Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/2501b706-6042-35cb-b8b4-6d7b6dd8b0f0.roa
File:                     2501b706-6042-35cb-b8b4-6d7b6dd8b0f0.roa (raw, json)
Hash identifier:          KvktgmxbObplodIfOmgMHIy9rmMNxbZlF3LFEwHlf/Q=
Subject key identifier:   E4:87:72:BF:9C:4F:9F:00:5D:63:A1:32:76:28:C8:C3:D2:60:98:81
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584AF0F145FE9FB524ADFCCF8780
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/2501b706-6042-35cb-b8b4-6d7b6dd8b0f0.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     22192
IP address blocks:        2607:2240::/35 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:45:fe:9f:b5:24:ad:fc:cf:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=ad8b2b36-e33b-4b6f-985f-1de2d6117a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:8f:84:f1:2b:03:9c:f0:4b:3f:fe:c2:ec:
                    0d:dd:96:49:57:b8:2a:4b:3c:b8:11:d0:09:15:4b:
                    4a:65:c1:cd:a3:52:52:32:bf:22:5b:e4:d5:dd:d4:
                    26:74:fd:ca:5f:2a:f1:ef:cf:b2:58:22:8f:bd:bf:
                    78:74:5f:03:1f:b6:38:c3:1a:e5:df:54:80:b5:eb:
                    ec:40:41:5c:0c:2c:52:d1:eb:8e:f1:29:bb:cc:de:
                    4e:c0:37:26:f2:32:dc:d5:61:c3:4e:d6:06:3f:0e:
                    75:db:2f:63:35:32:0e:18:f8:0b:13:83:64:d9:1a:
                    73:1f:15:b3:de:e2:76:0d:2d:7e:14:62:6d:61:9b:
                    50:6d:07:ba:c0:a7:c3:fc:e0:a4:97:45:03:4b:ca:
                    19:04:13:6b:ec:66:eb:91:72:78:a4:04:e1:11:16:
                    4c:7e:4e:9d:4d:1d:94:d9:4b:76:e0:98:dd:f8:cf:
                    de:2e:2a:30:0a:9e:ec:1c:31:f3:a0:10:e2:3b:ee:
                    f7:0e:2b:9b:b2:d9:3f:7a:be:25:d0:4c:dc:52:f1:
                    00:65:76:d1:0b:45:94:09:4f:4e:9f:77:09:c0:74:
                    1b:a0:5e:85:8f:cc:59:7a:72:b5:bc:c3:b0:36:25:
                    4b:42:2d:7b:ef:b0:a8:b4:b6:32:15:c7:1a:1a:cc:
                    4f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:87:72:BF:9C:4F:9F:00:5D:63:A1:32:76:28:C8:C3:D2:60:98:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/2501b706-6042-35cb-b8b4-6d7b6dd8b0f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:bc:7f:0f:6b:a8:1a:c1:41:31:92:f9:47:8e:6c:e9:76:75:
         f1:37:ea:a3:ce:16:92:1c:7b:c8:8b:09:22:73:c9:48:0b:ca:
         5f:6e:9b:5f:fd:95:9d:b7:6c:78:19:2a:82:21:c7:3e:10:7f:
         0e:38:ca:94:64:6b:d6:97:db:c0:b5:3c:7e:15:ce:0e:4e:29:
         cc:f3:47:c4:f6:4c:08:19:69:e7:4e:4f:d1:e4:64:e0:8a:fb:
         0d:88:79:db:11:26:5b:ea:e8:a6:fb:31:50:f7:78:67:8d:94:
         f2:dc:d8:96:63:47:ae:06:47:5d:8b:2c:3b:fe:42:9c:93:fd:
         a3:fd:3b:50:8e:20:0e:cf:59:5d:c0:70:95:4f:7a:a3:c4:34:
         57:cf:be:85:af:61:b2:57:1d:a6:83:65:43:10:cd:1c:8e:e3:
         48:28:85:b8:88:89:ec:7d:92:1b:1f:46:74:9f:cf:87:25:c9:
         9a:83:c7:da:6c:2d:ec:d3:81:62:46:b2:8d:4b:41:50:24:4b:
         85:84:36:51:fb:a8:f2:af:0a:26:bd:91:a2:da:bc:cf:84:4e:
         c9:3d:c4:62:15:ca:12:c8:2c:f5:3e:68:4c:dc:0d:df:5b:04:
         60:78:8f:aa:4e:0d:1b:a6:82:c9:46:70:f2:d8:cb:c5:b9:4b:
         2f:1e:94:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:19:48 2025 by rpki-client