Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa
File:                     30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa (raw, json)
Hash identifier:          K8hGHzgfIyxNqgijNQZwQphac834tSC4AYgWTNK82OI=
Subject key identifier:   32:FB:9E:9B:2B:21:5F:D6:77:73:A7:72:A8:F2:12:74:EB:B8:CE:68
Certificate issuer:       /CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16
Certificate serial:       010D0C9F4328584A612B112420A5780B389B1A00
Authority key identifier: 04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     33501
IP address blocks:        2607:19c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:11:24:20:a5:78:0b:38:9b:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=64424407-a057-42d9-aea9-9b24e7150bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:be:e5:af:ae:c5:e0:5e:84:7b:8b:ea:b7:84:
                    3a:b8:36:f5:38:3a:bd:9a:7b:45:ff:52:22:08:b7:
                    2d:b5:0e:f2:8a:b8:19:08:d7:76:64:d7:83:03:5b:
                    ac:2d:da:76:27:cd:95:28:2b:47:5b:24:6c:32:ef:
                    94:71:1c:51:a6:ee:b8:7a:01:d9:bb:3b:be:e4:e4:
                    04:71:dc:a2:80:7f:31:e9:f0:e6:c5:f4:55:6c:c7:
                    25:b6:cc:ca:0c:f4:9c:29:00:db:a6:3f:94:9c:97:
                    b5:6d:d8:6d:2e:92:64:26:b4:d6:b3:58:c1:52:4b:
                    ed:70:2e:9c:1e:1c:4e:bb:7c:ce:74:1d:e7:37:08:
                    f4:86:9e:92:92:79:c7:5a:c4:0c:ec:be:0b:9e:de:
                    16:a8:74:96:d2:6a:0f:f5:ce:ee:2e:34:f7:7c:cb:
                    e0:46:64:af:16:60:a1:6c:dc:9d:17:10:e2:4f:5a:
                    37:0e:b7:5c:59:b0:ce:05:7c:36:4f:dd:c6:8d:99:
                    ff:5a:df:34:87:86:f5:d2:02:0e:6e:7d:30:82:4f:
                    73:89:bc:a1:a1:9d:3b:76:8a:42:20:0e:97:32:f6:
                    98:c6:34:45:d0:72:7d:3d:96:e5:1b:fd:b5:aa:08:
                    46:23:4a:e8:de:3a:e4:1c:dc:2c:a6:25:ba:48:f8:
                    99:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FB:9E:9B:2B:21:5F:D6:77:73:A7:72:A8:F2:12:74:EB:B8:CE:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl

            X509v3 Authority Key Identifier:
                keyid:04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:19c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:e1:ae:4c:9a:f1:c2:ec:4a:7f:ce:e6:19:77:a3:fe:ab:0a:
         b8:0b:a8:3c:d2:0f:4d:d5:10:35:27:a2:3f:fa:af:6d:3b:e4:
         3a:73:40:3e:9d:f3:51:7b:da:93:68:19:06:31:7c:58:d3:29:
         23:66:82:f7:a2:23:2b:86:7f:c0:ee:9b:d9:3b:5b:68:33:a1:
         25:4e:ce:1b:c6:1e:d3:07:d0:52:0c:ac:15:22:03:b1:ae:2d:
         2c:dd:14:c7:1c:f5:d3:2c:13:da:fc:5e:4d:f7:3c:cd:66:92:
         e3:bb:2d:d6:91:c0:8e:23:0e:41:9b:39:d2:3a:c1:cf:5b:36:
         60:e7:b9:65:58:12:66:ce:85:d1:1b:c6:dd:65:7b:02:7a:17:
         b3:d1:a9:6a:73:d6:67:d2:9a:de:22:df:33:2a:5a:82:49:22:
         96:34:f9:9e:3a:58:17:19:66:c3:9e:7a:f0:f6:29:ad:a8:9f:
         02:cd:37:b4:f5:9c:84:22:c5:96:e3:85:b0:c0:39:54:83:fc:
         84:f0:b9:19:39:3e:20:84:e0:3f:27:a7:1f:de:41:38:e9:f6:
         0f:03:f2:6b:8b:2d:7b:8c:e0:86:d9:c3:39:c8:bc:6c:4e:58:
         10:32:12:48:a2:dd:3e:ce:78:ec:b4:d5:e0:7f:6a:a5:50:47:
         76:e8:cf:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:25:34 2025 by rpki-client