Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3668d070-2d7e-3b46-ba91-123a368f5d10.roa
File:                     3668d070-2d7e-3b46-ba91-123a368f5d10.roa (raw, json)
Hash identifier:          wuWcdUT637s/8frknAz5aIu0Gd8/ubeUxVwsgaGtLsc=
Subject key identifier:   37:FE:1D:85:ED:86:16:B0:CB:97:85:C8:BA:A5:2E:47:CC:42:4B:D8
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584ADA9BD562460B951815B9F100
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3668d070-2d7e-3b46-ba91-123a368f5d10.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     62610
IP address blocks:        2604:980:e025::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:d5:62:46:0b:95:18:15:b9:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=38e03f60-9dec-4b40-89c2-00a7d0d86498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:63:f0:4f:99:a2:de:ff:29:41:08:98:08:8a:
                    bc:0f:e5:e4:79:4c:d0:70:32:1f:c6:4d:d5:ef:81:
                    bf:19:04:f8:99:c8:41:0d:17:50:8d:69:64:82:27:
                    4f:27:a4:cb:68:35:71:94:4f:06:c9:0c:09:51:2b:
                    6a:19:34:77:64:2a:49:19:aa:2c:d0:9e:95:9b:43:
                    1b:4c:a5:27:f6:45:db:22:98:86:27:2c:99:77:8b:
                    57:dc:79:5e:33:e9:6e:5e:a3:3d:15:cf:43:b3:33:
                    9a:aa:c8:b1:ad:07:d7:3d:ff:26:81:ba:b3:9f:8b:
                    fe:24:c8:99:17:bb:b0:90:83:15:d6:f9:6c:91:ab:
                    71:57:69:b7:aa:b6:f1:05:6e:e2:6a:92:83:ad:63:
                    c1:b4:6a:aa:cd:b5:41:26:d6:2e:6b:8a:2d:f4:15:
                    52:32:f6:3a:a8:e6:db:b9:3a:f0:a6:4d:5d:15:38:
                    31:16:cc:46:36:f4:e8:13:03:9e:ac:94:9e:65:d9:
                    96:c6:e5:a6:1b:24:2d:39:c3:cc:7a:25:08:4d:28:
                    d8:90:a1:02:f0:b6:ce:fa:40:3c:c6:83:44:6a:e8:
                    ac:b1:8c:07:d1:88:db:0f:4f:a5:90:7c:8a:13:98:
                    b0:17:28:0a:42:10:75:8e:8c:c5:31:48:17:cd:81:
                    4f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FE:1D:85:ED:86:16:B0:CB:97:85:C8:BA:A5:2E:47:CC:42:4B:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/3668d070-2d7e-3b46-ba91-123a368f5d10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:980:e025::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:f2:b7:20:c3:b7:9b:5a:0a:c6:97:5f:9c:03:60:b5:b1:aa:
         0a:ac:56:f9:90:5f:7e:98:51:64:96:b4:3b:f6:64:02:8f:50:
         dd:1f:48:1e:84:c0:be:79:73:a6:16:61:27:c2:22:9f:46:ab:
         a9:53:6d:e8:6e:2e:15:bb:f1:2e:f5:97:6a:51:ee:74:3e:d4:
         14:49:70:53:d5:1a:62:56:08:ee:96:6a:ee:e8:55:c7:3f:e9:
         24:ee:ea:17:cb:69:7b:fc:7a:87:cd:03:b5:1d:47:37:a3:ba:
         ce:a5:8a:aa:1d:0e:2e:04:74:cb:b7:55:d3:26:02:ee:ef:8c:
         71:47:ba:48:fc:9b:75:0b:d6:fd:76:82:ce:bb:9d:41:df:d9:
         42:b9:22:32:ce:08:10:45:10:af:d6:6c:4a:c6:fa:83:27:8d:
         5b:05:1d:39:c1:a8:fb:9c:d9:b5:eb:65:f8:46:d9:d1:59:1c:
         30:06:1c:3d:45:f4:f0:2c:6a:44:8e:11:31:2d:8a:ef:a3:a2:
         4e:21:a2:e1:8d:4a:34:1a:fd:8d:cc:ac:97:5c:78:ea:49:49:
         5e:47:bc:60:8a:73:d3:1f:b6:88:88:c0:32:7b:b7:4a:d3:43:
         43:d6:77:bb:de:1a:63:6d:8c:a4:3f:bd:43:06:b7:d6:a7:ee:
         05:91:96:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:48:53 2025 by rpki-client