Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/72621090-4571-32e6-8cc3-9bf028533b78.roa
File:                     72621090-4571-32e6-8cc3-9bf028533b78.roa (raw, json)
Hash identifier:          7JANJRwav1r6tjJhshk1rOg/p92oSURzwbocM4fnM5c=
Subject key identifier:   DB:F0:BB:C0:83:82:C0:B5:B0:2F:F7:9B:D1:E3:BD:AB:46:42:09:9E
Certificate issuer:       /CN=2bd61746-13db-450a-8df3-636a3fa01e59
Certificate serial:       010D0C9F4328584AC01634FBAC23C79C21413D20
Authority key identifier: C9:CF:68:36:AA:83:15:BC:79:97:80:C4:38:E9:C1:FF:00:62:F1:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/72621090-4571-32e6-8cc3-9bf028533b78.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     393719
IP address blocks:        2605:4340::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/2bd61746-13db-450a-8df3-636a3fa01e59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/2bd61746-13db-450a-8df3-636a3fa01e59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:34:fb:ac:23:c7:9c:21:41:3d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bd61746-13db-450a-8df3-636a3fa01e59
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=2f9343e8-432f-496c-814a-d25d14362616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1e:8e:d1:57:be:6c:d3:50:b5:23:a3:0a:c3:
                    74:6e:83:eb:34:9c:41:a7:18:7a:a5:3f:d2:c9:e7:
                    9f:27:64:b8:e1:3b:0d:a9:19:52:78:45:17:c9:62:
                    ec:95:d9:ee:87:68:7a:40:5a:c4:27:d1:2c:9b:47:
                    e9:5b:fe:3a:9d:94:37:65:b7:1a:1f:7c:58:94:27:
                    9f:08:2d:56:75:56:d3:4d:0c:d3:e9:d6:a3:fb:b2:
                    db:cd:3c:80:7b:ea:5b:ec:ce:7d:2c:52:2a:09:cf:
                    86:89:a6:e3:05:78:7f:b9:ac:bb:a8:9e:d4:30:21:
                    5d:cb:2d:c3:9f:78:d8:bb:2c:1c:b9:74:7f:9c:96:
                    93:38:b4:0b:08:05:8f:a3:48:80:fc:63:42:43:81:
                    48:77:d4:4d:0f:1b:e7:ed:7b:e6:24:c5:64:48:d0:
                    59:6d:2d:e2:0b:8e:be:a6:c5:2a:81:82:c4:2a:55:
                    32:08:c0:8e:da:1e:83:34:16:19:04:e9:49:3e:d1:
                    77:65:a9:ef:08:b8:68:1d:88:5a:85:52:ee:ba:e2:
                    6a:ba:15:55:8a:2e:9e:3c:61:bf:01:56:20:c0:4e:
                    9f:aa:01:08:ca:f9:20:2c:b8:1b:f1:9a:3f:38:bd:
                    c1:1b:60:73:44:d9:f8:0e:79:90:6a:45:cb:10:53:
                    22:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F0:BB:C0:83:82:C0:B5:B0:2F:F7:9B:D1:E3:BD:AB:46:42:09:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/72621090-4571-32e6-8cc3-9bf028533b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/2bd61746-13db-450a-8df3-636a3fa01e59.crl

            X509v3 Authority Key Identifier:
                keyid:C9:CF:68:36:AA:83:15:BC:79:97:80:C4:38:E9:C1:FF:00:62:F1:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:86:6e:cb:fd:85:53:3f:c9:71:28:3f:0c:ed:33:80:cc:a4:
         81:20:d3:e5:6a:4e:b3:38:3b:af:71:c5:b4:d5:3a:84:2e:f6:
         7e:14:1f:3b:80:be:7e:ab:e9:de:c1:e0:41:e6:6d:63:6a:52:
         df:41:52:1e:28:65:74:95:e0:57:a3:38:0d:bd:0c:5c:be:60:
         9f:55:22:96:1e:45:e2:06:41:00:57:bb:b4:25:50:e3:89:d9:
         51:b0:bf:9f:d7:f9:67:b5:e7:9b:66:b8:75:23:1f:50:14:d6:
         91:f3:46:2c:98:a9:24:d8:99:03:ae:dd:a2:b9:d1:f5:e8:0f:
         a3:c1:75:71:56:f2:96:85:e1:4d:11:9e:03:f9:2b:44:81:91:
         b6:17:ce:b3:92:db:48:95:ba:38:8b:ce:a0:ee:1d:63:08:0c:
         7e:da:a1:39:22:d3:2b:43:ab:5e:eb:e0:72:1b:aa:83:c7:e4:
         4e:df:ba:04:e7:29:e1:37:91:4e:54:24:ba:5c:91:34:60:d1:
         59:b1:58:e3:ef:b2:1a:64:00:49:05:c1:08:ff:c5:4a:e5:b7:
         a1:8b:54:c1:64:29:2a:02:72:25:8d:0b:21:85:a3:81:e9:f4:
         92:c0:02:40:fa:27:0d:77:20:87:ba:26:e3:08:c6:e5:60:e8:
         af:d0:4e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:11:29 2025 by rpki-client