Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/5d23e69b-ed27-3047-b6a0-2ce9f0b2e6de.roa
File:                     5d23e69b-ed27-3047-b6a0-2ce9f0b2e6de.roa (raw, json)
Hash identifier:          IiC5Bmyi4awFIFIZuFjG0AvQnnJJQ/JFxlmGk2gCFUY=
Subject key identifier:   7D:0F:7B:AA:FB:68:C1:1D:64:F2:C1:9A:5B:EB:FE:FE:01:99:29:C4
Certificate issuer:       /CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
Certificate serial:       010D0C9F4328584AECC12AEF0199DBBAFB4259E0
Authority key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/5d23e69b-ed27-3047-b6a0-2ce9f0b2e6de.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2602:80a:200b::/48 maxlen: 48
                          2602:80a:200c::/48 maxlen: 48
                          2602:80a:200d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:2a:ef:01:99:db:ba:fb:42:59:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=9f7ef9bb-7941-4329-9685-a42b20b9b7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:40:bc:b5:96:43:60:8f:f0:4a:e1:a0:75:b9:
                    76:a7:e3:03:57:49:ad:8d:7e:a7:76:be:e5:1f:2c:
                    73:32:a8:b5:fd:90:88:17:bf:29:b3:eb:1d:a6:52:
                    fb:30:c6:95:1b:23:5f:13:57:78:1e:2a:7b:9c:23:
                    7a:57:48:08:10:1c:21:41:98:79:8f:dd:9e:06:54:
                    17:a2:96:39:5b:87:44:37:24:b5:56:c3:07:ec:34:
                    21:91:c8:89:e5:b5:e5:c4:b8:f9:b4:27:25:ec:20:
                    00:0c:a3:f0:f4:40:c7:2f:01:ee:aa:d2:39:63:e7:
                    cc:35:be:bf:f1:ed:b7:02:32:67:7f:72:a9:61:f5:
                    d0:f8:8f:ef:81:82:64:f2:ab:a5:ad:87:1b:98:8c:
                    72:48:77:6a:95:3b:fc:a0:d2:1c:ab:21:db:77:6e:
                    b0:ca:fc:80:54:eb:6b:fd:9b:51:df:33:26:cb:79:
                    6f:e2:06:75:54:a1:7b:87:c1:f7:f0:f3:4c:7c:ee:
                    5a:28:09:35:4c:9a:db:8b:5c:31:ea:66:a2:2f:49:
                    b4:bb:eb:6f:36:f4:6e:84:77:0f:a1:ec:f9:a8:86:
                    b2:86:d2:5b:cd:fb:ac:6c:e9:20:fa:62:b3:5e:c5:
                    38:09:7d:fc:19:26:5c:97:cd:79:5e:b1:12:48:40:
                    98:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0F:7B:AA:FB:68:C1:1D:64:F2:C1:9A:5B:EB:FE:FE:01:99:29:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/5d23e69b-ed27-3047-b6a0-2ce9f0b2e6de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl

            X509v3 Authority Key Identifier:
                keyid:17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:200b::-2602:80a:200d:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:59:b8:65:f7:80:1f:02:1c:ed:bb:0b:70:29:bd:dc:2a:1b:
         b5:ee:59:58:97:0f:94:1e:b6:0d:e6:ec:12:9a:98:a7:78:9c:
         6f:5d:89:d6:56:53:0a:d8:68:34:b6:1e:f1:f0:d4:bb:1e:24:
         50:ce:1c:1c:1c:71:f3:de:d4:1b:96:e4:01:91:b9:44:ab:5e:
         74:75:19:09:7e:f6:2c:38:11:d5:e5:b8:fc:6f:85:90:8e:7d:
         89:67:d1:22:53:0a:8f:b2:37:1d:a1:d9:9b:e0:4b:fc:e9:2b:
         65:ef:8c:b4:79:50:d0:71:a9:0a:61:62:f7:42:29:2e:7f:eb:
         c2:c3:3c:af:de:b3:d1:54:e9:b7:54:3d:0a:0d:4b:07:62:8b:
         fe:d4:95:40:0c:69:45:40:de:90:f9:46:22:77:4c:57:47:a3:
         20:18:b1:9a:b0:00:7e:90:34:df:eb:60:ef:d7:09:fb:b7:c3:
         f0:97:53:c1:af:9a:b9:ce:66:3c:c1:ba:df:b7:9a:07:00:a9:
         74:f0:92:da:fa:a9:ae:39:01:f1:87:2d:8e:fb:0a:37:85:ed:
         63:95:fd:2f:a8:68:28:64:58:78:c8:c4:47:43:91:03:d3:2d:
         54:40:aa:b4:8a:47:ea:12:70:e9:3e:1d:85:74:0d:35:11:04:
         e0:13:b4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:42:50 2025 by rpki-client