Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e603453f-527f-3cb5-86bb-e019960451d0.roa
File:                     e603453f-527f-3cb5-86bb-e019960451d0.roa (raw, json)
Hash identifier:          JCPgJs707BKu3tgJooGKnWKCKcAXPl4H9WMSrVFEGA0=
Subject key identifier:   41:67:E8:45:46:1A:BD:83:21:CD:88:BC:96:50:6D:64:05:AC:C4:0C
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABFD408E78DAFDE4C394C5300
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e603453f-527f-3cb5-86bb-e019960451d0.roa
Signing time:             Mon 04 Aug 2025 22:47:23 +0000
ROA not before:           Mon 04 Aug 2025 22:47:23 +0000
ROA not after:            Sun 02 Nov 2025 23:47:23 +0000
asID:                     8987
IP address blocks:        2605:4300:2c02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bf:d4:08:e7:8d:af:de:4c:39:4c:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  4 22:47:23 2025 GMT
            Not After : Nov  2 23:47:23 2025 GMT
        Subject: CN=5ed971ea-3268-4564-969b-043933ba19b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:87:6f:aa:7e:d3:35:65:ef:1a:38:89:f1:f4:
                    fc:bf:1f:83:f0:16:f4:40:12:65:98:e3:d4:1c:39:
                    e5:56:8c:33:be:43:d1:69:ce:0a:86:38:5f:7a:e4:
                    b7:b1:ac:6e:1b:ae:d8:50:8a:57:a2:91:c1:ba:c7:
                    b9:91:77:58:9c:46:87:04:bb:2d:0e:34:45:6b:92:
                    a9:84:1b:ef:87:72:59:67:6b:59:93:a0:32:67:26:
                    a1:58:5e:19:26:37:6f:46:28:11:77:8e:86:a4:bc:
                    12:c1:83:e4:ed:e4:7b:85:8e:33:3a:ab:17:5c:28:
                    b5:4f:7a:7c:e8:f2:b4:ef:c5:fe:61:48:06:8d:6e:
                    2a:cf:cd:cb:ac:a3:51:c1:d1:a9:b7:08:55:f4:8b:
                    fd:1c:82:ea:8a:2f:d3:ef:d4:9c:d2:a5:e3:83:a2:
                    66:66:35:fc:07:02:c7:38:d4:4a:80:26:a1:9c:96:
                    1c:f7:b3:20:c6:3e:a9:63:0a:5c:1d:09:f5:c0:83:
                    62:e6:2d:45:3e:6d:bf:76:4c:39:75:fd:2c:2d:d1:
                    1a:29:80:8d:73:e2:56:77:89:6f:80:fd:c9:b4:2e:
                    c7:55:e9:18:f8:ab:c6:06:fd:1b:21:9e:16:0d:f7:
                    ca:87:0e:c2:2c:c8:bd:a9:65:75:ea:31:21:4b:6b:
                    e7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:67:E8:45:46:1A:BD:83:21:CD:88:BC:96:50:6D:64:05:AC:C4:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e603453f-527f-3cb5-86bb-e019960451d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c02::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:64:eb:c0:a0:cd:8a:93:76:26:03:e1:bb:4e:e2:7e:be:23:
         56:a4:8f:12:1a:5f:15:54:52:07:b8:8f:4a:7c:4b:3e:7a:80:
         96:b4:26:ce:6b:c6:2f:d8:fc:c5:91:01:f0:8c:77:97:11:1a:
         2d:0a:8c:67:17:d3:ae:f5:85:45:9e:9b:06:91:31:65:e1:2b:
         6a:30:e8:52:80:d1:a8:e0:62:86:76:3a:e7:18:cb:5d:d4:7e:
         bb:05:70:12:57:ab:71:d1:fa:c5:62:3e:a0:db:c0:4e:34:33:
         5c:d0:08:66:53:3f:50:7c:56:aa:78:2d:ea:00:72:9d:c1:0a:
         04:7f:b5:e2:15:17:38:4d:5f:a6:df:4a:9e:1c:25:ce:96:46:
         98:d2:c2:86:68:0e:8d:24:c6:cf:94:9d:ba:47:e8:24:13:00:
         72:09:b4:90:47:05:61:bc:47:19:ce:50:37:b5:ac:c6:d0:04:
         b3:d6:b8:61:16:32:7e:ae:cf:7f:c4:a6:fe:95:8d:f1:d0:bc:
         25:8a:c6:30:63:5b:86:75:3f:7e:40:c7:f9:32:1b:8f:22:cc:
         28:c2:f4:82:72:29:78:23:d0:7b:69:3e:12:60:49:cc:25:8e:
         d3:5e:e4:37:7f:ef:9d:6b:51:17:03:1d:bf:7d:af:ea:1d:38:
         eb:4c:e2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:06:35 2025 by rpki-client