Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/55293eba-48ab-3e62-b2d3-6563f352a4e1.roa
File:                     55293eba-48ab-3e62-b2d3-6563f352a4e1.roa (raw, json)
Hash identifier:          CpwtbMiqfKoRz1vVqwmp8ddF9nsnY9ZfaXJeYWvCzNQ=
Subject key identifier:   AC:EB:C1:7D:8F:D0:6F:45:8A:A2:91:C1:16:B9:7C:DA:CA:08:EB:FE
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584AECC135AB7F6DDB326546DA00
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/55293eba-48ab-3e62-b2d3-6563f352a4e1.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33059
IP address blocks:        2605:8300::/48 maxlen: 48
                          2605:8300:1::/48 maxlen: 48
                          2605:8300:3::/48 maxlen: 48
                          2605:8300:4::/48 maxlen: 48
                          2605:8300:5::/48 maxlen: 48
                          2605:8300:6::/48 maxlen: 48
                          2605:8300:7::/48 maxlen: 48
                          2605:8300:9::/48 maxlen: 48
                          2605:8300:a::/48 maxlen: 48
                          2605:8300:b::/48 maxlen: 48
                          2605:8300:c::/48 maxlen: 48
                          2605:8300:d::/48 maxlen: 48
                          2605:8300:10::/48 maxlen: 48
                          2605:8300:11::/48 maxlen: 48
                          2605:8300:12::/48 maxlen: 48
                          2605:8300:15::/48 maxlen: 48
                          2605:8300:16::/48 maxlen: 48
                          2605:8300:18::/48 maxlen: 48
                          2605:8300:19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:35:ab:7f:6d:db:32:65:46:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=47a37166-5164-4e66-885f-6fe86db01189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:63:9e:a8:da:de:77:48:f5:cd:80:21:b8:
                    c4:da:1e:e7:05:ea:bd:ef:7a:aa:16:2f:2f:36:c2:
                    00:64:62:38:51:e1:5a:5d:db:87:cd:d9:72:c3:dc:
                    e7:83:96:a9:c0:73:1e:06:2b:be:a5:da:53:18:0b:
                    f4:c0:59:35:d7:8c:ac:b7:b4:78:4f:eb:5a:be:78:
                    44:2d:a2:8e:4f:ca:1a:01:c5:a1:0f:79:44:7b:09:
                    7f:29:f1:27:18:0e:a4:2a:64:cc:bf:5b:ac:24:fd:
                    f3:1c:c4:9a:4a:b8:8c:0c:99:c6:23:66:c0:23:a9:
                    4c:c7:70:04:6b:e5:3a:63:08:3e:69:23:26:cf:72:
                    59:75:30:88:56:b9:0c:1a:02:9c:6d:43:2d:34:b4:
                    63:24:00:2c:ab:a1:b0:b7:93:bd:f6:f7:46:ad:2d:
                    89:f0:68:c8:c0:ec:00:37:64:bc:fb:63:b2:a3:fd:
                    e7:89:8d:0f:65:c2:09:48:d6:d4:bd:d8:f3:f1:0f:
                    f4:15:6e:8b:13:a0:78:d7:9b:8d:90:56:bc:06:65:
                    25:90:a6:75:e4:43:7c:4e:90:ce:30:38:4e:eb:7f:
                    fa:e1:7c:03:6c:1d:c4:a2:82:70:f6:d3:d3:42:b1:
                    83:93:2f:2c:92:ff:bf:f6:67:79:42:09:0d:b4:41:
                    0a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EB:C1:7D:8F:D0:6F:45:8A:A2:91:C1:16:B9:7C:DA:CA:08:EB:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/55293eba-48ab-3e62-b2d3-6563f352a4e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8300::/47
                  2605:8300:3::-2605:8300:7:ffff:ffff:ffff:ffff:ffff
                  2605:8300:9::-2605:8300:d:ffff:ffff:ffff:ffff:ffff
                  2605:8300:10::-2605:8300:12:ffff:ffff:ffff:ffff:ffff
                  2605:8300:15::-2605:8300:16:ffff:ffff:ffff:ffff:ffff
                  2605:8300:18::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:af:56:2d:b5:df:0d:24:fb:b8:9d:bb:48:53:bf:65:07:61:
         97:f3:1e:e0:43:78:98:ff:8c:26:29:fa:38:3a:e9:7b:cc:31:
         f8:9b:41:cf:68:29:bc:2a:a4:cb:41:3e:1d:40:dd:75:d6:dd:
         a3:ef:92:5e:de:46:71:5f:0d:c6:fe:4c:89:7a:c2:3f:b6:95:
         5f:8d:a3:69:3c:83:4f:83:74:2f:6d:56:57:2b:de:ea:f4:ed:
         d9:66:b8:f8:33:4f:9e:a8:dc:63:2f:a8:4c:3b:28:3f:d6:35:
         e4:19:44:cb:6a:6f:16:92:88:bc:0f:95:89:8d:f4:ca:18:be:
         6f:b7:8e:10:20:50:8d:9f:7f:e7:44:14:fd:8d:6d:c8:fa:7d:
         e4:de:b2:4a:8e:e8:93:ba:30:f6:a8:75:b3:70:1b:f6:c7:67:
         58:56:a8:de:1e:41:1c:2e:cb:74:b9:05:2c:5a:9e:1c:a3:1c:
         7d:2c:a5:52:13:88:ac:11:a5:ca:05:5d:35:1a:e9:0b:c7:06:
         0f:fc:4f:72:c9:34:db:3d:50:e7:11:f4:64:1d:09:7c:33:f6:
         f3:0b:0d:2d:b0:30:52:4f:23:c8:cd:26:7c:06:99:da:7e:72:
         7d:8a:be:39:c8:94:0f:a0:7a:f9:23:c0:ef:a1:46:eb:f5:83:
         7a:8c:25:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:33:30 2025 by rpki-client