Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa
File:                     82e546db-2ee7-3746-a4b8-5528ff26ec78.roa (raw, json)
Hash identifier:          n9HxSPa7nxdvbxkDL/XjhRg8zU0bAvl6CJCrd0R0Qg8=
Subject key identifier:   D7:6B:95:C0:0F:83:93:D0:94:C9:D3:DC:19:58:EC:30:DA:5B:25:1C
Certificate issuer:       /CN=b824dfb2-be33-4946-af95-2296acd823af
Certificate serial:       010D0C9F4328584AC8765965D4791080D9B16400
Authority key identifier: 39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     10737
IP address blocks:        2607:4940::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:59:65:d4:79:10:80:d9:b1:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b824dfb2-be33-4946-af95-2296acd823af
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=0ddd6d26-15c0-48e1-a75f-cd38d3cbd19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:3a:ea:39:55:39:3e:03:7f:34:da:bf:7f:
                    6a:45:ed:96:03:65:c7:55:67:ff:33:86:f8:4e:b6:
                    7e:69:6e:73:87:22:e4:c1:2a:c6:3b:2c:ca:8c:77:
                    e5:60:0e:22:f8:b7:e7:0f:e2:10:cd:8b:f3:89:bd:
                    d3:bd:f7:a9:dd:e1:58:85:bd:2d:ed:42:c7:d3:2f:
                    a9:ee:f9:01:91:27:e6:79:95:13:48:db:f2:16:ff:
                    43:1d:77:47:57:dd:2e:be:e0:fd:c5:bb:a5:4f:ab:
                    52:ba:15:b2:bc:a5:f6:f7:21:cf:67:3b:83:e2:0a:
                    df:f8:12:0c:34:28:61:c0:77:4c:9c:86:04:c2:63:
                    52:f8:85:8e:27:57:fe:e0:d7:1e:c8:b1:11:7a:91:
                    8c:5a:d8:91:71:4c:be:99:67:3f:39:19:5f:c8:4a:
                    0c:21:ff:05:ad:43:33:3c:6d:83:6a:f0:20:e2:94:
                    b3:fe:3c:23:4a:37:e5:64:01:2d:5a:0c:c6:13:c3:
                    3b:06:94:87:18:b4:3d:c4:af:9e:df:34:c1:c2:b1:
                    39:6d:1f:03:ef:86:fa:4a:cb:87:99:f7:d0:1f:86:
                    f5:dc:75:83:74:d4:3b:f6:c6:83:13:85:57:4a:f5:
                    bb:9c:20:f4:8f:50:bc:46:37:05:10:c9:a9:f5:59:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6B:95:C0:0F:83:93:D0:94:C9:D3:DC:19:58:EC:30:DA:5B:25:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/82e546db-2ee7-3746-a4b8-5528ff26ec78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af/b824dfb2-be33-4946-af95-2296acd823af.crl

            X509v3 Authority Key Identifier:
                keyid:39:D0:91:2E:FD:E1:4C:F5:51:46:22:F2:90:82:4D:17:A0:6C:85:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b824dfb2-be33-4946-af95-2296acd823af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:5f:0a:ac:05:cb:b4:d7:af:11:e9:68:c5:17:60:03:46:3a:
         4e:88:63:01:47:30:e9:02:a5:55:c6:67:36:f7:c8:0b:d8:04:
         5b:fa:26:c2:48:12:dd:35:17:c8:6f:46:c0:1a:b2:be:25:2d:
         b7:68:ce:2d:4c:64:11:c7:45:a8:5d:95:18:09:3d:15:84:a3:
         b8:60:b3:92:5f:6e:0b:f7:dd:7c:2a:00:9c:8a:9e:e4:c3:5b:
         37:1c:fc:fb:ac:b3:a0:4a:f8:4b:2e:81:66:a8:b9:2e:59:40:
         cb:f3:7b:74:35:fd:5f:5e:59:8c:cd:af:f0:c3:bb:01:37:b6:
         f3:d8:2b:43:47:77:79:1b:40:fd:2b:f1:ac:d1:0e:58:fd:a0:
         6e:5e:ef:0b:3f:25:c4:f0:be:f4:0e:2b:3c:81:a6:64:aa:f9:
         bc:c2:79:d7:07:74:6e:26:a2:44:8c:23:9c:0c:e5:2e:58:cd:
         33:33:ec:d0:0a:b8:70:fe:1c:0e:11:c8:33:6f:94:59:57:a2:
         3d:5a:8b:8d:f6:00:82:64:47:f9:09:2d:1c:07:a5:3e:d4:25:
         e6:84:67:8a:b7:4f:e6:b0:57:7c:1b:b6:4d:0b:8d:d0:06:2b:
         3a:d4:be:65:fd:74:fc:60:7a:a3:e7:00:05:a0:64:f2:ea:97:
         b2:03:ad:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:01:25 2025 by rpki-client