Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/a5693a5f-61c9-36bf-8e86-22ed3bb7ff74.roa
File:                     a5693a5f-61c9-36bf-8e86-22ed3bb7ff74.roa (raw, json)
Hash identifier:          8AhsoNDDpdNAicstX1BmBm59H5+TV3gSXVcE2qIHIJI=
Subject key identifier:   B7:27:E7:CF:2E:AF:B0:80:26:3C:51:24:65:25:44:74:AD:3E:2F:12
Certificate issuer:       /CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa
Certificate serial:       010D0C9F4328584ADA9BC3EB8BE0FEA763E89AC0
Authority key identifier: DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/a5693a5f-61c9-36bf-8e86-22ed3bb7ff74.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     7029
IP address blocks:        2604:3547::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:c3:eb:8b:e0:fe:a7:63:e8:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=8cc9f353-4e93-4d58-8ca5-978f1d8e5cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a7:ad:e0:94:48:f1:1c:31:20:2f:1d:59:8e:
                    05:ec:cd:fb:25:e8:15:12:f9:de:b1:53:e3:72:ba:
                    8f:6c:97:f1:01:26:04:b6:ad:d3:c9:b2:db:85:eb:
                    ed:e2:cd:08:38:b3:3f:42:81:d2:12:35:df:1e:ba:
                    f5:0e:4f:a8:60:fc:bc:5b:63:ae:46:03:40:42:8c:
                    b4:a1:49:ce:22:bd:36:2e:19:f9:a2:2f:91:f3:51:
                    41:11:47:2d:93:54:18:20:4a:31:1b:f3:e6:b4:9c:
                    5a:c4:7b:1a:df:99:77:c3:3a:1e:27:92:7d:6a:27:
                    47:aa:51:1e:ea:9b:9e:b8:1f:89:18:02:f6:c4:cd:
                    d1:83:65:31:1a:8c:06:41:c3:a6:9c:38:34:42:69:
                    de:c3:b1:41:5d:99:05:5f:8a:bf:1a:52:e8:1b:89:
                    a8:5f:19:52:75:e4:b6:39:5f:91:4d:ab:d1:cd:ca:
                    7e:c5:74:69:72:c7:af:d9:9e:77:cc:10:ca:e2:93:
                    d1:e5:6f:05:da:b4:d9:ae:dc:63:69:5a:d6:f8:86:
                    c2:98:be:3e:a4:bc:1d:c5:d9:aa:ec:b7:b9:8b:ef:
                    32:9d:df:28:00:69:27:8a:b3:c5:d2:ae:e7:9f:41:
                    57:35:cf:cd:b9:ec:15:7e:4d:d6:8a:18:93:f7:73:
                    97:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:27:E7:CF:2E:AF:B0:80:26:3C:51:24:65:25:44:74:AD:3E:2F:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/a5693a5f-61c9-36bf-8e86-22ed3bb7ff74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl

            X509v3 Authority Key Identifier:
                keyid:DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3547::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a6:61:0c:72:22:0f:9c:1f:02:d7:5a:1f:16:57:52:35:84:
         07:75:16:25:8d:e4:0d:36:44:26:84:27:a4:fa:b5:0b:f6:d3:
         c3:19:0c:fc:45:dd:70:4f:15:28:68:7d:cd:3c:19:2e:ac:fa:
         32:00:81:3b:5c:86:3a:ba:6d:23:bf:7e:f2:c3:44:e3:47:ae:
         2a:09:ef:2c:de:6f:90:50:c3:72:35:58:66:1c:ea:ce:1c:2b:
         cc:86:f9:e6:50:15:0b:19:a6:b8:03:44:38:50:02:eb:b6:c7:
         ca:fd:a1:d3:0c:6b:64:77:f3:26:2c:4c:a4:ed:f8:06:75:03:
         f8:ce:da:77:e2:9c:8a:82:d6:84:37:84:80:a9:3b:48:8c:26:
         71:21:e0:ab:8e:0b:32:49:f8:2c:89:25:f4:82:5d:c4:f5:79:
         5f:94:62:08:61:55:97:9f:27:8d:69:80:4d:60:c8:ab:6b:10:
         e1:2a:a3:1c:9c:40:f4:1a:f2:5c:63:82:89:0e:1c:3a:2d:29:
         b8:9a:85:67:cf:05:6d:5c:10:34:ad:73:17:8c:4c:fa:f4:52:
         83:34:20:8c:3a:31:29:72:96:0f:b6:0b:42:58:42:b1:b3:69:
         22:44:72:22:46:3a:bf:b4:21:00:c1:38:fa:18:f8:de:ce:55:
         b1:d7:b8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:50:48 2025 by rpki-client