Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ff755af3-d6f0-3895-8754-223c615724be.roa
File:                     ff755af3-d6f0-3895-8754-223c615724be.roa (raw, json)
Hash identifier:          9YSrLlazzVQSrqlUvA3jg6izar8VompAE6PWDQy1G7Y=
Subject key identifier:   23:D4:6A:4B:5A:A9:58:20:D7:E6:19:A7:25:8C:15:A5:63:72:38:E1
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E963523324894C6FF2C5A80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ff755af3-d6f0-3895-8754-223c615724be.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:8245::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:35:23:32:48:94:c6:ff:2c:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=ec1067ec-eb85-4a07-8725-c1921be50c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e5:89:f0:02:82:06:98:68:ee:9e:2e:d8:b5:
                    0a:8e:1b:34:40:23:dd:48:b6:fb:0f:8c:65:f1:a7:
                    70:d6:13:dd:49:19:32:78:33:06:f7:12:50:e6:f4:
                    1e:4d:4c:a1:39:ba:2f:fa:cd:8f:75:2f:dc:00:6b:
                    50:98:60:a2:bf:9d:7b:bc:53:57:b3:f3:39:8e:1c:
                    e3:b9:73:d8:e3:14:aa:81:ef:31:56:d4:4e:ee:34:
                    88:70:7e:7e:9f:8a:ca:76:a8:f0:29:9e:3f:2b:73:
                    e3:6d:29:0b:6f:3c:7c:43:7f:66:ad:47:d3:36:1d:
                    0b:6b:82:cb:08:e9:9f:dc:01:7b:57:1d:bb:7d:6e:
                    be:6c:d3:08:2a:c8:e7:16:be:0b:55:93:7f:23:88:
                    ce:9b:3c:4c:48:e1:f2:b1:76:9f:fa:b8:13:59:5f:
                    77:4e:c7:97:ee:d3:49:57:23:db:81:c5:a8:72:5a:
                    5f:70:4c:84:32:2b:a9:a7:6f:12:1a:df:9f:9a:0b:
                    8c:9f:bd:3c:86:31:e5:ab:61:77:91:c7:06:a9:d2:
                    e2:ab:6a:38:eb:58:b4:09:7e:fd:49:33:80:05:c7:
                    3e:00:90:0c:a1:34:d9:96:6e:e4:8d:d0:e3:a8:26:
                    07:d9:a4:14:f6:53:99:e5:37:fb:94:13:fc:ff:57:
                    81:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D4:6A:4B:5A:A9:58:20:D7:E6:19:A7:25:8C:15:A5:63:72:38:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ff755af3-d6f0-3895-8754-223c615724be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8245::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:e7:2a:e1:e3:f0:84:31:b3:8e:98:4c:2f:9f:c1:b6:af:00:
         16:7a:ab:af:35:99:86:44:1a:bd:a2:a8:be:47:22:36:0c:5e:
         b8:f0:c3:20:b9:4e:d7:76:14:f7:6e:eb:34:ca:13:f2:9a:b1:
         aa:7a:74:d5:0b:04:2b:8c:ae:13:86:86:0c:21:68:0e:82:57:
         67:6c:f7:2b:bb:e0:c9:9e:82:f1:3e:8d:fb:cd:00:3a:25:77:
         24:b4:d1:7b:cb:fc:86:fd:fe:d1:38:35:b1:fc:93:cb:ca:0a:
         ad:bb:6a:ac:27:57:da:f3:a7:2a:29:44:0c:39:a8:06:78:c6:
         b0:59:f5:eb:2d:8f:a8:75:11:c2:d3:ba:89:e2:00:fc:e7:30:
         f4:c7:e9:e2:10:25:39:45:53:be:16:cb:e0:4d:2e:31:4b:45:
         75:40:0a:2a:50:66:24:11:20:ea:a2:65:7c:52:5e:9b:7e:b3:
         da:32:e7:8e:4d:b6:c7:cc:01:b8:35:25:60:79:af:08:41:41:
         76:80:16:10:f1:e7:db:93:4a:10:28:77:3a:6b:2d:29:45:6a:
         ef:bf:cc:70:79:61:57:6a:9e:c4:15:7b:0b:47:4a:86:37:22:
         77:7d:9b:45:1f:e1:14:5b:d2:22:a5:02:9a:f0:fd:5a:d6:32:
         49:f1:b1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:15:11 2025 by rpki-client