Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8ec33fe-caa3-4813-9088-b739c782ce1a/3c392901-b4fa-3820-a976-1599719fb8ac.roa
File:                     3c392901-b4fa-3820-a976-1599719fb8ac.roa (raw, json)
Hash identifier:          35TBV02LKbiNi4nzGGBQlghHJumIkoK/IHTu8YHZ160=
Subject key identifier:   E6:8B:D9:ED:CE:75:22:5A:92:1C:5B:DC:16:D8:D9:81:F1:8E:7B:5C
Certificate issuer:       /CN=f8ec33fe-caa3-4813-9088-b739c782ce1a
Certificate serial:       010D0C9F4328584AD3A0F67AB894E122282E3180
Authority key identifier: 68:38:1F:AD:84:E2:AA:7C:59:36:ED:66:0A:17:20:60:1A:AA:CC:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8ec33fe-caa3-4813-9088-b739c782ce1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8ec33fe-caa3-4813-9088-b739c782ce1a/3c392901-b4fa-3820-a976-1599719fb8ac.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     30081
IP address blocks:        2605:4c40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8ec33fe-caa3-4813-9088-b739c782ce1a/f8ec33fe-caa3-4813-9088-b739c782ce1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8ec33fe-caa3-4813-9088-b739c782ce1a/f8ec33fe-caa3-4813-9088-b739c782ce1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8ec33fe-caa3-4813-9088-b739c782ce1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:f6:7a:b8:94:e1:22:28:2e:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ec33fe-caa3-4813-9088-b739c782ce1a
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=f14f3ddb-5be0-484d-b989-ed0fb8087501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:df:89:cc:4d:8c:d2:89:1a:42:f7:9e:11:
                    c5:8d:c4:eb:7d:d3:5b:4d:ed:34:15:24:e3:04:5a:
                    77:2b:00:7e:a3:27:08:c0:28:bd:96:06:e8:2e:5b:
                    b7:92:b1:3d:a3:46:e4:8e:d9:a9:81:33:64:b1:87:
                    3a:db:4a:97:aa:b5:f8:76:24:40:0e:80:df:8a:ad:
                    df:28:7c:65:f0:79:fe:b1:fa:cd:06:68:c6:89:cd:
                    17:23:be:c1:8d:e9:64:1d:dd:56:b1:31:4f:a5:97:
                    3a:31:00:5c:f3:75:b8:a2:8d:e8:3a:1e:0f:29:b7:
                    3a:bd:e9:f3:04:b4:7f:24:59:67:68:d3:09:f7:99:
                    2a:fd:8c:31:84:bb:f3:b6:ed:a2:9c:b4:b7:f1:7e:
                    9a:73:01:e1:fd:c6:85:4c:82:65:93:e4:86:c4:6a:
                    70:73:34:a7:f4:be:5f:0c:2d:9a:95:27:a8:87:c3:
                    9e:e4:b2:39:23:9f:07:c6:4d:5b:20:cf:6a:93:b4:
                    09:df:35:73:04:00:f7:b1:13:d0:30:fe:74:05:ac:
                    2d:b6:e1:c0:ec:70:32:76:ee:02:d8:dc:96:a7:79:
                    8e:cb:8a:b2:8f:70:a9:1f:e7:b8:82:78:7b:20:8e:
                    80:1c:29:8d:51:04:bf:9c:95:44:0e:d8:92:33:cd:
                    2f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8B:D9:ED:CE:75:22:5A:92:1C:5B:DC:16:D8:D9:81:F1:8E:7B:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8ec33fe-caa3-4813-9088-b739c782ce1a/3c392901-b4fa-3820-a976-1599719fb8ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8ec33fe-caa3-4813-9088-b739c782ce1a/f8ec33fe-caa3-4813-9088-b739c782ce1a.crl

            X509v3 Authority Key Identifier:
                keyid:68:38:1F:AD:84:E2:AA:7C:59:36:ED:66:0A:17:20:60:1A:AA:CC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f8ec33fe-caa3-4813-9088-b739c782ce1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:74:80:fa:de:f6:8f:02:6c:92:ef:1c:15:2a:96:c6:8d:b6:
         dd:f5:a4:5b:d7:c1:57:30:49:04:6a:34:b5:7d:34:d9:c3:00:
         c2:43:19:df:da:60:d7:8c:76:79:56:ab:d7:23:41:2a:22:2d:
         f0:9f:89:95:69:91:27:28:45:ba:fd:2f:8d:37:4c:3a:ab:ba:
         3e:43:e6:5f:ef:7d:73:59:f5:b4:3f:cf:04:e9:84:f0:35:55:
         fc:71:c5:ef:f8:0a:5d:08:fa:08:f6:cb:03:64:d3:9c:40:79:
         e7:a5:d9:3d:4a:1f:e3:b0:72:06:1f:68:83:7d:79:03:21:12:
         2b:de:a5:17:50:6d:90:0e:6b:0b:64:19:66:41:1f:ca:80:84:
         f0:73:70:4c:fb:64:6a:db:90:1e:e1:74:00:25:77:67:2b:ae:
         21:5b:5c:a5:de:cf:02:68:4c:37:7d:b0:93:79:cc:16:40:f4:
         37:1f:3c:e1:d8:61:ac:a4:3e:cd:e6:be:db:c6:8e:13:f6:1d:
         5b:e4:a2:32:0a:7c:a1:ca:82:6b:93:41:ca:bf:48:61:56:3d:
         74:b7:0a:30:f0:5b:52:94:95:f6:1a:a1:24:91:c5:81:cc:bc:
         b3:a5:12:18:0d:c1:9a:33:8a:3b:ff:52:74:d3:99:33:85:c4:
         f5:cb:ab:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:24:33 2025 by rpki-client