Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e908a3d2-a88b-3c77-be8f-d3554df24fef.roa
File:                     e908a3d2-a88b-3c77-be8f-d3554df24fef.roa (raw, json)
Hash identifier:          qH5Z0G/0bD9NNiBNMyD/20nkXs2QIqJaVUuRxM31gEc=
Subject key identifier:   4E:DB:1F:82:6C:BC:50:5B:C6:BA:A4:25:6B:FE:00:23:65:78:21:B2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA160E3CD07D93D70F81F4D40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e908a3d2-a88b-3c77-be8f-d3554df24fef.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     3456
IP address blocks:        2600:5c00:21cf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:e3:cd:07:d9:3d:70:f8:1f:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=e9dafb50-98bb-4c12-a541-ef75b7fa376d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:71:1d:49:fb:2c:b3:15:95:84:a6:17:2a:fd:
                    30:60:51:0a:02:03:38:c3:91:9b:2d:b3:02:09:2e:
                    2b:81:57:93:58:6c:a9:86:91:0c:d3:90:b6:9f:ea:
                    e7:2a:b7:37:2d:d6:c8:9e:47:c1:ed:36:eb:e6:d3:
                    d3:61:2e:f3:c8:75:34:ff:2d:ff:5f:0d:ac:9c:42:
                    75:92:f2:a3:34:b2:1d:d0:f0:77:be:84:55:58:5e:
                    bb:b6:ae:4e:6f:e4:03:f9:37:31:43:c1:a2:dc:b9:
                    b2:72:e6:ea:69:21:1b:29:3f:cc:60:f9:15:29:5d:
                    0a:d6:58:87:98:00:84:00:06:36:2a:07:da:5a:60:
                    9f:9f:a2:a0:f6:8c:df:2d:29:da:c9:4e:4d:27:32:
                    2e:58:4b:e7:75:fc:64:7b:cd:56:08:f9:79:b8:03:
                    fb:fa:62:25:4c:3d:de:a7:eb:41:76:3f:60:6b:30:
                    5b:a1:c2:63:b4:a4:ee:f9:77:83:1e:e4:34:90:24:
                    40:5f:e1:8f:10:b2:4d:91:c1:4f:5b:2f:b0:63:d7:
                    9d:35:da:0f:68:f7:91:8a:f7:83:fb:d8:1d:0a:15:
                    6e:20:fa:3a:d4:a0:55:66:e5:0a:13:b5:dd:71:cc:
                    0b:42:df:c3:05:a0:c8:da:33:d8:f3:fd:5e:8e:9f:
                    71:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DB:1F:82:6C:BC:50:5B:C6:BA:A4:25:6B:FE:00:23:65:78:21:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e908a3d2-a88b-3c77-be8f-d3554df24fef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:5c00:21cf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:39:54:86:2f:0b:74:f4:46:c8:d6:32:07:77:9e:d5:45:0d:
         89:fb:39:87:57:91:78:e2:05:d1:b8:f2:80:55:eb:d6:e0:85:
         6f:e0:02:cb:0d:fd:4e:ce:bf:4e:13:9b:81:71:c4:85:36:df:
         18:dd:14:07:02:c4:f8:9f:24:4c:9a:ba:0a:e9:8b:3c:6f:24:
         17:fe:3d:55:9f:8e:93:c2:5e:4b:d5:2f:c5:30:7a:7f:93:9f:
         f8:93:64:2a:b2:34:a1:50:53:67:20:ba:bb:c8:a4:03:63:05:
         3d:f4:6f:93:1a:7b:3d:93:d8:53:8f:ba:ab:2d:43:4f:50:75:
         a8:20:f0:15:f2:ac:da:61:2c:42:5b:5a:04:a5:6e:b1:7d:9a:
         3a:bf:9b:48:f4:dc:e9:c7:27:5d:2a:3b:31:e4:b5:12:3a:b7:
         a4:bd:a2:6d:6f:39:31:ab:c1:1e:9d:a7:9a:bd:e5:1a:16:b0:
         c9:7d:89:37:c4:7e:27:95:ff:a2:b4:76:19:39:0a:3d:8a:14:
         d7:45:4a:ef:5a:66:5e:6b:bd:97:7c:c8:d8:8f:1f:5c:15:c5:
         76:7b:b9:86:15:36:03:fc:6b:49:7b:f8:ec:c6:37:20:1b:d9:
         ce:13:fc:27:4f:9d:66:91:36:6f:20:52:0f:fc:b5:c1:f0:eb:
         80:cd:44:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:14:01 2025 by rpki-client