Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5763cc8d-fe77-38fb-af99-c39abd086daa.roa
File:                     5763cc8d-fe77-38fb-af99-c39abd086daa.roa (raw, json)
Hash identifier:          cDlwUY9t6TuvXbdgQONbumPigk45zV2oEIjGHOBU6p0=
Subject key identifier:   0E:82:A2:7F:86:24:B3:5A:AE:5F:1F:02:D9:2B:96:ED:A5:CC:D1:E4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2041808342577AAE267C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5763cc8d-fe77-38fb-af99-c39abd086daa.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        2603:2043:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:04:18:08:34:25:77:aa:e2:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=809715e9-31fe-4c04-8dff-45b084e954e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fe:e5:34:f7:e6:36:72:35:2e:6b:10:f8:50:
                    25:ac:54:ab:55:50:a2:b8:fc:91:5c:1c:e3:ec:61:
                    74:d9:7f:9d:16:a1:1a:9f:8c:57:a1:2b:22:ee:9c:
                    32:aa:a5:5a:c8:9f:72:aa:e7:d6:0e:8f:5d:fe:01:
                    84:c7:73:e6:2b:b4:67:10:47:0f:fd:65:37:ce:b0:
                    fa:0f:6e:e9:1e:51:4d:e6:14:77:06:bd:c2:d0:75:
                    d0:ac:15:8b:97:e5:57:f0:ca:67:ec:c6:56:c1:59:
                    19:9a:2d:84:11:cb:ff:98:e5:80:f4:b6:86:e8:8a:
                    0b:52:9b:fb:c7:28:ae:42:c0:38:b0:c1:ae:b3:cf:
                    f1:37:9b:a0:77:c2:7a:ed:50:93:56:8c:6e:0c:f1:
                    4f:09:99:ff:2b:b8:f6:d0:9f:15:d4:a4:16:83:f1:
                    23:78:b0:5b:cc:e7:b9:b1:43:4a:66:2d:b5:57:16:
                    ab:14:02:a4:93:76:a2:e2:7a:87:a3:46:d9:64:e5:
                    0d:ac:7b:2f:8c:a8:db:b3:40:a2:35:c9:e7:4f:fa:
                    d2:91:16:bf:4e:be:86:af:48:1f:eb:2b:45:87:13:
                    e9:a8:12:d9:44:a6:28:7e:28:b5:e4:eb:0c:50:fb:
                    29:75:21:7b:3c:73:b3:a5:d3:97:e6:a2:a0:5c:85:
                    a3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:82:A2:7F:86:24:B3:5A:AE:5F:1F:02:D9:2B:96:ED:A5:CC:D1:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5763cc8d-fe77-38fb-af99-c39abd086daa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2043:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:bd:b6:4c:f5:5d:b5:3f:a8:a8:32:4b:a6:c6:65:27:86:35:
         48:1a:4a:c7:62:50:fd:e5:64:ad:74:97:34:93:43:6f:13:28:
         8a:2f:07:44:d4:d6:6e:0b:41:3f:ee:21:8b:7a:51:00:9b:b8:
         09:12:59:a0:b4:1b:9e:33:75:37:d1:28:04:c7:e0:63:4a:9e:
         72:00:7a:6e:12:22:b6:42:6a:6d:8d:df:94:5c:83:34:f0:bf:
         a7:b0:db:3b:32:62:97:77:ae:06:ab:29:64:e6:da:4f:17:bf:
         d5:e0:50:80:27:55:30:34:c9:62:65:b5:48:b0:82:c9:77:8b:
         29:8e:94:3d:ce:e0:b7:7b:c3:6a:35:ab:81:5b:3b:c9:fe:aa:
         1b:ac:e6:52:d4:4c:b8:a9:76:75:14:83:8f:41:9f:5b:9b:67:
         d3:83:06:e8:97:22:2d:6e:3f:eb:32:62:eb:ee:43:32:17:80:
         22:33:4d:42:09:c0:3e:44:44:6a:91:ec:9b:59:aa:b7:d5:41:
         ce:95:cd:93:2d:4a:69:85:79:c2:78:19:53:bb:ef:2e:dd:0e:
         c8:5b:75:57:7c:28:1f:76:d1:37:ab:80:be:b0:b8:48:79:af:
         eb:9b:dc:f0:01:24:02:f9:d0:cb:1b:d7:65:c3:4b:be:ca:45:
         a4:d2:bf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:58:22 2025 by rpki-client