Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/84cd9e47-eb6e-305c-9c0b-17cf502edbd3.roa
File:                     84cd9e47-eb6e-305c-9c0b-17cf502edbd3.roa (raw, json)
Hash identifier:          GwDBfHrcDZFJyj0sj3KET2QNT0RGA18iP8DSf4XIr2A=
Subject key identifier:   8D:89:91:4A:A0:3B:DE:D4:7A:93:44:01:AC:5E:0F:BB:CC:E1:F8:24
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E963145DB4E09E588D4C820
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/84cd9e47-eb6e-305c-9c0b-17cf502edbd3.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:8015::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:31:45:db:4e:09:e5:88:d4:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=0009ce91-0c98-4550-ac59-a267a42386b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d8:63:60:ce:22:2f:94:9c:b0:0f:6d:21:59:
                    52:ad:37:2a:4d:d8:80:81:5b:34:97:7b:62:b8:49:
                    c0:60:ab:6a:86:9f:ae:fb:0f:c0:e6:d4:19:83:8e:
                    a6:ff:98:e7:d6:fd:33:89:3c:e8:9b:05:a8:a1:a7:
                    a8:7f:9b:b8:4a:b4:a6:b7:48:3c:1c:43:1a:ed:97:
                    ee:c3:bc:1c:cc:48:45:de:06:38:a0:5f:28:36:2c:
                    3c:9c:f3:3a:d2:39:70:fc:9d:72:38:6c:74:db:b2:
                    f6:40:d0:25:a2:55:1c:d7:e3:07:8a:f5:13:8c:29:
                    c7:5e:fd:7b:de:10:b7:17:83:1f:d9:05:86:ab:03:
                    2d:8e:e0:64:70:26:f7:e1:6d:93:0d:1a:56:9b:50:
                    31:11:e8:3d:51:bc:84:bc:2d:ee:b1:72:10:1d:4d:
                    24:87:85:de:da:ce:e4:b9:65:63:a1:09:ea:13:81:
                    c9:da:43:e5:4a:db:83:d6:32:ce:da:a0:78:c5:e5:
                    c7:5f:d4:08:da:ae:5d:65:1e:43:ab:db:4c:e6:51:
                    68:80:8d:d4:c8:b6:87:28:2b:0c:74:90:41:66:87:
                    9c:5f:35:21:18:6a:f8:e4:dd:66:75:a1:bb:c5:5b:
                    0e:30:46:bd:f6:aa:2a:a8:2b:e3:d7:48:1a:10:87:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:89:91:4A:A0:3B:DE:D4:7A:93:44:01:AC:5E:0F:BB:CC:E1:F8:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/84cd9e47-eb6e-305c-9c0b-17cf502edbd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8015::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:dd:eb:d4:19:41:1f:8c:a9:b0:ec:e9:02:9c:f5:70:ef:50:
         7c:43:00:89:d4:a6:d5:86:92:ef:e0:cd:88:b4:2f:9e:70:94:
         03:6f:31:50:2b:74:a7:cd:12:81:98:fc:09:44:67:14:29:f0:
         b7:04:0b:02:1c:9a:a5:30:3d:9a:05:57:71:b9:7f:58:eb:80:
         cd:bc:f4:b8:71:ba:35:76:0c:cf:25:63:ee:71:40:b9:a5:62:
         62:e7:35:04:34:f2:b7:0a:ef:47:fc:0e:99:80:8a:51:f7:be:
         2a:f1:65:d6:d3:c3:2c:2a:3a:10:1c:4a:0e:5c:3b:73:b8:0b:
         a4:43:37:40:57:8a:fb:93:9e:c1:a2:78:d7:ca:ad:f0:66:77:
         90:17:97:79:c4:fe:1c:48:21:45:f1:ea:96:51:54:3d:f7:93:
         67:79:3b:fc:a4:df:2f:eb:4e:3e:79:52:ad:fc:3a:99:65:d5:
         bc:a3:1f:ae:69:19:26:94:a7:dc:d0:c4:a3:7a:cb:6e:0a:6e:
         c8:19:4c:e0:99:f7:f0:17:a2:31:d8:f1:25:58:d6:54:f0:ad:
         af:25:55:6d:cf:09:bd:91:92:4f:2f:50:05:66:aa:b9:ed:c9:
         e5:14:bf:f7:f3:06:04:a4:6b:a8:9f:c1:b3:14:61:74:3c:2c:
         f1:6d:bd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:09 2025 by rpki-client