Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/165f5246-1b48-3ea5-943a-619c03146706.roa
File:                     165f5246-1b48-3ea5-943a-619c03146706.roa (raw, json)
Hash identifier:          Dn2V3ve2ZjcoY+MLm+W9xGH8lHZ4Xl5eo1YDxpBx1dI=
Subject key identifier:   8F:CF:2C:44:41:1E:99:CE:23:30:3A:D3:B5:68:65:FC:47:E4:1A:48
Certificate issuer:       /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial:       010D0C9F4328584A936B59871D60D4E78C3368C0
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/165f5246-1b48-3ea5-943a-619c03146706.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     65012
IP address blocks:        2607:9bc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:59:87:1d:60:d4:e7:8c:33:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=df447e7f-adba-432a-b018-b4305279f4df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:90:3b:04:38:1f:6e:9f:64:c7:6e:8f:94:fe:
                    e7:1c:f9:b9:22:d1:b8:0d:6c:6b:fc:79:e2:d3:d8:
                    c5:a5:89:66:f4:5e:97:ba:74:da:6a:65:62:fa:07:
                    df:33:f2:2f:54:fb:6c:b1:95:f0:73:f2:62:8c:81:
                    f7:1d:3a:f1:98:4c:f3:14:75:40:ea:50:2e:2c:ca:
                    f3:9a:12:52:aa:43:e0:b0:f8:2e:f7:b9:88:e7:53:
                    46:8f:4f:55:25:d3:ba:ef:23:40:15:c8:5a:1f:44:
                    98:0f:bc:26:c9:87:eb:5d:3d:9d:31:19:b8:a0:f7:
                    1d:79:3b:6d:de:67:67:af:2b:f1:fb:ac:f2:ca:f5:
                    b9:68:15:2d:7b:84:99:e5:22:39:3d:c6:5d:0b:7a:
                    03:1c:c1:57:e2:4e:78:71:e3:f8:0e:01:6d:a1:a9:
                    04:c8:d4:b2:ff:ca:7b:43:57:57:b5:d6:d4:d3:a2:
                    e6:ca:a6:c8:c1:bd:08:7d:da:21:b2:62:04:73:8e:
                    9b:59:0b:94:e1:96:fe:17:7a:c5:4d:d3:3e:c0:a8:
                    e4:cd:c7:5b:5e:e7:a4:4b:58:e2:ef:79:21:80:97:
                    e2:22:89:94:eb:8f:df:d2:92:e4:9f:fe:4b:65:35:
                    7e:f6:97:1c:68:3e:0c:81:65:5e:e8:ee:32:38:e0:
                    29:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CF:2C:44:41:1E:99:CE:23:30:3A:D3:B5:68:65:FC:47:E4:1A:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/165f5246-1b48-3ea5-943a-619c03146706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ff:13:00:37:17:66:36:a0:f2:76:71:97:5f:96:6a:b9:6d:
         95:04:96:05:fc:cb:b9:31:24:90:63:c9:eb:54:dd:e3:25:55:
         c4:0f:d9:6f:94:43:70:ca:87:a3:ad:8d:a1:7c:ce:79:93:3e:
         16:ca:70:50:aa:62:3d:b8:0e:90:8f:bb:e4:dd:2a:59:97:b0:
         b8:d6:01:54:4f:c8:8e:e1:c9:3f:0b:12:a7:98:d5:d5:6f:9f:
         0c:2b:09:7a:7c:d7:6d:ec:9e:7c:35:d6:ec:49:e8:10:03:d8:
         a3:6f:a9:d1:ad:3d:a6:ec:0b:c5:fa:de:22:02:7d:c4:e0:48:
         5f:42:02:c2:1c:53:11:80:2c:70:ee:6d:e6:a3:4e:38:a4:2e:
         6c:1a:12:06:f3:97:1a:6b:1a:8d:e7:ac:77:81:d3:e8:59:29:
         a3:56:cb:37:ec:ee:5c:e8:96:a8:bc:88:27:89:1b:ba:78:d2:
         d2:18:e4:cc:66:77:ce:b4:09:dd:30:10:9f:44:c9:33:ef:26:
         77:db:f9:c6:0d:7d:6a:29:16:de:ff:0e:82:cb:3a:50:ee:0f:
         a7:a1:1a:91:d6:79:86:88:66:9b:c3:c0:5a:65:15:10:ab:48:
         ee:52:70:b7:c1:93:48:0a:15:d8:a9:fd:ad:f2:9d:98:4a:16:
         68:98:12:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:00:43 2025 by rpki-client