Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/6ac7659f-a0f4-37ac-bd67-b3363a41130c.roa
File:                     6ac7659f-a0f4-37ac-bd67-b3363a41130c.roa (raw, json)
Hash identifier:          4RI3tx3y7oh5drZqB9Xxe6q9kIIm5gMnaRZcERXfH7Y=
Subject key identifier:   D1:84:48:83:BF:D4:16:7F:14:64:C4:CA:29:5E:5F:99:6B:36:C0:45
Certificate issuer:       /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial:       010D0C9F4328584AADF106D171B01AA3655A0700
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/6ac7659f-a0f4-37ac-bd67-b3363a41130c.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     15562
IP address blocks:        2607:fae0:245::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:06:d1:71:b0:1a:a3:65:5a:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=3e831ae9-26cb-4823-a785-8c29c53f8f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ff:bf:b7:be:2f:33:0f:b8:6e:eb:46:25:8d:
                    7c:2c:7c:34:41:3e:e9:15:60:88:b0:67:f6:aa:05:
                    b6:95:51:aa:b8:d2:23:5e:0a:0b:30:e8:e0:7b:80:
                    3a:de:95:d0:20:b1:99:7b:f7:5f:ad:c4:41:e6:5d:
                    00:3c:d2:57:e6:f0:0b:81:80:e9:de:28:c2:1b:ca:
                    b6:99:0c:a7:ad:e5:51:88:39:ad:b7:02:90:c5:af:
                    a9:4e:af:6c:3c:96:79:ac:82:65:20:68:71:9f:85:
                    f9:33:b6:8d:28:91:da:ed:d1:df:74:dd:71:46:70:
                    d8:d4:d0:ab:3f:e0:2e:f3:7e:7e:91:81:50:cc:2b:
                    ec:c8:04:b6:93:d2:71:53:f0:e1:b8:e1:3b:dc:c5:
                    9a:08:de:dc:b0:23:d4:d4:b2:29:ef:05:8f:b7:b9:
                    a1:1a:30:0a:56:b0:a1:cf:d1:dd:18:99:24:44:49:
                    c0:41:e7:53:bd:8a:5c:43:63:ce:a9:e1:e4:c2:82:
                    ec:c0:f4:d2:4d:bb:e8:c0:0e:fd:d6:ef:48:16:5c:
                    73:bb:de:d6:44:47:12:d9:f9:3a:22:cf:d6:e2:4d:
                    51:57:2b:43:cb:80:6b:9e:a2:05:de:b1:a5:79:18:
                    69:c4:28:c5:2b:49:0d:9e:a7:ff:16:4b:43:02:a1:
                    dc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:84:48:83:BF:D4:16:7F:14:64:C4:CA:29:5E:5F:99:6B:36:C0:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/6ac7659f-a0f4-37ac-bd67-b3363a41130c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fae0:245::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:e8:ee:83:bf:12:74:c3:58:88:dd:e9:5a:92:3d:76:07:70:
         41:f4:0f:b8:8f:4c:9e:4a:71:72:ed:77:4e:f1:26:50:95:a5:
         80:48:55:dc:87:56:fb:01:98:49:d8:bf:55:87:15:f2:16:4f:
         18:4d:e0:f7:ce:a7:fc:dc:76:42:1f:6b:d6:ad:93:ad:48:1f:
         8a:e5:66:38:d9:ee:38:5b:d4:e8:5c:4d:67:2a:f2:28:72:b2:
         24:1e:1c:41:b9:fb:d4:4d:a3:ef:27:41:c6:30:c1:f3:ab:9e:
         a2:ee:9f:10:07:e8:c0:86:74:62:ef:da:f2:5e:c2:ce:5d:ec:
         fb:92:8f:d9:9e:1c:5a:10:47:31:15:ba:79:cb:42:9e:93:66:
         2a:67:dc:8b:27:d1:6a:58:6d:d2:06:2f:49:92:d3:59:22:a7:
         26:57:a7:d0:c2:0d:63:44:9d:65:a5:06:f1:5f:58:c6:66:db:
         d3:8f:c3:0a:4b:6d:0b:8b:5a:52:fb:1b:d4:5b:e8:6d:6c:08:
         57:2d:33:d9:0b:d8:5e:b8:1a:7f:35:bd:72:81:bc:69:64:91:
         25:c9:8e:19:42:4d:cd:d7:d9:52:50:8e:3b:c2:fb:c3:22:7b:
         22:a1:2d:f1:32:43:8a:5d:f1:b4:b9:7b:41:db:0c:fc:ed:ce:
         9c:2e:48:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:03 2025 by rpki-client