
                    95:05:65:fb:27:e0:9a:79:32:ff:4a:76:89:7d:23:
                    ab:79:b3:37:d7:cf:bf:eb:07:fd:2b:c7:47:64:1c:
                    73:90:cc:be:aa:be:e9:f6:e8:e3:02:a6:40:0f:f2:
                    9c:ec:2c:b9:cd:d8:ee:c3:58:60:65:f1:bd:ed:f9:
                    14:30:3e:79:c2:cf:4a:ac:f0:32:36:64:65:7c:ba:
                    3f:1c:33:22:ba:04:a3:67:5c:62:a0:f8:2c:37:da:
                    44:a4:43:df:fc:9a:77:fb:81:92:b9:4e:46:a6:93:
                    70:ff:d3:f8:44:cc:87:50:87:b3:e5:00:f3:84:46:
                    11:27:c4:ae:d1:34:9e:25:80:88:e9:1d:c6:a6:0a:
                    8b:2d:8c:02:77:84:64:c2:81:9f:98:ac:9b:55:ca:
                    be:39:c6:06:4e:80:dd:a3:bb:26:d5:90:1d:2b:d8:
                    45:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C4:C6:D3:9C:2A:B1:08:1F:40:A5:58:10:C5:3D:39:37:AD:C9:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/71d70320-47a7-34ad-bc0e-65f795016969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:33:11:96:18:73:15:ac:b8:da:d7:24:1e:56:2d:6f:29:ef:
         0c:cf:a9:89:b7:f8:d8:47:ee:60:44:66:01:96:25:51:c3:7b:
         f8:16:e3:a4:d8:57:8f:0d:a3:8a:d7:ec:3c:f4:04:b4:b3:fd:
         a3:cf:c6:3c:21:15:90:f5:0f:cd:2a:2e:b7:0e:a1:e6:05:7f:
         44:48:60:a8:81:4f:2e:f6:bb:46:53:71:3f:7c:a2:6f:79:83:
         9f:75:e5:19:a0:9d:30:85:ff:7a:af:0d:0a:89:db:f1:74:27:
         41:c4:dc:d5:2c:a8:b7:f1:9d:22:a1:09:31:33:56:73:4e:6f:
         89:51:c9:c7:18:ab:8b:76:ac:db:cf:33:5e:70:64:60:b3:d4:
         c6:e9:14:2c:a2:fb:3a:b0:af:c0:ae:d2:05:5a:23:6a:2d:1f:
         1f:97:52:45:66:d1:cf:34:dd:0a:c1:3e:96:6a:1d:b3:19:b3:
         a5:36:d1:1a:56:bf:1b:5e:47:9a:02:f6:47:2d:c1:26:43:bf:
         29:58:ef:7c:c5:31:7d:6b:7e:ac:f5:dd:dc:ba:87:21:e8:41:
         2d:ec:60:38:ab:be:11:3d:a8:11:50:4e:19:75:65:0e:c4:c3:
         3e:97:ee:f3:f4:c4:ec:31:76:cb:9d:7b:86:ae:9e:24:ba:3c:
         d5:b5:3a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:10:49 2025 by rpki-client