Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa
File:                     0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa (raw, json)
Hash identifier:          IUR7gnA642/qR5IEnIZ9hxcjhm/sq4qribLYBw73xfg=
Subject key identifier:   2D:BA:B3:FB:DB:8D:5B:E5:8A:82:88:CB:BA:D2:9C:AC:F3:31:8D:27
Certificate issuer:       /CN=ab971181-47ed-4815-8f1e-60d429db1463
Certificate serial:       010D0C9F4328584AF0F14B142EA7543F1542A440
Authority key identifier: A6:76:E4:29:E8:D6:DD:1E:FF:07:14:C6:8D:35:29:7C:BB:AF:58:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     7105
IP address blocks:        2620:2::/48 maxlen: 48
                          2620:15a::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/ab971181-47ed-4815-8f1e-60d429db1463.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/ab971181-47ed-4815-8f1e-60d429db1463.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:4b:14:2e:a7:54:3f:15:42:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab971181-47ed-4815-8f1e-60d429db1463
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=5066caf1-43ed-4cf7-a942-4c5bcf58c349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1e:bd:da:d1:58:02:65:ed:0b:2b:85:69:be:
                    a4:cb:29:90:d9:72:23:09:2c:9d:a6:cc:56:1b:be:
                    b0:f5:d2:85:7c:80:b7:06:37:cc:99:e7:d8:12:09:
                    d7:e9:91:e1:b2:be:e7:c9:e1:79:9c:3a:e8:8d:60:
                    da:68:04:6f:5a:4b:41:74:6a:93:54:40:9e:00:21:
                    2c:05:da:66:de:ef:4e:dc:84:64:4e:ae:b9:b0:40:
                    f9:5f:58:f0:a9:c1:ae:f6:c0:cd:01:4e:3d:6e:eb:
                    9a:5d:86:54:c3:b1:70:8c:3a:b8:6d:22:61:1e:4c:
                    10:1c:f4:e5:43:99:a0:84:8e:88:5a:e4:17:bf:46:
                    dc:77:6d:c2:a9:d1:f6:84:79:ab:45:c3:63:65:c1:
                    d8:e4:65:85:6d:f8:6d:ca:2f:03:ea:a6:15:8f:f6:
                    99:61:bf:af:cc:ca:9c:9d:a3:b4:ee:57:fc:06:cd:
                    e6:da:87:ca:e1:5c:d3:e6:ec:f7:7a:11:05:34:11:
                    cb:c9:bf:5f:3c:36:c6:8b:6d:31:6b:90:b0:dd:ee:
                    82:02:5d:10:f0:7a:a9:5b:7a:86:3f:a8:86:3e:cb:
                    9f:69:d5:d1:c1:0f:1e:46:64:d0:d8:02:40:82:4c:
                    f2:0e:ec:00:a3:cf:94:ca:43:17:bc:5e:79:d0:95:
                    6c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BA:B3:FB:DB:8D:5B:E5:8A:82:88:CB:BA:D2:9C:AC:F3:31:8D:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/0ff5f3f0-6352-3d8b-9647-68b2771a594e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463/ab971181-47ed-4815-8f1e-60d429db1463.crl

            X509v3 Authority Key Identifier:
                keyid:A6:76:E4:29:E8:D6:DD:1E:FF:07:14:C6:8D:35:29:7C:BB:AF:58:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab971181-47ed-4815-8f1e-60d429db1463.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:2::/48
                  2620:15a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:c7:37:fb:ee:a7:48:a8:5d:6d:f4:46:70:9a:c3:fa:e0:5d:
         c2:24:d3:23:70:65:8d:23:4d:8c:83:fa:14:28:1d:7f:20:e0:
         ce:e1:b5:dd:24:fe:22:85:2c:98:d8:18:60:40:16:13:6b:b9:
         95:40:1c:ec:18:3e:24:e9:f6:e9:82:74:f0:84:4c:cf:39:55:
         cc:04:5a:09:fc:39:f4:5b:a8:2b:48:e1:33:0a:2b:35:58:05:
         2a:82:d5:b8:95:1e:ce:c0:6f:af:be:09:d6:46:7f:5e:29:62:
         f1:26:9a:61:ee:e6:a7:02:36:fe:6e:b5:23:0d:57:f7:bd:20:
         08:80:b3:e7:71:e4:df:5b:66:42:64:2f:96:22:15:f7:98:31:
         6a:11:b6:25:80:03:8c:60:0a:05:0f:84:12:1b:fb:8d:64:17:
         41:dc:b2:c6:ae:8a:37:07:e7:17:04:88:41:db:05:57:ca:d6:
         b2:4a:11:5f:2c:d0:2f:8b:90:f2:f0:56:71:b5:a3:91:f8:10:
         39:d6:0e:a2:d6:35:0b:10:d2:3d:d3:de:c1:95:8a:d7:e3:cd:
         e3:2b:a4:37:6a:cf:ed:65:87:56:ae:3a:a0:cf:f9:3a:93:02:
         cc:4e:48:bd:2f:74:46:33:c3:d2:d5:0f:7a:d5:2e:6c:f1:3c:
         e6:b8:56:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:20:12 2025 by rpki-client