Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e055dc0a-fb0e-3c8a-bda9-a9fb5da0b6e5.roa
File:                     e055dc0a-fb0e-3c8a-bda9-a9fb5da0b6e5.roa (raw, json)
Hash identifier:          vSadVh+QzzGYuaRIypTU4PO2JUK6az2V9bLbArJOa24=
Subject key identifier:   92:8D:35:F8:B9:2C:85:1D:35:C4:C8:C7:FC:D5:AF:2D:75:AF:7B:79
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9635FF457C6BC6793CC840
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e055dc0a-fb0e-3c8a-bda9-a9fb5da0b6e5.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:8584::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:35:ff:45:7c:6b:c6:79:3c:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=dfccb767-ae6a-4953-8eb5-266d580c1118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:75:82:5c:32:5f:00:8e:da:03:b8:9a:47:56:
                    93:e5:3d:4c:72:29:e3:2c:ce:11:da:2c:18:82:3e:
                    14:c9:2d:ba:da:92:84:98:c5:33:54:25:46:7e:7f:
                    b7:10:09:24:00:66:50:db:34:bd:4f:96:cf:91:94:
                    75:10:b3:0c:7e:a9:1b:ed:1d:c3:d9:ba:48:2b:4d:
                    fc:46:e2:42:18:dd:7c:39:14:8b:ab:91:ea:19:f6:
                    42:11:58:fc:2d:ee:1b:6c:7e:27:ba:50:0b:2d:82:
                    00:31:fa:41:0e:e4:23:2f:57:0e:27:e7:15:c5:92:
                    d2:94:54:d7:22:36:df:07:0c:b9:95:bc:2e:41:bd:
                    94:b9:05:14:4b:f6:aa:33:a1:aa:50:9d:4a:09:e7:
                    1b:0d:9e:cc:c6:c5:7f:08:dc:10:95:99:4b:c6:c8:
                    00:d2:fe:e1:be:39:4d:1b:bf:74:7c:ff:42:ca:4b:
                    26:b5:47:d3:4d:9b:85:91:b5:5f:e6:47:65:d0:26:
                    7f:f9:b9:84:51:b6:8a:59:5f:ec:9f:1e:42:ce:c9:
                    b4:de:2b:29:52:5a:e6:28:63:34:af:25:73:ee:e9:
                    0e:1a:65:a1:03:36:06:39:6a:de:ea:df:51:58:86:
                    87:c0:be:a7:b8:51:e4:33:7d:86:92:e5:83:74:b7:
                    68:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8D:35:F8:B9:2C:85:1D:35:C4:C8:C7:FC:D5:AF:2D:75:AF:7B:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e055dc0a-fb0e-3c8a-bda9-a9fb5da0b6e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8584::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ce:0c:47:5a:96:47:46:43:76:7b:21:d1:fe:98:a3:42:6f:
         1e:06:e3:78:06:f2:3d:57:85:34:1a:45:14:57:37:60:da:c7:
         97:a5:ed:fe:5a:90:18:eb:0f:23:91:a0:2a:36:ac:da:66:82:
         11:14:1d:40:ab:ff:75:f7:ad:5f:5c:be:47:40:02:1b:57:54:
         b1:11:37:6c:99:8e:22:0d:45:84:f1:f6:8b:84:f1:5a:4b:65:
         56:a9:87:ec:8f:6b:c2:5a:db:c2:2a:b5:19:2f:50:dd:fe:1a:
         fb:c1:d9:25:af:f6:3f:26:81:a1:d4:b8:e2:a9:37:1e:aa:77:
         63:4c:05:32:3b:3b:4a:b1:b4:45:62:0b:f2:6f:75:bf:a8:5a:
         ac:32:e9:38:0b:4d:03:0c:75:0b:33:29:00:37:37:1a:5e:53:
         57:da:b3:00:d5:02:83:28:a7:73:9f:d5:ca:c8:1d:90:7e:3b:
         48:49:93:f2:00:e7:94:9f:84:b8:19:06:c9:09:6f:15:0f:d7:
         60:3c:02:72:c1:ac:04:26:84:99:d1:01:04:80:c4:fb:59:b1:
         4b:41:13:c8:fa:ea:68:92:60:2d:c6:44:30:93:50:41:99:54:
         94:e4:3c:fa:ee:1d:80:29:f0:bd:9a:73:41:a2:ad:d3:ff:71:
         a2:d4:27:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:18 2025 by rpki-client