Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/4610ce05-8956-32c5-998c-a2e79d0bb513.roa
File:                     4610ce05-8956-32c5-998c-a2e79d0bb513.roa (raw, json)
Hash identifier:          gTR3iBMaRkOh9JWizoHC7RbgjedSZpM2t0R8bDhxCx8=
Subject key identifier:   C7:1D:B1:2C:AB:0C:0A:40:5F:F1:96:B6:AA:5A:6B:7F:08:B1:A6:96
Certificate issuer:       /CN=0a255869-5473-4988-89f2-dd632982b56e
Certificate serial:       010D0C9F4328584A90A0BCE993FEB3198628E1A8
Authority key identifier: 6B:BC:76:23:85:18:4F:AD:E3:1D:9A:55:83:A6:31:79:6E:C8:55:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/4610ce05-8956-32c5-998c-a2e79d0bb513.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     0
IP address blocks:        2620:92:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/0a255869-5473-4988-89f2-dd632982b56e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/0a255869-5473-4988-89f2-dd632982b56e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:bc:e9:93:fe:b3:19:86:28:e1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a255869-5473-4988-89f2-dd632982b56e
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=aa550d2e-e880-4988-8074-dc78a0acd4c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:37:80:ec:99:c5:48:9a:86:e0:54:4a:c1:b1:
                    1f:fb:8e:ea:03:66:80:f6:95:81:06:90:43:c3:9c:
                    4f:c3:a8:3f:1b:5c:d5:46:2c:bc:0e:4f:43:c8:ca:
                    8f:0b:6e:fb:4b:8c:e0:5f:00:2e:7d:bf:65:0b:27:
                    89:cf:fb:a7:c9:e0:e4:7a:d7:15:d7:2b:6b:15:ba:
                    fe:b7:46:86:73:7c:39:6f:cc:b1:4b:d5:dc:e3:b0:
                    df:3b:90:b4:15:8d:e2:50:df:75:fe:6e:b4:9f:3a:
                    2f:3a:b7:04:1a:fc:08:8f:c5:c8:02:f9:5e:a5:23:
                    51:2a:08:fa:2e:0f:c4:cf:39:f8:79:8d:6a:b6:6a:
                    a1:dd:4e:9d:a0:de:c0:61:e6:7d:43:22:d0:06:66:
                    5d:32:59:fc:ca:58:89:8e:fe:48:1a:df:e9:a4:b7:
                    3e:d8:25:5c:2f:84:55:31:02:f9:e4:5d:73:48:d9:
                    4b:7f:88:76:e2:e8:51:d8:95:28:f5:64:f6:36:7f:
                    4f:b1:a8:24:8d:8a:21:6a:d2:f9:3e:fe:57:f9:35:
                    0c:af:48:e3:9e:8e:e9:6b:2e:dc:63:61:48:97:50:
                    ab:66:99:fd:10:75:bd:49:33:26:3d:dc:43:62:77:
                    c5:34:43:8a:12:fd:4c:1e:99:ef:3c:91:d9:68:01:
                    a7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1D:B1:2C:AB:0C:0A:40:5F:F1:96:B6:AA:5A:6B:7F:08:B1:A6:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/4610ce05-8956-32c5-998c-a2e79d0bb513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e/0a255869-5473-4988-89f2-dd632982b56e.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BC:76:23:85:18:4F:AD:E3:1D:9A:55:83:A6:31:79:6E:C8:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a255869-5473-4988-89f2-dd632982b56e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:92:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a1:a0:8e:ba:20:89:24:78:12:b2:87:0f:66:c4:63:0a:62:
         e3:f3:05:5a:56:02:52:ce:7e:ae:21:7b:c4:56:7a:b9:18:65:
         78:60:3a:f2:40:ee:b9:bf:46:2b:ff:9c:04:14:e9:a1:b3:3a:
         0b:c8:a5:7f:95:a1:c5:e2:e9:90:36:9f:34:f6:e5:3c:3c:28:
         6b:09:24:a3:c1:0b:09:a0:35:70:8b:a3:b5:40:69:b7:10:76:
         e3:c9:1e:be:91:17:58:bb:81:81:a4:26:17:3f:31:85:aa:7d:
         01:ab:0c:03:9a:6f:43:55:2a:05:9c:3a:7e:54:ff:52:98:7c:
         6b:a6:f4:bf:16:2a:ef:ac:ce:da:a3:ae:ae:1b:22:c8:f1:57:
         a7:c5:43:43:3f:d1:84:f8:2a:69:ce:84:8c:28:c3:6d:64:14:
         c5:3b:51:89:63:ef:7b:a3:11:80:7a:79:bb:4d:5c:6f:7c:0e:
         89:db:95:f7:21:92:c5:11:e1:81:e1:40:a8:72:14:7f:a9:a2:
         cd:8e:d5:3d:b1:cf:33:6d:86:47:e9:cf:c2:8d:e6:59:f1:ca:
         f5:99:8a:1d:de:c5:99:90:46:bc:ba:ed:4d:ca:ad:90:e8:c3:
         8f:bf:c0:df:b1:f9:41:1c:83:08:12:b5:25:93:ce:8b:de:27:
         d6:22:e7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:29:59 2025 by rpki-client