Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c748078e-3152-302f-a335-d76b335e8435.roa
File:                     c748078e-3152-302f-a335-d76b335e8435.roa (raw, json)
Hash identifier:          NT34ks/XkUYmIXkUE/KWba79XScouDloW72wjRgrJJo=
Subject key identifier:   A8:AF:EA:91:F7:7D:CC:8A:56:2F:41:F6:31:C6:B0:CC:7A:CA:CE:E8
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584ACE0BA45FA037A3129C1C1360
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c748078e-3152-302f-a335-d76b335e8435.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     396356
IP address blocks:        2606:f184::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:a4:5f:a0:37:a3:12:9c:1c:13:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=1af7e051-4782-40b2-90ac-2113acc7a579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3c:1a:76:35:32:d5:7b:1c:b4:c4:30:5f:ed:
                    e5:ae:0d:e1:4e:cc:f7:e7:a2:ef:3e:09:64:0a:de:
                    22:7e:07:f5:34:fa:6c:61:64:52:0d:cb:f8:32:63:
                    26:21:61:49:14:0f:1e:99:46:d3:73:c6:d4:57:5f:
                    98:4f:b4:b3:11:30:2c:e7:e6:8d:4f:c9:4e:65:1f:
                    cd:ab:67:54:6a:62:c0:84:b0:55:95:99:09:90:a5:
                    ae:ab:90:5d:83:ae:eb:2b:a3:6c:83:25:b2:9b:7c:
                    0b:0c:ed:8f:df:27:3f:57:18:ac:f4:b5:9d:dd:ec:
                    8d:26:8b:a0:94:da:4a:06:9c:fb:79:12:41:6e:4e:
                    47:b6:4d:98:7e:89:40:0b:69:5f:09:52:31:9b:b8:
                    71:38:fe:5e:de:33:a2:93:3c:af:cb:2c:00:21:ba:
                    de:2d:10:e7:08:3c:d3:2c:ae:7d:35:54:5a:42:20:
                    cb:e2:1c:d9:a9:c2:0d:8b:7f:6c:fc:fe:ca:ed:42:
                    d7:53:59:7a:f6:01:88:fe:64:61:de:58:88:f1:ee:
                    f1:d5:76:e9:3c:42:1d:c0:db:65:52:7c:c7:99:d4:
                    aa:da:a6:75:25:56:a6:18:68:35:5c:bf:bc:16:18:
                    5b:ee:ee:62:40:cc:b3:93:2e:a2:9e:1c:61:df:3c:
                    7b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AF:EA:91:F7:7D:CC:8A:56:2F:41:F6:31:C6:B0:CC:7A:CA:CE:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c748078e-3152-302f-a335-d76b335e8435.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f184::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0f:cd:99:ac:a3:da:ae:c1:10:05:ae:c7:0f:b0:3d:d9:ad:
         18:44:55:60:52:d9:d2:43:9c:96:47:3e:c9:bb:ff:f7:aa:3f:
         f6:4b:45:75:55:41:87:2b:05:99:1c:a7:99:72:46:9b:46:dd:
         6c:89:a8:d5:c4:cf:c0:bd:fe:b8:36:fa:37:f0:b1:22:db:02:
         7e:b4:f1:df:49:c3:27:12:3b:a1:c3:15:54:58:18:48:ca:21:
         63:2d:0a:4a:05:e5:89:ae:36:f9:9c:1d:06:0b:a9:e7:85:23:
         f2:e0:e8:54:a0:ec:5a:9f:ed:37:d6:18:72:e2:a3:90:61:55:
         94:83:2c:59:b1:ff:f7:a3:00:c5:02:d1:2d:28:ac:bb:4c:43:
         79:c5:63:80:a0:2e:af:b0:af:77:99:da:83:e5:91:a0:2b:c3:
         6e:4b:c2:aa:e5:c4:ef:bc:22:2f:6d:8c:37:0a:a4:fe:48:f4:
         63:59:f6:8c:4a:87:94:e9:83:60:6e:6d:6a:3c:69:de:f0:68:
         c8:d4:20:67:15:50:3a:53:42:ec:61:53:a9:33:b4:9c:c1:6a:
         01:ba:4d:bb:e8:9b:22:f0:fa:35:9d:40:1e:e7:e5:fe:85:96:
         c7:91:c3:bc:cd:7e:b0:c6:b7:de:fa:62:6c:b0:cb:bd:12:a7:
         4e:4f:27:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:23:32 2025 by rpki-client