Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/8e38af23-8759-37a2-8925-b153597bacf4.roa
File:                     8e38af23-8759-37a2-8925-b153597bacf4.roa (raw, json)
Hash identifier:          WTuw6FnBcSwp8xvUPBD0O1Fbv+6UZa/o/D4heOL0b18=
Subject key identifier:   BC:EA:D9:E2:45:0B:F6:48:9C:25:44:4A:26:BE:18:F4:C6:7A:54:A0
Certificate issuer:       /CN=457522b0-cf44-4757-ac16-6215c2516e52
Certificate serial:       010D0C9F4328584ABABBC8997EA3BEC0BD27EC00
Authority key identifier: 90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/8e38af23-8759-37a2-8925-b153597bacf4.roa
Signing time:             Sun 03 Aug 2025 02:59:29 +0000
ROA not before:           Sun 03 Aug 2025 02:59:29 +0000
ROA not after:            Sat 01 Nov 2025 02:59:29 +0000
asID:                     401890
IP address blocks:        2604:1a20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:bb:c8:99:7e:a3:be:c0:bd:27:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457522b0-cf44-4757-ac16-6215c2516e52
        Validity
            Not Before: Aug  3 02:59:29 2025 GMT
            Not After : Nov  1 02:59:29 2025 GMT
        Subject: CN=727dd720-490e-4f56-8114-a7b8772eb052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cd:d9:96:f6:ab:98:26:b1:9a:78:6f:54:74:
                    17:1e:43:93:f2:95:e7:05:97:7a:7f:d4:3d:bc:11:
                    bf:8f:e3:cf:d9:14:58:73:a8:e0:27:ac:32:d3:20:
                    de:c4:b0:5c:fe:97:03:99:06:da:be:2e:a9:2c:46:
                    25:76:85:a7:ae:3e:18:06:16:0d:d8:df:d5:46:0b:
                    90:ec:97:c0:76:b6:ac:08:ed:2b:a9:70:11:c2:6d:
                    20:0e:07:56:7a:ef:94:21:2d:ad:17:a0:f2:77:93:
                    37:9e:6f:6e:dd:a5:73:e4:20:9e:af:72:89:69:89:
                    68:bd:00:a7:12:0a:e5:84:04:8b:c7:fa:fb:1e:cd:
                    fc:83:41:ca:e6:cb:6d:cb:01:09:d4:15:6f:d6:c1:
                    9d:13:a9:0a:8f:18:1a:f5:62:f6:87:dc:a9:7a:55:
                    4d:d9:ef:47:01:3c:1a:ad:1b:b6:33:81:bb:1d:0b:
                    21:dc:1d:e2:0f:55:6f:37:3d:2b:e4:3e:51:a0:8d:
                    cc:2e:3c:d2:65:03:68:10:26:a3:b7:ce:e5:a9:0d:
                    66:11:0d:fc:4f:2c:d7:12:50:88:78:d1:50:a8:64:
                    37:81:47:09:e4:45:ad:59:19:6c:60:0c:34:ee:20:
                    51:8b:ce:6b:72:25:aa:9c:11:b1:3b:38:36:85:41:
                    d6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EA:D9:E2:45:0B:F6:48:9C:25:44:4A:26:BE:18:F4:C6:7A:54:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/8e38af23-8759-37a2-8925-b153597bacf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl

            X509v3 Authority Key Identifier:
                keyid:90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1a20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:50:04:8f:58:d3:a6:f4:c0:ff:7c:16:40:a4:0c:9a:f6:cd:
         59:b5:41:a8:98:51:58:9e:2b:60:c9:bc:1e:b4:bf:71:78:ce:
         fb:d7:1e:76:80:56:e6:09:63:a2:77:35:51:1d:77:33:4f:19:
         38:4a:bd:86:05:27:12:0e:3e:b7:53:f3:9c:d8:07:e6:0e:d0:
         0b:9b:ac:45:70:cf:eb:5d:c5:14:9c:4a:62:1d:a0:21:8f:0e:
         cb:e1:82:88:60:39:22:86:a8:75:68:7d:cc:3f:b9:0f:27:91:
         13:19:71:70:9b:1e:89:76:f2:75:33:9a:c8:ee:92:7a:b6:d9:
         fc:14:a3:ba:dd:9b:db:fd:63:39:de:cb:7b:65:00:35:0d:b8:
         06:bb:3b:f3:2d:38:3b:6a:47:f4:52:a5:58:97:9d:d0:6c:19:
         1d:0c:51:9a:58:e4:86:9e:65:d8:59:43:94:c7:7d:97:19:45:
         63:0f:bb:46:af:1a:a4:e1:cb:a4:18:6b:09:45:24:3d:71:12:
         c5:95:fb:ce:d8:b1:70:04:66:72:98:fe:1b:39:a0:9c:b0:9b:
         81:c9:ed:1b:53:b4:ab:bb:53:fe:e5:47:4b:69:08:e2:5b:21:
         d3:14:c9:76:06:a9:f3:29:0e:61:13:9d:55:95:92:64:07:10:
         9f:59:3c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:38 2025 by rpki-client