Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac123068-f019-3471-a182-37db0c0980aa.roa
File:                     ac123068-f019-3471-a182-37db0c0980aa.roa (raw, json)
Hash identifier:          6eA5Z+YhWOSLZTW/Ib8tgtA4ZGwxIns2am2VtzfItSU=
Subject key identifier:   84:B7:F7:D1:34:C6:14:9A:BA:C4:71:60:5F:FE:16:E2:A1:15:1B:07
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E962D454E1511BA211D9580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac123068-f019-3471-a182-37db0c0980aa.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:80be::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:2d:45:4e:15:11:ba:21:1d:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=b843079e-dbbb-40b3-9d3c-348eeaca770f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:be:a9:4e:8d:7e:54:15:c5:52:5c:b0:cd:
                    f9:c7:60:7b:a4:1f:ff:2e:15:8e:26:e5:0f:48:ca:
                    9c:5d:d4:87:ae:c6:e6:76:a5:30:b3:95:46:d0:a8:
                    f1:52:e5:ad:e9:77:cf:6f:4a:56:28:de:6a:c8:f0:
                    ce:1b:f2:50:a9:29:06:a5:01:00:65:0a:ae:3d:11:
                    d9:95:ba:4b:53:3b:4a:2e:0e:a2:0b:1d:14:18:9d:
                    81:d3:3a:41:54:bf:f4:83:e2:76:3d:8f:fe:45:4f:
                    33:d3:79:4e:e5:54:54:1f:33:f2:22:c3:14:df:19:
                    66:f6:ce:74:d1:b4:50:32:d3:b2:dd:f3:af:ce:2c:
                    69:9f:1d:30:f1:16:ce:66:af:1e:06:ef:a9:44:d5:
                    4c:cf:5e:81:33:b2:4e:86:cb:2f:4d:7e:13:76:98:
                    01:2a:08:97:89:b2:7d:21:49:a5:b1:f5:9d:dc:02:
                    33:38:b7:55:e8:73:2b:7a:80:33:79:94:b3:a0:c7:
                    39:ed:d5:ad:08:83:1d:3f:8b:0e:dd:e2:06:8d:26:
                    93:50:5c:a6:7e:09:c8:20:d7:ff:f0:d6:c9:6f:4e:
                    44:68:77:a3:7b:aa:3d:04:4e:a8:fe:5f:4e:76:27:
                    10:96:eb:eb:43:7c:f8:4e:be:3e:09:30:b1:16:8d:
                    c6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B7:F7:D1:34:C6:14:9A:BA:C4:71:60:5F:FE:16:E2:A1:15:1B:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ac123068-f019-3471-a182-37db0c0980aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80be::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:cd:79:2a:d2:75:98:7d:42:98:dc:51:13:1f:22:1f:da:d8:
         ed:b1:e0:85:df:b0:62:cc:12:63:33:cf:4d:77:d3:bd:f8:bd:
         36:d8:77:80:a5:69:c1:e3:43:cc:58:b0:f7:bb:55:9a:2a:ea:
         65:3e:bd:6b:14:6d:ff:43:e9:65:c7:83:85:18:13:7e:b5:8a:
         3a:4c:7b:f8:a4:4d:ce:fd:84:2d:5c:c8:d7:46:c5:ac:73:68:
         d7:0c:cc:9c:97:65:bc:7a:64:53:b5:73:2d:13:a8:ee:00:e7:
         5e:2c:2c:b8:3b:03:06:9a:2f:ed:52:88:48:25:42:9c:fb:76:
         60:ab:74:5d:79:16:c6:50:4a:84:6b:73:b0:be:4b:5a:b5:92:
         4e:87:1b:af:0e:37:81:97:39:8e:ea:2f:d5:de:c1:c7:89:bc:
         bd:03:a9:cb:d3:a2:22:9a:db:64:cf:be:85:60:89:8f:c2:84:
         ed:3c:c3:5e:1a:b3:c7:ea:07:ff:7c:00:0d:fa:0e:ed:1c:34:
         1d:5a:23:71:7b:86:4d:cb:4a:e3:cf:e9:db:44:6d:e2:d2:34:
         74:70:92:31:9b:c1:bb:c0:9c:66:a3:7e:e8:c1:f4:f5:c2:56:
         86:37:54:1c:bb:87:91:9e:3e:3a:2d:05:6a:a8:11:66:20:b3:
         b4:37:40:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:30:50 2025 by rpki-client