Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/901e5e2a-7645-3d9f-9a9f-701897294a89.roa
File:                     901e5e2a-7645-3d9f-9a9f-701897294a89.roa (raw, json)
Hash identifier:          bJGKV2IHL4RG8g+CmDVXQbbx8QGlPKOU7xbv+QOGjWg=
Subject key identifier:   F1:52:D0:86:A0:C8:11:47:A4:01:5C:6F:13:24:55:61:F3:67:0A:5D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E965BF479695FF83C087900
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/901e5e2a-7645-3d9f-9a9f-701897294a89.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:81f2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:5b:f4:79:69:5f:f8:3c:08:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=a7178463-6c0b-458e-a2a8-3bfd1401c97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d1:21:d5:90:e6:e4:3d:0a:f2:4f:88:29:3b:
                    f9:cd:5e:93:dd:1c:d9:1c:53:7f:35:11:96:64:36:
                    7c:2c:4d:f7:da:78:7b:ce:cc:af:9d:5f:e4:85:a9:
                    00:c7:dc:74:e5:8e:08:37:2e:3a:82:7f:93:59:59:
                    46:4b:13:4b:4a:b9:c5:70:e0:d8:db:f5:ab:07:a1:
                    43:b2:8b:00:86:e6:cc:25:d9:73:73:f6:cb:a3:28:
                    06:33:c6:ad:ce:ab:40:70:38:f6:57:0e:af:bc:5d:
                    a4:f5:44:69:e8:93:7b:cc:d1:38:f2:b6:88:d4:21:
                    95:90:a0:c0:8e:d2:2c:11:7d:86:8c:f5:e5:37:71:
                    07:c9:24:03:d8:27:b2:3a:db:83:fd:d6:ab:18:6f:
                    90:e9:37:e0:9a:17:6c:c8:d8:72:31:ec:e8:56:4b:
                    fb:ef:61:5e:3c:1b:c2:e1:9c:af:aa:8f:7c:6e:ba:
                    47:09:6d:77:ba:1d:55:88:29:4b:1d:a6:2f:21:4d:
                    b6:24:69:3f:ae:02:64:d2:9a:99:fe:d5:47:6b:63:
                    75:fc:5e:af:f6:c3:a5:27:01:13:d3:b5:72:69:f3:
                    32:de:d6:10:4f:73:88:d7:f3:f6:c1:fd:1d:6c:17:
                    a8:c0:f6:3d:ab:aa:46:93:3c:ef:cb:16:03:ca:a4:
                    ab:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:52:D0:86:A0:C8:11:47:A4:01:5C:6F:13:24:55:61:F3:67:0A:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/901e5e2a-7645-3d9f-9a9f-701897294a89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:81f2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:43:a5:c4:7b:6e:50:33:a9:67:13:df:f0:1f:c3:52:cf:49:
         99:20:fa:e0:a6:3a:1e:b6:93:8f:70:82:0d:a0:5f:cd:3a:4e:
         1d:58:3f:57:a2:09:38:3d:da:fb:84:f8:7a:f1:59:6d:44:25:
         cd:e4:c3:3d:19:ff:96:50:f5:14:0a:9c:5e:9c:24:29:c7:4f:
         d7:23:ca:ee:99:c7:62:04:4c:82:74:43:cc:8d:8b:72:ed:3e:
         00:ae:8f:09:1c:73:55:47:cb:c7:22:e4:3c:2c:9f:0e:98:b5:
         ff:c7:1e:e2:e7:0a:b4:0d:c9:45:b1:f3:02:54:d6:cd:55:84:
         81:8d:3f:48:52:4b:15:c3:64:56:d3:f8:d8:83:f4:cd:8e:72:
         23:de:0d:1d:d8:d1:27:3f:4a:a9:4f:0a:19:75:6f:a3:b6:2f:
         7f:a5:11:57:60:e7:43:82:29:b8:29:4c:a8:ab:b2:21:f9:69:
         c6:72:9e:ef:cb:17:5e:78:95:74:fe:3f:e2:83:a6:25:f6:14:
         5a:6e:eb:02:6e:8f:54:2a:0d:72:0b:1c:cd:3b:7a:88:1e:54:
         45:04:e4:6e:e1:63:92:d0:0d:79:cd:80:0a:28:84:c3:6e:dd:
         c0:64:25:2f:a3:ec:5f:29:26:de:b3:a8:9c:f7:08:a3:06:59:
         0a:16:37:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:05:42 2025 by rpki-client