Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa
File:                     e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa (raw, json)
Hash identifier:          03aWM7VQRWKchCp2pivU4ayxealizFT5cZYolHmqL1I=
Subject key identifier:   43:11:69:A4:34:73:B8:BE:AC:FA:61:EE:C4:E2:1E:1D:DA:6A:C9:E3
Certificate issuer:       /CN=b32217e1-2473-49a5-919e-08e1896c5019
Certificate serial:       010D0C9F4328584AA160C95C65ABA96BF09D8F80
Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     22191
IP address blocks:        2604:1dc0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:c9:5c:65:ab:a9:6b:f0:9d:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=902f9eb8-6b14-40b4-a9fc-7af0c4578a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6a:f3:ae:7d:e9:09:f6:af:2e:60:a6:c5:49:
                    f9:b7:58:dc:2e:ef:48:e3:39:69:d2:32:98:85:f1:
                    23:e6:33:a6:15:e0:83:d7:30:e5:8e:e3:c5:05:03:
                    65:74:bf:32:0d:16:89:bd:0c:54:7a:05:f9:70:36:
                    df:45:17:d5:ab:e3:f4:a7:09:7d:c0:02:63:65:da:
                    14:89:e0:e1:b6:8f:05:5f:b8:be:a1:24:f9:85:82:
                    cd:de:88:97:c1:04:35:a3:4b:06:32:46:66:b2:0d:
                    24:56:20:52:0d:85:99:af:79:d9:cd:fd:d1:c7:bc:
                    47:ec:88:da:dc:d0:b0:dd:4a:c0:94:cf:8f:03:2b:
                    8c:13:40:17:5b:e2:dc:04:b9:bb:c8:9c:90:1c:ec:
                    34:df:87:b8:59:a1:37:0a:c7:71:d4:ff:94:68:1e:
                    20:7c:a6:cb:43:3c:e6:8d:87:69:96:05:4d:9e:1a:
                    e5:9a:b0:fd:b2:f8:39:4c:68:16:fd:3c:49:25:0e:
                    de:25:29:57:f1:64:3b:91:03:74:1d:9e:8e:b9:2f:
                    6e:c3:ca:f1:fd:6b:1e:33:a2:2e:2b:4e:96:5e:d5:
                    06:33:15:d2:c3:d9:58:0c:f0:c4:00:09:ce:d4:2b:
                    20:65:4a:a6:68:89:cd:5c:48:10:b9:eb:24:5b:99:
                    45:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:11:69:A4:34:73:B8:BE:AC:FA:61:EE:C4:E2:1E:1D:DA:6A:C9:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl

            X509v3 Authority Key Identifier:
                keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:f0:21:fb:55:04:42:28:d5:dd:bf:8d:87:83:f2:8e:0d:84:
         b0:31:97:c7:9b:d4:96:8e:f3:f7:4b:ad:e7:ff:02:04:91:39:
         93:5e:76:dd:e0:6d:00:d3:65:74:3f:7c:cf:35:b1:9b:f5:40:
         c5:65:12:de:48:53:1e:b5:81:c2:58:b4:d6:84:c6:b4:f9:f2:
         2a:c9:a8:35:3d:05:da:f8:99:14:81:eb:cc:13:6b:fa:34:9a:
         52:06:b7:fd:57:df:55:2a:57:d8:2b:07:54:80:fe:ca:0c:7f:
         14:f5:d6:e2:df:99:05:f9:a9:44:b1:db:6c:c4:7c:20:05:c3:
         5b:a3:00:51:b2:c9:90:b7:37:56:7c:34:19:8f:b2:cb:d7:e7:
         e8:95:e1:27:57:29:f7:45:59:18:b4:24:00:06:75:99:78:40:
         d8:43:3f:ce:37:41:80:4e:f8:b1:72:3d:34:8f:16:10:1e:9a:
         01:44:bf:a1:e0:64:42:d0:0a:1d:2a:2a:28:c8:fd:c3:01:b2:
         e5:8b:8b:d5:db:89:c6:7b:89:cb:53:94:64:65:3b:63:c6:64:
         22:cd:94:a0:3c:be:a3:3b:f1:0a:68:b3:b4:d6:d7:d4:15:85:
         87:0d:43:38:8e:ee:01:1c:9c:28:2d:1b:1d:54:8f:b3:04:43:
         08:f5:7c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:10:46 2025 by rpki-client