Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/5f8631ab-4845-3aef-950c-39ad06146aa0.roa
File:                     5f8631ab-4845-3aef-950c-39ad06146aa0.roa (raw, json)
Hash identifier:          4GxpY+nIJ6JWqnF8zKBn4m5aaM/MaiXTq3kj/SaIiu0=
Subject key identifier:   27:E0:51:93:00:D3:F3:28:82:A6:D4:A9:F7:5D:12:4D:20:60:24:D5
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584AEB5BD14C4D84C0B55915D800
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/5f8631ab-4845-3aef-950c-39ad06146aa0.roa
Signing time:             Wed 20 Aug 2025 13:00:41 +0000
ROA not before:           Wed 20 Aug 2025 13:00:41 +0000
ROA not after:            Tue 18 Nov 2025 14:00:41 +0000
asID:                     27539
IP address blocks:        2604:a900:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:5b:d1:4c:4d:84:c0:b5:59:15:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Aug 20 13:00:41 2025 GMT
            Not After : Nov 18 14:00:41 2025 GMT
        Subject: CN=a651d28e-def2-421f-9b7c-0c046a33d1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:80:b9:c4:a7:08:7d:d0:a8:a1:a8:22:53:82:
                    63:5b:8a:80:bb:3d:bf:7e:30:09:4a:fb:12:bb:d6:
                    a7:b6:3d:72:7c:6d:eb:87:92:09:62:c0:60:e3:3d:
                    bf:00:1d:ae:35:44:03:ca:a1:12:93:0d:d3:81:88:
                    be:69:c3:08:68:50:fd:df:d5:29:ac:fa:c9:3e:cc:
                    1d:bd:e7:1b:04:27:4d:c9:54:2d:0d:f0:9e:2e:f5:
                    81:06:79:2b:7d:59:84:cf:22:e1:c3:b9:ed:a2:2a:
                    57:74:93:ab:47:c1:ad:8d:37:eb:ea:12:4e:24:04:
                    49:ac:67:69:a7:dc:23:f6:a0:92:f0:50:64:69:5a:
                    f7:8b:d0:d2:58:54:93:bf:1a:6f:03:30:24:06:8c:
                    57:38:39:b0:d7:e0:29:1c:d6:70:49:ea:b1:bd:ea:
                    c4:97:0f:ee:1d:9f:66:97:1f:46:2b:9a:21:93:07:
                    b8:af:5a:ee:48:b0:82:73:be:87:e0:e3:25:4c:99:
                    ba:6b:e2:94:9d:8e:a2:40:cf:ac:ad:eb:c6:f7:ba:
                    7e:ac:1f:9c:8b:d2:e6:90:77:52:21:85:d6:ae:c6:
                    d0:11:a0:48:b0:19:c7:7d:e8:b7:37:03:da:1c:7e:
                    90:8e:26:0d:1f:c9:f6:2c:48:43:b6:dd:d0:2d:b5:
                    fb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E0:51:93:00:D3:F3:28:82:A6:D4:A9:F7:5D:12:4D:20:60:24:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/5f8631ab-4845-3aef-950c-39ad06146aa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a900:4000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:12:17:0b:a1:34:19:c5:5f:9b:93:76:00:fa:3a:f5:d4:c6:
         65:cc:13:03:4e:1d:30:97:9f:d3:2f:59:cb:9b:f4:4e:04:a1:
         67:1a:fc:ad:27:f9:f7:28:21:74:71:c2:c2:9f:04:17:e6:2a:
         95:b0:fe:ec:dc:20:11:57:02:fc:93:2d:3e:a2:ce:a2:8e:0e:
         a6:cb:ff:4d:23:94:fc:8b:58:17:bd:72:4d:3b:41:2a:2d:85:
         38:1f:c8:9e:48:1e:c3:d8:f0:33:63:9f:42:fc:d0:6b:1e:52:
         7b:21:26:d0:67:9c:9d:34:f1:76:6a:b5:6b:ad:7d:83:52:3e:
         f5:32:d2:87:a3:dc:66:77:3a:ff:a9:fd:17:4c:3e:69:98:94:
         79:6e:3c:e2:03:ba:75:d4:1d:9b:9e:56:e5:79:b1:4f:33:b9:
         03:4d:84:df:40:92:eb:e9:4d:21:06:0e:15:ee:09:83:4a:25:
         eb:aa:45:fd:69:45:b5:af:11:ff:db:94:07:61:2b:8c:36:11:
         de:7f:f4:c5:fb:5a:7c:5f:41:8f:76:1b:c6:ac:cb:18:69:1c:
         28:a8:87:e8:cc:8c:6b:f4:b2:d2:0b:7a:8c:6c:67:a6:0e:02:
         ca:36:f3:d4:bd:4d:99:99:c9:30:67:8a:ed:38:52:06:8d:18:
         31:e4:a2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:57:02 2025 by rpki-client