Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f3408b61-f630-38bd-9e48-4e15f639227f.roa
File:                     f3408b61-f630-38bd-9e48-4e15f639227f.roa (raw, json)
Hash identifier:          EMgXERJMBxq+T6H38ouCUdip0/ka75UZtT5xAiwmx1o=
Subject key identifier:   74:FC:8E:00:33:F2:7B:B1:DB:DD:28:BE:84:C3:73:8D:00:4F:7E:47
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E96364EF9142996099EF660
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f3408b61-f630-38bd-9e48-4e15f639227f.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:87b3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:36:4e:f9:14:29:96:09:9e:f6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=b463c682-ef38-4a52-9ada-c64ec381e61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:66:71:6b:b7:92:6a:22:09:a6:73:d3:6b:
                    40:31:e9:6d:4c:38:bd:4d:68:df:ef:a8:fa:cf:08:
                    58:90:da:a7:36:98:b7:01:bc:1f:9d:d9:33:7e:62:
                    ee:8a:fe:12:f1:56:fc:41:6f:98:37:75:cf:80:be:
                    59:53:63:fb:11:27:68:95:03:61:1a:3a:ac:77:7c:
                    27:0d:25:54:af:6a:97:92:96:8c:8b:ad:d9:46:42:
                    ba:30:61:de:8e:41:48:b5:69:c4:f9:ec:28:87:9b:
                    95:a1:c8:5f:bd:ea:bf:5b:b9:4b:68:c3:85:62:75:
                    71:9c:a2:72:80:fb:39:6a:a2:c5:a9:c6:13:2f:bf:
                    a2:cb:54:50:f3:50:56:c5:83:06:fc:ff:bf:e2:6f:
                    19:60:1a:10:dc:6e:9a:95:46:0c:c3:8c:ab:5b:c9:
                    b5:94:18:6f:14:ae:75:5c:a3:d8:5b:e8:e0:ff:b7:
                    6c:67:f1:b9:15:6d:aa:d6:07:2a:28:a7:76:18:13:
                    bd:a9:a9:6d:90:ef:47:3b:a2:7e:12:8f:d9:42:9e:
                    cd:14:2a:d3:b1:e8:e4:41:30:83:07:09:16:a5:d0:
                    7e:2c:32:84:bf:a7:f3:62:4e:7d:1f:98:03:5f:7f:
                    9d:c6:bc:20:a3:cb:b4:de:9e:a1:e1:76:70:a7:01:
                    f3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FC:8E:00:33:F2:7B:B1:DB:DD:28:BE:84:C3:73:8D:00:4F:7E:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f3408b61-f630-38bd-9e48-4e15f639227f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:87b3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:90:03:9d:0e:56:c1:b5:36:1a:30:e8:2d:23:49:ac:4f:49:
         53:31:5f:e8:d9:0b:17:a3:90:6e:70:0a:fe:9d:66:fb:e3:98:
         9b:dc:b5:46:29:da:65:d0:2d:4d:e6:e6:44:df:b0:73:ac:46:
         a0:63:35:29:cc:1e:a7:30:57:2c:85:c4:61:b3:ce:0f:37:79:
         94:23:dd:83:d2:0a:b1:e3:cd:02:4a:e0:6e:1e:7a:f4:68:57:
         f4:d1:46:ec:c4:fe:32:c1:0a:86:bf:d4:33:08:ef:7d:a4:ff:
         8a:d3:98:f5:a6:34:c0:9c:c7:64:08:06:55:56:1a:ce:4a:2b:
         dc:ef:f0:cf:51:97:c2:c5:31:71:97:91:4f:a1:d2:8f:99:e5:
         a3:f5:85:b7:fa:bd:ea:e5:7f:b9:f7:1b:b7:8b:09:b2:92:12:
         21:c6:71:0b:ca:e5:9e:82:cf:1f:b9:ca:4b:e5:27:0f:71:e7:
         c8:85:9e:70:a0:cc:02:c1:6e:3c:cd:45:3e:0d:8c:74:a0:73:
         50:2a:e5:85:4e:95:42:1f:d9:92:b8:c2:15:c5:1a:4c:e9:c5:
         99:03:3a:c2:1d:24:e2:cd:f9:d3:66:ac:f0:98:bf:20:f3:2e:
         66:a2:2b:ac:43:ed:fe:0b:4e:f3:b1:71:17:a5:74:54:d2:29:
         d3:a2:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:14:27 2025 by rpki-client