Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/66bd7851-0b26-389d-8f26-02cb3a0c97f5.roa
File:                     66bd7851-0b26-389d-8f26-02cb3a0c97f5.roa (raw, json)
Hash identifier:          4q74S7u67/5z3+w+fjCG/upCpctIpWHSYz2i4tis4/Q=
Subject key identifier:   99:F3:24:F0:59:BC:FE:0F:4C:40:B1:09:4F:D0:9D:C2:44:1E:D8:93
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F4328584ABD4BA9EA8A1C8921756F2590
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/66bd7851-0b26-389d-8f26-02cb3a0c97f5.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     13379
IP address blocks:        2605:30c0:8100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a9:ea:8a:1c:89:21:75:6f:25:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=b475a8ad-69c5-4781-b9d2-01e0883374a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:0a:93:c5:87:c7:c0:43:65:07:8d:6a:cd:
                    8f:0e:1d:1b:7f:4d:59:21:f2:11:d3:75:9d:eb:ce:
                    22:8f:f3:75:80:28:f5:a7:f3:72:57:db:bd:46:88:
                    ec:63:a6:8c:5a:2c:32:0d:2e:7b:67:dc:e5:a3:95:
                    ad:70:82:d9:94:b9:46:0e:ed:09:d4:26:6e:ff:99:
                    f7:93:91:ad:1a:5e:f7:d0:33:cf:a8:c6:3a:5c:4b:
                    da:0d:2f:90:c5:dc:78:f3:ce:11:f1:72:a7:ee:d2:
                    79:2a:88:f7:e7:00:a4:17:42:94:06:aa:e6:a7:43:
                    f3:41:47:e7:25:74:2d:bf:00:18:a5:0f:0b:cb:59:
                    47:70:5e:e9:ea:13:ed:86:2c:0e:af:d8:35:8d:29:
                    e5:dc:ab:eb:cb:10:a8:3c:c2:67:e2:5d:a0:b6:70:
                    ad:fb:18:bd:5d:63:14:0e:9a:5a:85:a7:d0:47:59:
                    cb:a2:69:f1:32:a2:01:ca:11:c2:32:e1:8a:8c:06:
                    fb:57:a1:7d:ef:70:6c:5e:ba:84:45:50:c4:48:60:
                    f5:58:09:22:47:83:b8:b2:ba:0e:d2:4d:59:ae:34:
                    61:bc:6e:16:91:f1:3f:4b:53:a6:02:df:79:12:60:
                    20:b5:81:b9:b0:75:2c:6f:c7:5d:9a:3e:f2:06:27:
                    99:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F3:24:F0:59:BC:FE:0F:4C:40:B1:09:4F:D0:9D:C2:44:1E:D8:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/66bd7851-0b26-389d-8f26-02cb3a0c97f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:30c0:8100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:28:8c:22:aa:15:12:f0:45:39:73:a9:f6:3e:2d:3b:31:71:
         99:e8:de:ca:26:b4:60:9a:a8:74:a2:7a:9e:b8:d0:6d:68:3a:
         fe:c3:7c:f4:47:b2:30:cf:77:a4:e4:47:00:ec:8c:97:8f:d3:
         70:ad:85:8a:4b:26:60:cb:f9:13:61:d5:07:0d:83:3e:5a:ae:
         8c:75:9d:34:95:c7:dc:bc:3b:68:0c:9a:fd:2d:7e:cc:12:2a:
         fb:bb:4d:e3:9a:e3:24:98:63:58:7a:12:3f:16:31:2d:4b:28:
         60:d2:53:33:45:15:48:76:1d:f3:21:42:01:fe:52:d1:51:b0:
         4e:dd:0c:02:50:c3:66:41:91:6d:1f:f1:d0:42:c5:09:11:35:
         a2:fe:58:7d:8f:3a:c7:f3:c5:4d:dc:22:22:88:28:c3:e5:f1:
         ab:69:9c:f6:0a:1e:35:b7:77:57:38:50:33:96:26:da:a5:2b:
         07:88:9f:44:58:23:a7:6c:31:c7:fb:aa:b0:14:d9:83:31:ab:
         af:e8:df:3b:a9:e7:4d:74:9d:97:1e:a8:d3:dc:93:04:f8:97:
         13:e2:99:4a:b6:66:8f:a9:40:ee:fa:a1:a1:a5:2d:1e:35:34:
         82:d0:3f:02:f0:9c:68:04:30:c4:32:79:db:0e:68:fb:85:dd:
         a3:ea:40:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:43:28 2025 by rpki-client