Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d/6e647f1d-6f03-36bc-b383-449352c5cbb0.roa
File:                     6e647f1d-6f03-36bc-b383-449352c5cbb0.roa (raw, json)
Hash identifier:          Ovu8SIJ2Ftaj4tbbBgSJ3O490OwpXkjFG4VZW4uCitg=
Subject key identifier:   1B:83:36:55:DC:8B:D7:C7:46:0E:61:E3:57:AE:A6:6F:19:DC:BB:94
Certificate issuer:       /CN=4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d
Certificate serial:       010D0C9F4328584AD7D129E2DEE204CBC7D30F80
Authority key identifier: F9:F4:15:A4:E0:21:DA:02:94:48:A1:45:8D:63:D0:99:9A:65:C7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d/6e647f1d-6f03-36bc-b383-449352c5cbb0.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     40127
IP address blocks:        2607:90c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:29:e2:de:e2:04:cb:c7:d3:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=3d77222e-4a5a-43db-9f9b-a25d986e6835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:dc:e1:0f:72:f6:19:a8:2a:85:63:eb:b1:b9:
                    ef:ef:1b:e3:a5:f4:30:4e:a4:40:b7:c7:a8:c6:e0:
                    b7:0a:11:0b:61:a5:00:73:8e:ba:c8:9e:41:5b:df:
                    25:b2:7b:59:b2:f2:3e:0b:d1:f9:9f:b4:92:2f:ab:
                    1c:a4:e7:a1:cb:0c:4b:1a:63:f3:8d:f0:8d:02:6f:
                    b0:0e:67:c3:a5:0f:5e:a2:ae:37:ec:1e:b4:22:64:
                    e7:06:4e:1b:bb:cb:61:2a:be:3f:59:b9:70:18:35:
                    e6:f7:1f:44:bd:ca:73:78:ca:9a:dd:b2:b8:ec:67:
                    60:cc:c7:09:6a:9c:66:63:e1:d4:4a:80:64:49:e9:
                    23:4e:d1:4a:65:07:4b:07:d2:b2:eb:06:05:dc:8e:
                    69:2d:4c:63:c1:0c:be:67:96:50:d2:83:a4:fd:ed:
                    e6:b1:cd:54:66:16:e8:b6:95:58:98:e8:f1:74:7a:
                    0e:21:90:e5:c8:ee:5f:9b:dd:03:d7:93:84:df:09:
                    e1:24:0c:37:ed:8c:af:c7:58:4d:7c:3a:d7:a2:82:
                    6c:09:0d:a9:ba:c2:d0:be:98:00:4b:3c:c0:bf:71:
                    0c:69:ca:4f:7f:aa:10:04:f1:99:03:4f:55:0b:13:
                    e6:28:eb:4f:0d:7a:cf:7e:9f:dd:39:c4:85:d8:69:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:83:36:55:DC:8B:D7:C7:46:0E:61:E3:57:AE:A6:6F:19:DC:BB:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d/6e647f1d-6f03-36bc-b383-449352c5cbb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d.crl

            X509v3 Authority Key Identifier:
                keyid:F9:F4:15:A4:E0:21:DA:02:94:48:A1:45:8D:63:D0:99:9A:65:C7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:90c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:67:f9:2d:2c:38:7b:89:00:b1:b0:ea:30:fa:5f:bb:01:b0:
         72:bb:7b:c6:52:2a:2a:aa:eb:27:c1:3b:73:06:25:3c:24:65:
         e2:38:95:05:ba:9e:2f:87:78:e7:b3:66:68:23:13:10:fd:57:
         50:b9:7e:5d:97:3d:d7:16:33:58:83:c6:de:e4:7b:04:dd:73:
         23:6e:08:06:d9:11:5d:5e:11:50:0e:80:92:40:a2:34:84:06:
         01:43:e2:1b:61:fe:42:a1:26:62:f5:58:9a:ec:84:de:42:77:
         1e:99:12:4c:75:c9:71:dc:5b:04:a1:44:7c:b8:c4:b1:ed:7c:
         f8:e8:6c:1b:cd:3a:ea:ee:0e:df:0b:f6:27:b5:76:58:23:2c:
         71:86:d1:eb:77:33:c7:97:09:a1:9f:bb:08:1b:e1:47:7a:61:
         2d:cb:73:8c:26:ab:92:b4:06:bf:0e:b1:76:32:34:c6:dc:bb:
         07:0f:7e:61:db:ec:10:79:a6:75:46:fc:6e:87:ea:79:c2:8a:
         08:96:48:4a:75:33:54:21:c2:bb:ad:ec:de:2b:da:80:05:35:
         84:57:c2:e6:f6:b8:4d:e3:ae:48:9a:2a:0e:fc:5e:68:b6:2f:
         eb:49:25:9a:8c:01:cb:91:59:4f:48:32:a1:a3:30:38:1a:32:
         ac:6b:31:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:35:48 2025 by rpki-client