Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/07db8689-7eb5-3cbe-a546-22401eb77738.roa
File:                     07db8689-7eb5-3cbe-a546-22401eb77738.roa (raw, json)
Hash identifier:          5v0OOIKk3BHH7Ts4ufzpjTuysEHSYp3w52Cs6hOAf/Y=
Subject key identifier:   B3:7C:EB:66:F6:14:80:C5:D2:0D:C9:98:22:47:A2:A5:E6:37:04:D2
Certificate issuer:       /CN=757305d9-2b1e-4783-945b-e7d6cc2e49a8
Certificate serial:       010D0C9F4328584AA590E4F0C332E4AC5E5B5E40
Authority key identifier: 53:C3:B8:6A:90:10:C7:27:BD:73:12:C9:5F:1C:B1:B7:D8:AC:0D:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/07db8689-7eb5-3cbe-a546-22401eb77738.roa
Signing time:             Sat 26 Jul 2025 13:01:04 +0000
ROA not before:           Sat 26 Jul 2025 13:01:04 +0000
ROA not after:            Fri 24 Oct 2025 13:01:04 +0000
asID:                     400941
IP address blocks:        2602:f66b:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a5:90:e4:f0:c3:32:e4:ac:5e:5b:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757305d9-2b1e-4783-945b-e7d6cc2e49a8
        Validity
            Not Before: Jul 26 13:01:04 2025 GMT
            Not After : Oct 24 13:01:04 2025 GMT
        Subject: CN=5b628760-de43-4a7b-86a4-2395465aea9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fe:61:05:0e:6c:dc:2d:3d:b8:b4:fe:45:66:
                    98:af:39:59:41:9e:0b:bb:cf:9b:d2:02:81:3c:f4:
                    69:f0:b0:01:81:96:95:13:49:56:a6:f3:82:ea:00:
                    42:33:f6:01:d0:43:57:d9:5d:a2:ff:f2:a0:dc:eb:
                    0a:4e:4c:67:1a:84:26:9e:ae:36:67:6b:98:2c:75:
                    92:ba:12:07:72:ef:0c:8f:34:56:c6:13:40:c3:a3:
                    1d:a0:19:53:af:ef:4b:28:c7:45:53:d9:5d:21:28:
                    06:71:a6:b5:2a:39:c6:8a:f1:57:1d:1f:83:33:77:
                    f3:53:7e:7c:89:ec:72:26:12:d5:50:fc:9d:2f:75:
                    a5:48:7e:c4:49:82:a6:08:fd:52:e0:ed:b8:e0:26:
                    6c:59:72:eb:ec:b4:a9:36:50:e8:56:d6:08:5c:aa:
                    18:fc:03:59:37:ff:31:dc:f5:87:4e:e5:84:c1:ae:
                    7b:67:a1:d5:18:a0:e6:b4:74:63:05:e2:00:b9:86:
                    e1:be:22:69:55:9d:71:84:10:63:5d:a9:41:a3:da:
                    52:46:0d:9f:66:ba:54:03:99:df:9f:3b:28:85:27:
                    8b:81:66:b3:cf:1b:7a:ba:88:7d:c2:35:4e:50:af:
                    fa:f0:aa:e5:e4:23:b5:df:3c:b8:0c:97:6a:90:f6:
                    23:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7C:EB:66:F6:14:80:C5:D2:0D:C9:98:22:47:A2:A5:E6:37:04:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/07db8689-7eb5-3cbe-a546-22401eb77738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.crl

            X509v3 Authority Key Identifier:
                keyid:53:C3:B8:6A:90:10:C7:27:BD:73:12:C9:5F:1C:B1:B7:D8:AC:0D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f66b:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:76:ec:8e:f9:2c:8d:67:f0:cc:c2:a0:6f:2d:20:13:74:1a:
         df:20:62:78:4b:59:73:d0:f8:c5:b8:e4:7e:40:8c:7d:a1:3d:
         2c:3b:c9:e1:9f:08:9e:6b:c2:85:af:3f:17:25:67:0e:be:64:
         96:76:5a:97:78:6b:6c:d9:dd:60:09:5a:73:61:6f:1c:28:27:
         56:de:5c:67:56:74:9e:42:fc:e5:27:c7:16:07:2b:19:24:d8:
         c1:eb:e1:13:a0:b4:99:1e:b4:05:06:9c:f1:3a:6d:da:24:bc:
         48:c6:79:3e:9d:ef:00:9c:50:a3:f4:dc:2f:db:fa:82:7c:50:
         0b:b6:7b:eb:7e:52:7f:88:f5:64:b9:96:c0:6e:27:55:05:6f:
         20:28:5f:7a:c1:bc:bb:81:da:d7:89:3d:7c:bc:48:e9:fe:ef:
         11:8f:d3:88:bd:a6:12:aa:e2:fe:f9:28:dd:cb:84:27:ab:36:
         27:d5:a1:21:5c:1f:1c:92:dc:aa:59:09:ee:b9:1a:a3:bc:b9:
         de:b8:33:32:f8:3a:8c:ff:42:c2:27:ef:e1:41:23:50:18:b9:
         86:2e:5d:b3:21:a0:9f:4f:43:f0:f4:9c:27:09:b5:36:fa:92:
         01:e8:5f:86:92:aa:18:d1:31:94:05:8c:64:cb:7e:28:24:fc:
         15:9a:91:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:12:09 2025 by rpki-client