Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/fd67d302-9b2f-3b18-b2c3-6d6d228d138d.roa
File:                     fd67d302-9b2f-3b18-b2c3-6d6d228d138d.roa (raw, json)
Hash identifier:          YwTV8ndzV9wKwjf67zlOT4njHaFTEx7SibqyF36Auyw=
Subject key identifier:   C1:89:DC:B8:6D:35:25:08:D4:00:44:0F:CA:F4:37:FE:6A:F9:35:1A
Certificate issuer:       /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
Certificate serial:       010D0C9F4328584AB40611838FD8665AD2101A80
Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/fd67d302-9b2f-3b18-b2c3-6d6d228d138d.roa
Signing time:             Thu 31 Jul 2025 17:18:30 +0000
ROA not before:           Thu 31 Jul 2025 17:18:30 +0000
ROA not after:            Wed 29 Oct 2025 17:18:30 +0000
asID:                     7859
IP address blocks:        2607:f441::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:06:11:83:8f:d8:66:5a:d2:10:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
        Validity
            Not Before: Jul 31 17:18:30 2025 GMT
            Not After : Oct 29 17:18:30 2025 GMT
        Subject: CN=88d9d514-9962-44c7-86b9-d9c0f4213fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ad:6a:d4:9e:39:c4:5b:04:fb:d1:6b:f5:82:
                    ab:ab:f3:d1:7e:9a:1c:60:97:b3:c7:15:40:93:74:
                    d8:59:bf:3b:87:f5:01:6c:b2:d5:b9:2d:eb:c5:8b:
                    e0:e0:77:fd:a2:c1:e8:4d:34:14:ef:97:b3:3d:0f:
                    05:d9:dd:1b:70:72:5d:6b:f8:7a:7d:6b:3e:f0:9e:
                    63:41:00:3f:26:c7:35:a2:62:36:68:77:a5:a6:cc:
                    de:78:4d:81:a4:31:9b:f1:26:f3:7d:60:b6:5a:62:
                    e1:c8:8a:94:ae:2e:bc:bf:92:ec:0d:b2:83:cf:be:
                    ed:1f:76:a4:e9:23:28:4e:bf:79:60:ea:9d:d9:e3:
                    5f:5d:c0:fa:5b:02:a6:bc:43:eb:8c:0b:35:e1:eb:
                    fb:86:ca:83:8a:40:c3:05:05:3a:72:99:04:e4:f7:
                    84:e4:ed:02:a0:1f:a9:0a:78:49:4d:d2:f1:1d:ff:
                    2e:8a:80:4e:3d:ec:c4:13:30:73:d8:85:26:b9:67:
                    5c:32:f9:79:13:e5:fc:98:1d:7f:e0:92:87:a1:98:
                    3a:14:50:2f:d6:b5:42:14:50:a1:f3:e0:e0:4d:bf:
                    e4:d9:c7:0e:d9:a9:23:ae:37:c9:db:ab:92:ff:ed:
                    f7:55:66:e4:be:c0:84:52:bb:68:8e:f4:20:b3:ff:
                    73:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:89:DC:B8:6D:35:25:08:D4:00:44:0F:CA:F4:37:FE:6A:F9:35:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/fd67d302-9b2f-3b18-b2c3-6d6d228d138d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl

            X509v3 Authority Key Identifier:
                keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f441::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:27:8c:8b:5d:25:b4:42:9a:30:30:09:70:88:47:46:95:96:
         56:29:78:c2:50:ee:7d:6e:49:2d:66:39:1c:a5:ea:6e:f1:ae:
         47:0b:4c:24:cd:96:22:58:d7:56:74:75:5c:5b:e7:5c:f7:f4:
         0d:4b:81:a8:69:d7:32:7e:bd:91:db:1e:df:6b:96:14:81:57:
         75:2d:a6:d7:b4:cd:84:d9:64:d8:b4:63:e3:f8:e5:0c:8c:64:
         fd:b4:71:26:da:88:b8:05:1b:d5:26:f3:a7:43:fe:91:97:93:
         a3:b2:3c:e0:d3:1b:cd:55:84:6a:3b:af:bd:3c:62:d5:43:ce:
         5d:ce:84:2d:3e:75:19:a6:fa:6f:09:8c:0f:77:31:bb:4e:3e:
         8d:41:6f:f4:9f:0f:5f:a1:bf:a8:7e:f7:ad:e2:67:1e:eb:b2:
         48:b0:af:47:76:28:9c:b3:11:19:b8:33:ac:4a:f4:a6:ac:05:
         55:cf:ef:04:0c:58:ab:cc:33:85:ed:9b:1a:53:37:be:cb:de:
         19:cc:fc:34:7a:98:44:a8:d9:cf:2d:b9:ee:ca:3b:eb:72:44:
         9d:31:c6:d5:c6:f0:26:12:06:55:82:b9:53:50:87:e7:fe:3c:
         68:2a:81:2e:51:b7:58:3f:4a:dd:6a:e6:ea:63:58:15:d5:e3:
         d9:31:f3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:07:03 2025 by rpki-client