Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/39acce6a-a4c1-3ba7-bcb6-2819d6454d8f.roa
File:                     39acce6a-a4c1-3ba7-bcb6-2819d6454d8f.roa (raw, json)
Hash identifier:          Ft4Wr+YuktIhD6IduqfNukG2fhheIbp5i7dfc0hGD30=
Subject key identifier:   8D:DC:6F:CD:27:0D:DF:E6:AF:3E:21:B0:E0:28:AD:C5:BA:9F:1A:F7
Certificate issuer:       /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial:       010D0C9F4328584A936B59212EE8B9449AC04650
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/39acce6a-a4c1-3ba7-bcb6-2819d6454d8f.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     65020
IP address blocks:        2607:9bc0:1010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:59:21:2e:e8:b9:44:9a:c0:46:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=8b47d4bf-4660-4db5-b29a-471034d07b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bd:94:ed:23:f9:34:9b:7d:3d:f1:df:f2:fd:
                    8f:af:68:d3:4f:7e:58:54:27:f3:2b:1c:ed:11:9a:
                    2f:71:63:b7:dd:ec:8c:cb:c6:51:1f:bb:31:67:eb:
                    48:12:bd:08:fa:07:af:a3:de:7e:4b:ad:7e:2b:30:
                    fa:1c:95:78:fe:92:f2:b3:8d:09:60:30:22:20:e0:
                    b4:91:8a:d4:91:fc:aa:97:1b:79:08:67:fa:23:28:
                    eb:1a:31:65:f6:fa:c6:7e:11:c5:45:3f:38:59:aa:
                    8b:ea:0e:3f:ef:d8:41:77:3e:98:0f:8f:56:bf:7d:
                    f8:83:fc:71:53:c2:9a:4f:88:26:8d:83:c6:4d:dc:
                    37:c7:d2:37:e4:43:29:d8:0f:c4:61:b1:92:04:c9:
                    5b:32:43:e7:20:60:61:47:aa:47:5f:54:c1:f5:28:
                    0f:56:b8:1d:0d:dc:1c:7e:34:a2:1b:b0:ac:9e:2b:
                    35:19:19:44:35:cf:37:2e:e7:d4:f7:9a:b0:e1:92:
                    7e:d9:7f:97:0c:d4:36:c9:b0:d9:44:b8:24:9e:a4:
                    8a:d1:de:17:50:b3:f8:aa:f5:f2:d1:a2:97:8c:20:
                    c5:bd:81:9d:dc:09:0d:5e:76:e4:9d:2a:07:3f:71:
                    91:2b:95:e4:68:ec:3c:a7:4d:06:d7:9f:be:ec:71:
                    82:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DC:6F:CD:27:0D:DF:E6:AF:3E:21:B0:E0:28:AD:C5:BA:9F:1A:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/39acce6a-a4c1-3ba7-bcb6-2819d6454d8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9bc0:1010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:0c:04:38:22:a8:56:99:57:b7:f5:40:e5:d5:ad:be:d4:df:
         fc:87:7b:a2:7b:68:85:b2:6c:d5:41:96:2b:44:b7:af:3d:e3:
         7c:ca:ce:c5:c0:29:c6:bd:33:37:b2:b3:85:b6:57:38:a7:65:
         43:18:f1:6f:9a:fb:5b:e9:c1:da:94:8d:a8:ec:82:28:f5:ba:
         d5:52:56:84:e5:e3:20:7b:de:f0:c7:b6:bd:8f:7f:7b:25:6b:
         63:ea:32:8b:fa:f3:05:42:5a:44:0c:63:b9:3a:37:a9:00:46:
         25:02:bb:9f:c1:99:38:16:df:d1:24:95:3a:2d:c6:39:b9:19:
         1f:92:e8:c4:b0:bb:04:07:41:f3:70:04:43:d8:d9:a0:1c:92:
         4a:d9:22:b9:89:5d:ef:21:93:5f:21:21:17:cf:9c:9e:ad:be:
         d6:6a:e7:0e:ef:89:df:18:82:52:c9:66:62:26:04:64:c6:a6:
         42:02:19:a3:d7:cf:40:f9:c6:fa:68:cd:a0:72:07:db:b0:e0:
         7b:f3:9c:c7:68:92:c1:23:db:19:2f:30:83:0b:aa:0a:10:29:
         5c:1f:f9:64:45:6f:a8:e8:cd:c3:36:5c:9b:ea:fc:3e:bc:3c:
         e7:2a:e2:59:b6:8d:e4:cd:63:51:3f:73:25:90:d0:44:b5:89:
         c9:3a:3a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:15:06 2025 by rpki-client