Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ad1646d5-e9b0-3f73-af36-500c6f8e9659.roa
File:                     ad1646d5-e9b0-3f73-af36-500c6f8e9659.roa (raw, json)
Hash identifier:          NgK3HWjINiNNpYkpw5KdDE0MZ3xeJHeeNsEXe5wj0iM=
Subject key identifier:   5D:61:08:61:7C:3B:B3:C5:31:7F:67:80:8C:50:99:1A:E9:0C:8D:1D
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584A612B0E6478CBE2D634648FC0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ad1646d5-e9b0-3f73-af36-500c6f8e9659.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     398549
IP address blocks:        2605:dd40:9005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:0e:64:78:cb:e2:d6:34:64:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=f497b789-5968-4528-ada1-889864c9fd34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:25:68:2d:64:90:1c:52:ee:4a:5b:ef:69:7a:
                    75:f3:71:53:a4:d9:de:ec:f6:46:d6:a9:18:e1:1c:
                    18:d2:7c:58:50:61:bf:4a:ec:7b:ae:47:42:1b:c0:
                    aa:b7:b7:16:cf:5e:ee:3d:2c:e7:88:3d:2d:9a:3f:
                    c2:28:f0:ef:ba:8e:9c:61:af:18:9b:88:fa:86:cb:
                    32:12:1c:67:ee:b8:dc:5f:e0:6c:fe:d8:9c:fd:b4:
                    0b:6f:00:39:ca:76:87:b8:da:f2:63:c5:ec:b3:65:
                    6e:79:da:97:c3:b1:9b:52:ad:79:9a:a6:c6:fa:84:
                    30:81:4d:88:d9:5c:7e:38:7b:df:88:b8:ea:bd:e6:
                    6c:38:1a:60:5b:52:f5:c4:41:43:c6:8a:58:bc:91:
                    d6:59:f5:c3:85:17:5e:e4:2a:11:bf:93:06:be:56:
                    4f:72:93:87:03:4b:dc:9e:5e:02:12:b1:20:d2:3e:
                    a9:aa:e6:05:8a:3c:a9:4b:d1:d4:ba:ec:d5:05:74:
                    d1:aa:9e:8e:c7:eb:51:5d:9e:fb:39:4a:cf:fa:8f:
                    7b:30:37:35:d5:a2:cc:3f:b7:cd:d5:ae:af:95:04:
                    f4:fb:c3:72:5c:1e:77:a8:a8:a8:9f:7c:ae:3f:31:
                    29:fd:e3:f5:6f:81:82:53:5e:68:9a:71:7c:0d:d5:
                    35:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:61:08:61:7C:3B:B3:C5:31:7F:67:80:8C:50:99:1A:E9:0C:8D:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ad1646d5-e9b0-3f73-af36-500c6f8e9659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:9005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:1e:13:ed:82:07:84:62:68:1b:23:44:5c:64:2a:94:8f:98:
         b9:20:90:1e:a2:fd:78:1d:5f:23:6a:4b:bd:d0:bb:27:c7:6f:
         ed:82:4d:2a:c6:aa:45:2f:c4:ba:81:29:25:5b:50:2a:f4:1f:
         72:ea:96:46:a3:96:e6:76:01:09:f0:ba:02:07:3b:67:da:47:
         33:59:78:fd:1c:03:8c:25:b6:2c:ef:8b:e7:d6:40:87:eb:98:
         27:bd:4f:36:f3:37:fd:6e:bf:21:80:69:aa:d3:df:d4:8a:6c:
         c1:7f:74:cc:67:d7:fc:8d:52:bc:ec:06:5d:1b:84:36:40:85:
         81:7e:2b:ef:77:2f:04:12:6b:e5:bc:6f:05:52:47:b2:8b:8e:
         53:c4:75:df:18:1a:7f:34:96:98:e5:d3:9c:f3:8c:f1:ba:53:
         e2:d8:ad:c6:9e:9c:e5:42:3e:6b:21:60:50:99:e8:ae:23:1d:
         3f:23:d2:29:3c:e3:6b:d1:69:a9:78:49:65:44:3f:a1:f0:e4:
         1d:6f:2c:4e:c2:92:ba:ad:e4:cb:b9:e5:94:df:86:77:b5:5e:
         1c:dd:bd:24:a7:bc:3c:1f:b4:56:39:b7:b7:63:eb:5d:29:ce:
         2b:bb:d5:f5:f2:da:9e:31:e1:76:b0:88:6e:c5:6b:d6:67:d9:
         1e:7d:b5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:26:48 2025 by rpki-client