Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7adfa4f-b975-4a0b-b319-3da5c7fe5b4b/eeac50de-6e22-3eef-8ab3-61c66d653144.roa
File:                     eeac50de-6e22-3eef-8ab3-61c66d653144.roa (raw, json)
Hash identifier:          O5nofE5V3dXXCLs4MtEdw2iRG8uI9GdRZuZ48BjZUT4=
Subject key identifier:   14:20:EB:62:CC:B2:F3:55:87:83:1D:B1:62:5C:40:23:9D:E2:88:40
Certificate issuer:       /CN=e7adfa4f-b975-4a0b-b319-3da5c7fe5b4b
Certificate serial:       010D0C9F4328584A4C3B1A6E8001B88363223E00
Authority key identifier: 49:F9:A6:16:09:32:BE:77:0C:89:7B:81:D8:EC:24:11:37:2A:76:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7adfa4f-b975-4a0b-b319-3da5c7fe5b4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7adfa4f-b975-4a0b-b319-3da5c7fe5b4b/eeac50de-6e22-3eef-8ab3-61c66d653144.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     395466
IP address blocks:        2604:a1c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7adfa4f-b975-4a0b-b319-3da5c7fe5b4b/e7adfa4f-b975-4a0b-b319-3da5c7fe5b4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7adfa4f-b975-4a0b-b319-3da5c7fe5b4b/e7adfa4f-b975-4a0b-b319-3da5c7fe5b4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7adfa4f-b975-4a0b-b319-3da5c7fe5b4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:1a:6e:80:01:b8:83:63:22:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7adfa4f-b975-4a0b-b319-3da5c7fe5b4b
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=aa850a02-8731-49ab-ab97-c9110cb21663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:71:7c:07:10:a2:c4:59:f8:c7:95:bc:4e:
                    d8:52:75:cf:5b:1c:12:82:33:fe:c6:58:49:ba:ff:
                    a9:3e:2d:6e:4e:99:1d:07:ef:34:1c:a9:cc:37:13:
                    6f:4e:33:53:63:6e:df:83:03:80:5c:26:08:63:e1:
                    0c:d7:ac:f1:b1:98:73:88:55:67:aa:e8:39:d4:6d:
                    9b:02:66:0f:25:c5:86:5d:54:eb:60:40:4e:61:23:
                    dc:5c:b4:b2:ea:e8:4c:5b:4c:ea:c9:8f:81:c3:0b:
                    9c:88:97:95:62:61:1d:69:17:ef:f6:fa:85:f8:9c:
                    5b:85:3e:9a:c9:05:09:fa:e1:7a:e3:bd:2b:b2:35:
                    29:30:16:58:c9:e1:77:a2:ef:d3:27:b9:af:c1:dd:
                    fb:89:0a:ca:b1:d3:76:cc:9b:d5:11:49:c1:ab:95:
                    ce:ae:c3:22:01:1b:a2:e8:c4:84:06:1d:fe:26:54:
                    89:81:01:47:54:76:55:24:23:f9:3e:61:3d:1e:21:
                    70:d8:83:d6:1d:4e:dd:1d:cd:ab:75:24:55:62:70:
                    68:90:67:2e:8b:34:ad:c8:41:3c:9f:c6:b1:d9:29:
                    db:81:86:aa:37:39:fe:ca:1d:ff:94:e3:d1:83:7d:
                    b0:b2:d3:a0:89:1b:d2:76:66:ee:04:ce:3f:aa:5b:
                    2c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:20:EB:62:CC:B2:F3:55:87:83:1D:B1:62:5C:40:23:9D:E2:88:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7adfa4f-b975-4a0b-b319-3da5c7fe5b4b/eeac50de-6e22-3eef-8ab3-61c66d653144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7adfa4f-b975-4a0b-b319-3da5c7fe5b4b/e7adfa4f-b975-4a0b-b319-3da5c7fe5b4b.crl

            X509v3 Authority Key Identifier:
                keyid:49:F9:A6:16:09:32:BE:77:0C:89:7B:81:D8:EC:24:11:37:2A:76:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7adfa4f-b975-4a0b-b319-3da5c7fe5b4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a1c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:62:7d:cf:ca:a4:56:ed:87:ef:2b:5b:cb:73:e1:1e:4f:f9:
         9b:f3:e7:b3:1e:41:c4:37:f9:8d:ae:08:69:69:f7:82:ff:9a:
         b9:25:34:e2:4f:57:6d:5b:5f:59:16:cb:ec:1b:09:20:5c:58:
         4a:b3:26:c6:c3:0b:bd:76:63:13:a1:08:79:05:9b:dc:13:3d:
         f1:8c:6e:ee:05:ea:64:33:66:97:5e:45:9d:f8:3c:d1:2c:d1:
         35:ad:a9:49:6e:e3:74:84:22:2f:09:17:d4:27:04:d9:13:14:
         6e:b8:14:71:59:b2:bf:73:f1:22:2d:ed:0b:50:99:81:c9:ac:
         c4:99:cb:4e:f0:05:36:6a:45:69:9b:57:42:54:b0:dc:4a:b3:
         18:9b:75:56:ca:38:4a:15:19:b5:63:2c:30:60:e8:19:77:f4:
         56:45:e2:f4:27:ab:2e:d9:77:c7:5f:ea:6b:88:98:cb:37:a3:
         33:31:62:e3:0c:7c:a3:19:81:82:74:b7:b3:7d:15:82:6f:2c:
         46:a8:13:8b:72:98:9d:4a:4d:23:2a:ae:6b:01:ca:75:ba:00:
         49:07:a5:be:98:b5:5f:09:be:27:31:67:44:f8:8b:01:d3:74:
         34:9c:1c:89:53:19:1b:7e:07:b2:c2:aa:c4:f7:57:36:b5:cd:
         fa:ba:9d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:25:18 2025 by rpki-client