Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/c087ac92-ebf3-3930-af9a-105292155d59.roa
File:                     c087ac92-ebf3-3930-af9a-105292155d59.roa (raw, json)
Hash identifier:          D0iGU73cWjJ1UjkeZ8rgBCtaPK1FTHfmJLa8oYTOx+o=
Subject key identifier:   50:6A:D0:B7:DA:CC:83:9A:D2:9C:F1:4D:B2:8A:38:3B:3C:5D:DB:D3
Certificate issuer:       /CN=b031f288-aa10-4c6d-b640-6749f212c6b7
Certificate serial:       010D0C9F4328584AECC1500BDB62CB2A41D582C4
Authority key identifier: A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/c087ac92-ebf3-3930-af9a-105292155d59.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33362
IP address blocks:        2604:f100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:50:0b:db:62:cb:2a:41:d5:82:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b031f288-aa10-4c6d-b640-6749f212c6b7
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=08eba2d1-bb5f-4d84-8163-79e800e32007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e5:83:aa:e5:69:35:87:98:e7:22:28:bf:c8:
                    a4:ed:d3:2f:04:28:c8:5c:3c:71:48:d9:9c:a6:34:
                    b2:2f:9c:77:94:70:ee:32:3c:26:18:8c:5f:ed:e8:
                    08:88:6a:25:fc:bf:48:83:d5:20:a8:df:68:9c:e8:
                    60:6f:90:30:71:1f:1d:e9:eb:a6:61:be:7b:79:5e:
                    4d:25:8d:ca:91:a1:c5:e7:ad:35:62:93:ae:08:3e:
                    92:cc:1b:f4:e9:1a:ae:8c:31:8d:ef:ab:d6:e3:59:
                    3d:9b:b3:5f:da:54:91:39:6b:4f:d9:d5:ed:47:01:
                    3a:d4:eb:ee:19:9a:00:32:39:b1:a0:27:c7:e8:43:
                    59:09:ae:27:09:6b:87:84:98:9c:fe:a7:25:ab:6d:
                    fe:e2:e2:c6:c7:db:8f:6d:dc:05:c4:ca:a5:66:86:
                    8f:40:61:5b:c3:74:01:71:50:e5:0f:82:67:0f:46:
                    9b:4e:52:ec:53:f7:26:fb:b0:33:83:61:14:4d:ac:
                    e2:83:74:f7:42:02:cd:42:23:ed:ff:81:9c:b9:16:
                    46:ca:d8:4b:45:99:fc:b4:c3:2d:a5:32:71:16:90:
                    b5:c2:f7:c4:9b:80:dc:53:b5:eb:2c:12:c1:69:8a:
                    c4:6c:fe:82:e2:5a:8d:a6:97:f8:20:cf:d8:e6:d5:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6A:D0:B7:DA:CC:83:9A:D2:9C:F1:4D:B2:8A:38:3B:3C:5D:DB:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/c087ac92-ebf3-3930-af9a-105292155d59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl

            X509v3 Authority Key Identifier:
                keyid:A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:64:30:89:8f:f3:4f:7e:6e:c7:83:7a:d5:54:af:ef:b3:76:
         a4:dd:8e:91:42:f1:9a:2c:5f:03:7d:d5:f9:18:d7:c1:53:c1:
         a5:d0:82:79:10:38:32:e0:13:43:90:27:64:57:01:00:f2:88:
         48:0b:ad:95:55:43:43:53:92:ff:48:d0:01:7e:13:b5:01:1c:
         a2:5c:34:ad:82:fe:5f:54:ed:e7:b6:8f:45:12:f8:9b:d4:ce:
         ed:8f:a5:bc:71:55:8a:53:e4:6d:e0:11:1b:3e:32:2e:b4:f2:
         ac:37:6a:d6:8e:dc:28:c4:73:42:c1:fb:1c:48:e2:4c:87:f4:
         76:53:a0:fb:be:60:40:45:cf:c2:8e:8b:32:43:c9:86:a8:40:
         ab:70:3e:3d:48:3f:db:84:64:c4:cf:ed:db:48:62:e3:00:85:
         da:b4:23:64:fb:11:89:08:d2:2e:d6:46:84:ec:f4:9a:76:dd:
         60:b0:f5:3c:8e:9f:50:84:83:37:8e:2a:53:6e:6e:05:6a:58:
         2b:69:fe:d2:18:7e:8a:43:68:0b:62:b4:be:09:90:28:1f:cf:
         64:bb:5d:2b:68:44:95:7d:91:80:21:01:77:3b:2e:e0:f0:88:
         79:d2:c0:d4:97:0f:65:7b:62:62:04:56:aa:f2:8e:d3:90:b3:
         0c:eb:5b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:53 2025 by rpki-client