Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a86368d0-d991-3082-9c0f-93fb84950372.roa
File:                     a86368d0-d991-3082-9c0f-93fb84950372.roa (raw, json)
Hash identifier:          SMIIpu0Ugeo6WpBde8zwXm/EL8nrRz812rKPPd/23+Y=
Subject key identifier:   34:7B:F0:F1:50:BF:B3:CA:D0:1A:2D:ED:07:E0:71:E5:14:F3:DB:9F
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584AF5212EFB211BC321CE12C680
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a86368d0-d991-3082-9c0f-93fb84950372.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     11055
IP address blocks:        2604:7a00:ffe0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:2e:fb:21:1b:c3:21:ce:12:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=74c05b4d-ae01-4ed3-a312-bdafb24341c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:19:ef:98:5d:06:f8:4a:ac:c5:37:9d:64:a4:
                    6c:cc:bd:0d:ea:88:e5:15:a7:a4:5e:ba:6d:64:1b:
                    a3:e7:e7:7e:63:f7:55:fa:6f:bb:1f:85:bb:29:76:
                    1f:f8:bc:c1:4f:a5:d5:98:e6:e6:b7:9e:6c:a6:ae:
                    ac:f2:49:a8:07:58:b2:5e:67:57:e4:90:e3:30:43:
                    2f:95:d8:54:59:ff:37:3f:4e:4f:4b:6d:4b:b1:31:
                    57:c1:90:31:41:96:83:87:39:13:68:3b:2b:52:2e:
                    22:49:ff:21:4e:fd:db:a7:3b:6d:5a:28:6a:a5:da:
                    e1:df:5e:9d:33:3a:af:4f:07:b8:58:40:3b:62:70:
                    05:49:f7:db:0f:47:a6:fb:00:f8:f6:48:f1:53:2b:
                    8d:ea:bd:95:08:4e:34:ea:ce:f5:64:00:fb:b3:ad:
                    03:42:8f:09:e1:9c:c9:72:32:7b:b1:84:b6:0c:f0:
                    4e:f6:df:a1:f3:54:e7:b3:3e:97:9c:22:e5:a9:a1:
                    c8:df:08:ca:6c:5f:9d:ab:d4:fa:3a:33:b6:39:14:
                    d6:e5:2d:55:6b:c5:a4:8c:ac:5e:b3:9a:7f:9b:76:
                    5a:76:64:38:0a:5e:5f:44:51:25:2d:f7:a1:2e:9d:
                    ff:ec:f9:a7:f9:5a:69:77:26:b6:df:b5:80:d0:21:
                    1c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7B:F0:F1:50:BF:B3:CA:D0:1A:2D:ED:07:E0:71:E5:14:F3:DB:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a86368d0-d991-3082-9c0f-93fb84950372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a00:ffe0::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:6e:44:7c:7f:76:fd:05:81:db:51:ef:fb:6b:8c:f9:aa:54:
         97:a5:96:1a:79:7d:d9:9f:42:75:c9:9f:86:98:f1:3c:a0:4e:
         51:c0:52:e4:2a:44:54:35:70:07:13:3c:85:9b:b7:84:17:59:
         49:c9:5f:85:3f:4a:df:19:67:a9:c3:49:80:f4:d7:6d:37:88:
         ac:c1:9e:74:a1:3c:95:61:9a:8d:e5:f5:4d:75:af:28:45:c9:
         5c:55:aa:88:13:97:cb:de:4b:a0:23:bd:0c:73:1b:67:4a:b1:
         88:5b:89:0f:7d:dc:b4:a4:52:5e:1b:b7:67:1d:d3:b1:4f:b0:
         57:05:cf:47:17:4f:0b:32:ec:37:af:15:24:24:b4:50:22:08:
         d8:6d:04:24:06:70:0d:6c:88:f2:da:c9:ee:c6:07:44:bc:11:
         05:3d:4e:58:34:55:c7:32:af:e4:f0:d6:4e:eb:20:51:e8:e1:
         7c:4a:76:14:82:33:9d:71:9e:a4:83:9f:93:e7:c7:f2:c2:76:
         97:5d:77:1a:78:4e:c5:7d:52:04:44:29:4d:81:ed:e6:4d:aa:
         43:c2:21:fe:5c:86:f7:78:60:27:a6:85:a2:fe:c3:25:01:e2:
         0a:7f:00:37:e5:c2:03:fb:34:81:3d:9c:77:8b:30:1b:56:1d:
         10:52:23:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:39:14 2025 by rpki-client