Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/d4768484-b745-3f39-a4e8-08939a0ff42d.roa
File:                     d4768484-b745-3f39-a4e8-08939a0ff42d.roa (raw, json)
Hash identifier:          DEi9U7j5EEeamHdkhkM+XSHgZk7Ggp+1lTrDS4Fcngg=
Subject key identifier:   5C:0A:ED:55:F3:A9:6C:12:49:CA:89:08:A8:18:FC:D3:0D:A4:0C:36
Certificate issuer:       /CN=036b2dbb-e7db-4b60-b1d9-949d2edba6fe
Certificate serial:       010D0C9F4328584AA9C0DE32CB8B86E3B60CF6C0
Authority key identifier: 4F:10:4C:3F:94:5F:DB:EB:A3:61:DB:19:DB:7E:DA:ED:96:69:91:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/d4768484-b745-3f39-a4e8-08939a0ff42d.roa
Signing time:             Mon 28 Jul 2025 01:00:51 +0000
ROA not before:           Mon 28 Jul 2025 01:00:51 +0000
ROA not after:            Sun 26 Oct 2025 01:00:51 +0000
asID:                     400387
IP address blocks:        2607:6340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a9:c0:de:32:cb:8b:86:e3:b6:0c:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036b2dbb-e7db-4b60-b1d9-949d2edba6fe
        Validity
            Not Before: Jul 28 01:00:51 2025 GMT
            Not After : Oct 26 01:00:51 2025 GMT
        Subject: CN=54bb190d-cc8f-4d19-8b20-f02196abf3ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:61:48:8b:bd:19:f5:73:59:78:80:87:5f:57:
                    ec:98:af:e6:d4:29:14:7b:8a:28:30:0c:31:8e:46:
                    8b:1e:8b:87:c0:77:37:b1:18:b5:f6:b0:ba:29:5a:
                    d3:8d:dc:6a:db:bc:a4:63:97:42:2c:ba:0e:a2:06:
                    92:9e:af:71:ba:d7:6e:32:0b:76:f4:06:d2:f2:7c:
                    88:88:4b:7c:15:7d:59:7a:01:52:52:95:6b:da:2b:
                    86:9f:3c:36:69:6b:e1:e3:42:6c:6b:5d:4c:a6:b1:
                    7b:9f:43:07:47:ec:c1:b1:0f:62:15:a5:c1:0a:64:
                    68:f7:20:d6:fe:2a:84:e3:e1:4e:99:44:db:7c:c9:
                    04:60:0f:13:ce:19:7b:3f:e5:d9:c1:b2:2f:21:ef:
                    9f:9e:34:d5:4d:65:e1:1b:50:73:da:bc:36:7b:99:
                    36:d1:36:d2:78:6d:ee:9b:14:2d:b9:be:7b:fd:d7:
                    34:08:5e:fa:29:90:97:70:47:76:14:85:fc:07:23:
                    7b:de:69:49:be:ea:92:b7:5b:29:cb:9f:aa:4e:be:
                    7b:06:3f:be:66:31:76:de:e6:4c:5c:cd:23:f2:f1:
                    d7:0f:ac:1e:90:74:48:1d:f8:45:92:48:c3:68:24:
                    1e:5f:7a:07:26:ca:c9:bb:1e:68:72:a0:dc:67:23:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0A:ED:55:F3:A9:6C:12:49:CA:89:08:A8:18:FC:D3:0D:A4:0C:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/d4768484-b745-3f39-a4e8-08939a0ff42d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.crl

            X509v3 Authority Key Identifier:
                keyid:4F:10:4C:3F:94:5F:DB:EB:A3:61:DB:19:DB:7E:DA:ED:96:69:91:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:36:ae:2a:9f:e7:20:5b:ca:3d:57:6f:0b:f8:14:ba:8b:2f:
         e4:d0:0b:d9:c8:63:28:b2:31:4f:2d:ce:0e:3e:99:7a:0e:9f:
         88:c7:44:cb:1e:94:23:6d:2e:c3:e8:c9:66:7c:38:05:2e:aa:
         e4:6d:2b:bb:4e:91:b4:13:f5:ff:c7:cb:66:84:04:32:7f:ac:
         f3:71:8b:d8:46:68:58:af:7b:87:68:4e:d4:9a:9d:c5:aa:2d:
         92:c8:83:33:6f:b3:5f:e1:e1:18:65:8c:12:39:3d:96:63:50:
         11:f2:12:dc:7d:d0:76:36:9b:d1:1c:19:53:64:99:3b:05:a7:
         b6:7b:b6:0f:cc:15:33:44:01:82:2b:ed:a0:2f:af:04:6d:8d:
         b0:a9:e9:a5:4a:9c:63:9a:57:19:f9:1f:bc:33:af:6e:ce:e0:
         0f:d0:57:39:8a:75:46:74:24:89:74:f3:e0:55:28:af:a2:93:
         e1:44:6d:8c:6d:1e:c9:4b:8d:93:f9:61:c2:b0:45:b9:d9:b9:
         ae:f0:2e:55:49:51:a2:f3:a8:c7:c5:b3:1c:2b:b5:59:02:a0:
         8c:29:81:41:92:a4:02:34:ea:9b:13:00:df:91:19:15:0f:75:
         b2:1b:12:68:66:bf:e9:72:6a:22:05:a4:bd:1b:d5:b3:f3:23:
         13:2f:c3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:42:31 2025 by rpki-client