Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/877a91b0-30c0-3d8b-aedb-9fc49da19a55.roa
File:                     877a91b0-30c0-3d8b-aedb-9fc49da19a55.roa (raw, json)
Hash identifier:          zHyZQ6yuUj/ayBhop3d8kcPPiklgWOtlb3KkXEYQE/o=
Subject key identifier:   D0:97:5F:7B:F6:94:AC:AC:09:47:07:A7:81:63:14:B0:D5:1F:2D:7D
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584AEB5BD2A628A51F9EFAE3FF80
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/877a91b0-30c0-3d8b-aedb-9fc49da19a55.roa
Signing time:             Wed 20 Aug 2025 13:00:41 +0000
ROA not before:           Wed 20 Aug 2025 13:00:41 +0000
ROA not after:            Tue 18 Nov 2025 14:00:41 +0000
asID:                     27539
IP address blocks:        2604:a900:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:5b:d2:a6:28:a5:1f:9e:fa:e3:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Aug 20 13:00:41 2025 GMT
            Not After : Nov 18 14:00:41 2025 GMT
        Subject: CN=cc60ed5c-c99a-47b4-9c8c-b2dce702a556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fc:71:20:b6:24:83:d9:b3:9d:6c:4c:f9:ee:
                    13:7c:d0:ff:1a:43:3c:3c:70:83:de:b4:dc:6e:d4:
                    3b:02:b5:2f:66:41:fb:d3:24:91:17:1b:fd:ca:02:
                    9b:b3:b3:a2:b5:24:d1:ae:9c:80:e5:65:76:f9:11:
                    93:e1:73:76:82:74:7f:93:ec:e7:cf:ec:8a:6d:fb:
                    68:14:34:06:5b:45:41:eb:dd:53:24:86:f4:ea:c0:
                    26:fa:4d:b7:cb:6a:6c:c4:62:69:ba:eb:57:f3:82:
                    12:e0:58:ab:3e:90:53:e3:ba:d7:35:da:e2:07:7e:
                    6c:32:dd:2b:9b:e3:1b:66:cd:b8:0f:4b:85:be:f1:
                    91:be:98:2f:0c:f1:40:29:b6:7b:ac:cb:d8:ab:d8:
                    6c:89:2f:f4:87:a0:42:69:e9:ab:a1:32:0b:3f:0e:
                    fb:bc:19:28:90:35:6a:08:0f:f0:13:66:a6:17:78:
                    91:dd:9d:71:2c:fb:fe:72:bc:ca:e5:e5:ad:b3:b0:
                    38:1d:96:6a:38:63:d9:c9:14:59:13:04:22:b5:09:
                    7a:e1:31:2e:11:12:16:37:00:0a:1d:88:84:13:75:
                    61:d2:75:c7:b8:f8:a0:37:e3:30:9b:8d:c7:d1:01:
                    0d:2e:19:14:5d:4f:58:3f:c1:45:2e:c4:2a:f4:e1:
                    39:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:97:5F:7B:F6:94:AC:AC:09:47:07:A7:81:63:14:B0:D5:1F:2D:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/877a91b0-30c0-3d8b-aedb-9fc49da19a55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a900:2000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ee:cc:c7:3d:f2:56:e7:fe:1e:fb:54:97:be:3b:43:41:de:
         6f:0b:f5:77:c6:47:fa:f0:a8:95:5d:d8:50:fb:bc:c4:4d:19:
         13:f7:fd:08:64:16:74:5f:ad:83:39:d3:16:c1:76:a1:5b:f3:
         9c:01:34:46:00:ea:5f:b6:a4:11:58:b1:08:fe:2c:d1:42:82:
         c3:b4:59:fc:e4:d0:61:3f:3e:bd:24:a3:45:69:15:27:9f:bc:
         f0:fd:09:f4:c5:f4:66:62:b7:aa:82:97:aa:0b:bb:3c:42:be:
         b1:e1:60:4d:fa:33:80:b6:23:96:60:4f:2c:40:8c:c2:04:35:
         84:da:78:7f:e7:d6:1a:6b:18:fd:0f:e4:70:b1:0c:61:67:1c:
         fc:aa:cc:62:7c:f0:3a:c3:ec:80:53:12:a4:4c:37:ab:a4:9a:
         a8:e3:f6:d1:90:be:7f:57:08:a5:f5:53:0a:ab:da:90:6e:81:
         b8:25:f1:2f:9e:20:0e:e3:1c:d3:af:1c:1e:5a:87:75:d8:4a:
         24:8a:4f:11:a0:a9:b9:33:f4:f9:b2:b3:ad:11:4c:14:f8:44:
         24:f4:d1:5c:40:a0:ed:cb:15:9a:6d:94:e4:f2:3f:5d:dd:2e:
         28:39:67:3b:79:f6:02:2c:0f:12:39:f7:d4:9a:9d:11:e0:f8:
         b4:60:c9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:54:48 2025 by rpki-client