Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9d5d2efc-27d6-3076-8cf6-92b644351617.roa
File:                     9d5d2efc-27d6-3076-8cf6-92b644351617.roa (raw, json)
Hash identifier:          B+EOGVZadCrI8gloaC36DCM1o79/9I5F2KjtlDuHqIM=
Subject key identifier:   94:7D:C9:1B:51:85:72:FE:AE:22:32:E8:51:AB:81:DB:B5:80:10:3E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E965F10D3898AD246A5E380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9d5d2efc-27d6-3076-8cf6-92b644351617.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:807a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:5f:10:d3:89:8a:d2:46:a5:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=8cb0aa94-46e6-4dc9-b58c-645783a92c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:1c:c4:cd:99:d2:d6:c5:89:a8:b3:f3:5f:
                    a6:f8:d2:a6:9f:a7:48:79:28:d3:89:69:9b:1d:41:
                    1b:26:9c:f9:1b:93:28:c8:f0:33:62:0a:e3:86:b4:
                    88:96:78:ef:ba:6d:70:9f:3d:57:d7:4c:11:cc:4d:
                    23:9b:dd:71:8e:e4:73:64:e9:0e:9e:0f:7d:4e:90:
                    29:ee:9d:ee:e3:a2:3d:3b:cf:13:4e:3d:c4:27:ec:
                    f1:c3:eb:91:cb:76:77:3e:95:9e:e4:38:53:ab:30:
                    9f:62:2b:42:48:d6:2d:59:b0:e6:28:91:0e:65:70:
                    cd:72:c3:8e:fc:a5:58:5f:f0:12:d1:9e:93:ea:da:
                    a8:6a:c1:08:71:9b:fb:3c:36:30:ee:ad:80:93:52:
                    62:f0:98:c7:3a:ee:ca:08:51:03:82:24:f4:7c:ec:
                    33:21:a0:18:1e:51:83:ce:ce:a1:8b:15:18:eb:b9:
                    08:f0:b5:d2:32:19:12:a5:72:98:62:08:73:c2:75:
                    3d:5c:2a:c7:fd:64:24:86:90:9f:ac:05:b6:e5:0a:
                    c4:d4:48:12:cc:07:73:6f:11:e6:86:2a:e9:68:d9:
                    a8:5a:76:15:2b:c2:26:2f:a5:30:8b:a6:83:9c:e6:
                    0a:65:67:e1:2a:fd:8c:77:e8:fa:8f:68:a8:3d:10:
                    c5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7D:C9:1B:51:85:72:FE:AE:22:32:E8:51:AB:81:DB:B5:80:10:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9d5d2efc-27d6-3076-8cf6-92b644351617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:807a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ab:13:1d:f2:db:bb:ce:a4:95:ea:29:d4:7f:44:7f:5f:dd:
         c7:6d:cd:46:85:76:ad:53:bf:2b:28:a2:c4:6f:65:9e:ae:f9:
         85:17:92:87:75:cd:3f:7c:67:98:d5:7a:51:a9:79:a7:ca:5a:
         22:30:32:9c:27:65:21:8f:18:5c:7b:d3:17:6f:03:ce:00:82:
         ce:93:af:23:a2:f0:31:1c:f8:b5:62:6c:97:ae:81:54:80:44:
         83:15:d5:7c:d8:68:06:77:71:ab:17:f1:a0:22:7f:c3:7e:30:
         8f:9d:a4:ee:d0:31:7c:49:98:03:ca:b1:3c:92:34:b5:fb:b8:
         48:49:db:e5:83:0f:82:bd:80:c4:4e:24:a3:5b:7d:5e:e0:b4:
         f9:af:88:27:51:e4:5f:5a:ca:ab:e4:ce:99:25:e6:c5:b8:76:
         36:06:d4:c6:5a:39:ea:13:d0:65:e2:3a:f0:5f:2a:da:3e:3e:
         cc:f0:9f:bb:4a:06:41:03:82:ce:81:e2:6c:f9:ad:d3:6c:ca:
         b8:e0:26:d7:81:0b:0f:73:a9:2a:9d:e2:87:53:3c:04:16:c8:
         e7:9d:95:06:4c:67:39:b4:a6:1b:62:64:0c:79:26:50:e8:d9:
         89:49:4f:3a:85:9d:be:68:95:c9:20:de:b6:af:f7:7c:89:73:
         2c:49:00:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:03:31 2025 by rpki-client