Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d64ecb40-02f2-3d19-a2a5-b7cfd4a01008.roa
File:                     d64ecb40-02f2-3d19-a2a5-b7cfd4a01008.roa (raw, json)
Hash identifier:          Em7jtl2uj6iPRZJ5fyYcnBTGvOM0I0Cz+525txJny64=
Subject key identifier:   B1:DA:BF:8E:DC:37:90:CB:CA:9F:99:91:CA:A1:36:75:81:A0:C8:E5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB220F289CF3D7DC8C12F7A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d64ecb40-02f2-3d19-a2a5-b7cfd4a01008.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     22258
IP address blocks:        2603:3014:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:f2:89:cf:3d:7d:c8:c1:2f:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=4f46d094-5ad4-4a68-97e5-202d94e253b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7c:5e:cf:3f:4a:bf:bc:3e:20:14:76:22:a5:
                    6f:79:98:5d:95:34:e7:a3:19:b2:5c:ca:80:56:3a:
                    e3:45:f6:1b:dc:2f:aa:86:e7:9f:ff:8b:a6:0d:cd:
                    59:88:6c:fb:27:cc:9d:5b:f3:03:7d:19:f0:03:3e:
                    0d:92:4c:e5:9c:69:55:49:22:cd:f2:b7:d4:a1:d7:
                    a3:1e:8a:dd:29:03:51:61:26:e1:2e:24:62:1e:b1:
                    bb:11:4f:48:8b:aa:b6:c7:62:21:a2:44:74:d4:f8:
                    73:6a:99:29:10:fe:e8:b8:db:5e:98:2f:47:b5:5f:
                    07:4a:43:8e:bc:53:34:c3:7a:87:c4:d6:2e:93:df:
                    91:41:aa:0d:ce:60:14:a7:7b:e4:52:f7:d5:db:13:
                    97:c8:7e:17:f3:d5:96:67:2e:b5:87:25:91:af:da:
                    ec:6d:29:b3:ad:14:d7:38:35:25:c6:28:85:aa:a8:
                    52:e4:a8:0a:d0:d4:6a:47:14:95:42:ae:d9:ad:39:
                    df:41:df:9a:15:f1:f0:9e:8f:47:b5:74:6d:98:91:
                    5c:f5:bc:e0:78:a1:1c:5e:5d:f6:34:52:bc:ac:2e:
                    16:bf:50:2f:fd:ad:65:3e:0f:a2:e0:72:39:91:d6:
                    09:a7:a2:89:6b:5b:fd:02:9a:93:68:fa:68:7d:c3:
                    01:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DA:BF:8E:DC:37:90:CB:CA:9F:99:91:CA:A1:36:75:81:A0:C8:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d64ecb40-02f2-3d19-a2a5-b7cfd4a01008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3014:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:b2:69:f5:11:55:2d:94:b8:9c:d8:f7:e0:ff:55:81:0f:7a:
         dd:b2:c0:72:a9:74:f6:89:30:5a:53:04:f0:cb:5d:03:2d:f0:
         d3:3e:b9:f2:26:9b:5b:4c:ac:4e:e3:17:7a:d2:05:3f:f7:a6:
         6c:c5:c1:80:2a:d0:8f:19:7a:77:64:a3:78:98:e7:05:e1:e5:
         86:10:02:67:e3:03:c3:9c:64:eb:b0:5a:bd:38:9a:2a:fb:80:
         2f:f6:b5:94:7d:fa:55:eb:f1:8b:28:8c:92:06:4d:fa:cd:bc:
         53:da:a7:70:87:1b:f6:83:48:c3:5c:9d:bd:5e:3e:20:b0:34:
         e9:d8:7e:b2:07:22:77:b4:9d:74:5c:57:1a:0e:59:40:07:aa:
         ba:8c:64:48:71:af:8e:14:23:69:1d:24:8c:f5:10:a8:19:de:
         34:26:e2:73:22:84:87:91:43:af:f3:40:53:0d:f3:e0:39:2b:
         e2:5a:b5:9e:00:2d:c2:73:dd:c1:92:18:ea:58:1e:e2:17:e2:
         d4:d0:c1:15:9c:47:c4:29:6e:cd:12:81:07:74:07:f3:d0:23:
         0a:3f:bb:45:bf:3e:a9:19:82:58:c5:48:fd:13:7c:58:9c:97:
         01:fd:e0:89:d5:09:32:92:e9:c3:66:b3:2e:ff:34:07:34:e0:
         64:c6:9c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:58:40 2025 by rpki-client