Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/7c5e8c6d-8f02-34bb-b586-43ecf1e39415.roa
File:                     7c5e8c6d-8f02-34bb-b586-43ecf1e39415.roa (raw, json)
Hash identifier:          k5Y1XJGzS2N/BjxyNg/5rqYzhs2gtrJgRm3HSovjlA4=
Subject key identifier:   D5:28:28:3D:EC:0B:1A:E4:2F:30:FF:96:55:38:FC:CF:01:CD:68:6C
Certificate issuer:       /CN=45657d9f-043b-4838-9072-ef0906bb567e
Certificate serial:       010D0C9F4328584AE1966DC65DA8EDA3B6386A00
Authority key identifier: D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/7c5e8c6d-8f02-34bb-b586-43ecf1e39415.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     16652
IP address blocks:        2620:13:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:6d:c6:5d:a8:ed:a3:b6:38:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45657d9f-043b-4838-9072-ef0906bb567e
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=9b05244f-493d-4bc4-842b-1a69922fb2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:68:4e:fc:dc:2a:38:56:ec:ca:ef:ef:af:91:
                    75:25:32:29:c2:b1:66:a4:2d:a7:c0:0b:b4:f9:bb:
                    b6:58:db:1d:e9:b6:ef:1f:35:22:53:78:e2:78:6d:
                    ba:91:bc:ca:6f:20:e0:4e:95:f8:18:c8:a9:db:4f:
                    5d:32:e5:ef:87:e6:89:67:3f:1c:26:c7:ee:b2:50:
                    a8:37:35:70:72:2a:f2:5d:59:70:87:1a:46:70:16:
                    27:d2:9b:a4:c9:2a:65:b6:16:c2:11:3e:8c:88:e5:
                    a1:93:65:f2:f5:fb:74:5f:0f:a3:4e:6c:c7:d2:59:
                    68:61:8b:bb:12:58:04:c0:d2:8d:2a:16:a1:94:f3:
                    92:30:91:be:2f:81:66:1f:82:0a:b1:23:e3:98:94:
                    f6:3e:d8:f8:85:5a:f9:6b:ef:97:46:cd:71:87:8a:
                    10:0a:46:6b:9d:2a:47:a3:2e:06:13:3f:4a:f6:e7:
                    3c:29:4c:3d:0b:fa:76:d9:df:fa:b9:37:61:6f:22:
                    77:81:fc:4c:35:cc:fa:f9:b9:3e:28:18:47:a9:1b:
                    a8:b8:85:ba:6d:c3:00:24:bd:48:e1:86:46:f7:b6:
                    c9:a1:a8:d0:80:9f:db:28:96:d5:04:3c:5f:a6:1c:
                    6a:c2:b7:0a:82:0b:d5:83:89:16:c8:19:ff:93:a0:
                    1c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:28:28:3D:EC:0B:1A:E4:2F:30:FF:96:55:38:FC:CF:01:CD:68:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/7c5e8c6d-8f02-34bb-b586-43ecf1e39415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.crl

            X509v3 Authority Key Identifier:
                keyid:D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:04:d6:bc:6c:44:af:b8:d6:0d:3e:ee:52:a4:0e:6d:67:b4:
         de:e3:e9:f8:51:d5:db:7a:ec:e0:7a:3a:cb:cd:d7:6b:ac:53:
         73:0a:e1:20:96:92:6e:df:b7:9a:66:d4:da:83:ae:53:fd:f9:
         d0:b2:68:f9:9e:c6:4f:e2:dd:ea:ae:5c:51:e0:34:e1:ff:de:
         b2:e1:2c:9c:63:6e:7a:b3:51:58:f6:cc:1f:67:78:8c:fd:8d:
         fb:50:23:71:f1:34:70:18:8e:16:bd:eb:57:ee:69:8f:39:5d:
         70:a5:34:b0:ce:14:f9:67:b0:04:97:b6:44:b2:62:67:0e:e5:
         4a:5a:0d:86:a0:fc:fc:bb:a8:0b:98:a2:77:af:53:42:e8:dd:
         38:f7:a7:46:e7:c8:72:b2:f1:8a:4d:10:f7:c6:2d:91:20:41:
         49:1b:82:e8:5e:39:8b:b6:19:34:e0:28:78:d1:41:b7:25:da:
         e4:b0:41:de:78:ba:eb:74:70:b3:f4:0b:8e:54:a2:fe:b9:ba:
         1e:3f:9e:8f:d2:34:0f:a5:6e:07:ad:34:fa:5b:b8:20:04:4c:
         dc:33:a2:59:72:51:24:7f:35:d2:40:8b:aa:d8:72:77:7b:2f:
         5f:da:a9:50:14:25:81:f5:bb:08:f5:17:47:9b:b8:06:1e:7b:
         76:56:a1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:47:34 2025 by rpki-client