Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/a8e58c2e-9e54-3b16-8366-e561134f750c.roa
File:                     a8e58c2e-9e54-3b16-8366-e561134f750c.roa (raw, json)
Hash identifier:          WEpyxy7kye1Nlu+FjRVdW+fMoI775jaQxWsPOiD7xuw=
Subject key identifier:   FB:BD:F5:17:E7:78:41:7A:E8:4E:E7:28:96:DF:85:34:60:67:C5:13
Certificate issuer:       /CN=56346803-30d8-4fc8-bed2-9b76d8093c65
Certificate serial:       010D0C9F4328584A3A1589003241A349BC993A80
Authority key identifier: E4:F6:1A:A2:07:40:00:22:61:52:F0:C7:ED:96:38:CB:5A:CB:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/a8e58c2e-9e54-3b16-8366-e561134f750c.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     15318
IP address blocks:        2620:0:2220::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/56346803-30d8-4fc8-bed2-9b76d8093c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/56346803-30d8-4fc8-bed2-9b76d8093c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:89:00:32:41:a3:49:bc:99:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56346803-30d8-4fc8-bed2-9b76d8093c65
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=dd7472dd-358e-4884-a17f-b150acc97243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f7:14:7d:27:0f:19:6c:aa:99:53:de:c9:ef:
                    32:6b:df:22:39:0b:db:91:1a:a7:a5:db:cd:91:14:
                    f7:aa:6f:12:3d:0e:dd:4c:e6:38:93:2e:83:86:bc:
                    15:b3:bb:8b:9a:2f:1e:ff:fd:03:2a:78:5e:10:07:
                    c6:aa:9f:6d:db:08:3e:79:1d:2e:3c:37:53:9b:10:
                    c8:db:d5:f7:43:2c:3b:d5:82:60:ee:95:3c:e0:4d:
                    f6:50:0c:5e:b0:b2:ec:30:92:60:34:31:86:84:4a:
                    6e:f3:05:c2:36:c4:c9:29:81:b8:f6:b7:f9:e5:04:
                    90:c0:4c:79:a9:10:a6:11:45:28:62:72:80:ca:19:
                    33:bb:30:80:40:f2:05:13:30:4a:ad:cb:8e:1d:46:
                    9d:53:d6:30:90:bf:3f:d9:66:d3:c3:87:b8:88:4c:
                    4f:3e:24:83:65:9a:34:d0:72:52:d3:35:87:cc:41:
                    ed:ca:1c:9b:9d:0b:ad:02:e2:2e:77:eb:98:c7:00:
                    c8:af:85:4d:9a:c7:c3:bc:45:20:11:62:9e:af:52:
                    09:ab:a0:26:9b:84:14:5a:20:a3:1a:1e:97:ef:32:
                    9f:54:de:d3:21:12:3f:77:e7:65:d4:c4:c9:0d:94:
                    74:e4:02:ee:f9:0a:83:66:10:b0:9c:8c:65:08:12:
                    ad:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BD:F5:17:E7:78:41:7A:E8:4E:E7:28:96:DF:85:34:60:67:C5:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/a8e58c2e-9e54-3b16-8366-e561134f750c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65/56346803-30d8-4fc8-bed2-9b76d8093c65.crl

            X509v3 Authority Key Identifier:
                keyid:E4:F6:1A:A2:07:40:00:22:61:52:F0:C7:ED:96:38:CB:5A:CB:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56346803-30d8-4fc8-bed2-9b76d8093c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:2220::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:1a:6d:61:b8:72:02:7b:ee:ee:94:e0:4a:c2:20:de:f3:77:
         a5:2a:bf:f9:25:99:f0:1c:20:70:89:e5:80:20:11:ce:fc:e4:
         73:43:af:83:47:eb:c5:3b:1b:a9:dc:6a:16:37:ac:c9:1d:42:
         52:df:fb:ff:93:8b:7d:36:78:e3:b7:a9:b0:6b:f9:cf:4b:9f:
         93:7c:8c:ba:ba:0c:e7:be:c5:9a:58:ef:e3:9f:d6:39:93:40:
         26:d2:a6:bb:39:d4:7f:99:f5:b1:14:ce:0c:73:51:53:42:4b:
         57:be:69:71:74:e3:82:ab:b5:33:b9:d5:49:2b:b3:f7:30:6d:
         a6:a2:22:06:cd:f1:aa:5c:98:4c:78:86:f3:04:fd:11:42:7b:
         3f:ff:33:d7:e1:68:37:7b:85:d4:ca:d8:fa:09:bf:a6:c2:d2:
         e5:a3:fd:58:28:57:52:97:93:1f:b3:8b:16:51:f8:d1:68:12:
         ff:8f:1b:c0:7e:46:58:98:5f:d6:39:85:5a:12:de:49:b7:8c:
         59:72:54:15:13:3e:38:d4:14:d2:71:7f:65:1b:8a:a5:64:ac:
         b9:45:83:ad:95:01:35:42:31:6f:5f:c3:79:3e:d0:2d:3f:65:
         12:67:0c:0d:74:c0:3b:b7:e6:f7:4c:59:c2:4e:c9:af:e9:4c:
         0c:6d:1f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 02:09:12 2025 by rpki-client