Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/def16803-04ad-3e2d-b114-2580adfdbd46.roa
File:                     def16803-04ad-3e2d-b114-2580adfdbd46.roa (raw, json)
Hash identifier:          Sq2+xsBbYUmWmyhwa+sqWLFGOyKerU7VzIie9jd/w90=
Subject key identifier:   8F:7D:55:E4:48:17:97:73:0A:27:EB:95:87:4A:34:EB:A8:A1:AC:F3
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584AF25681F9BA177AF18FA92BB0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/def16803-04ad-3e2d-b114-2580adfdbd46.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     7861
IP address blocks:        2001:56a:8f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:81:f9:ba:17:7a:f1:8f:a9:2b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=8731d3cf-e38a-43c7-a3ec-44d963e4d910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4a:8c:8e:5a:f2:0f:c3:f5:61:cb:34:da:24:
                    f1:b9:ca:13:78:31:b6:69:82:cd:fe:b9:17:80:cb:
                    71:1d:76:b9:b1:f1:8a:4e:68:94:40:2f:a4:cd:b9:
                    22:ee:d8:c6:fc:94:bd:05:ed:5b:62:eb:47:3d:03:
                    ae:af:3f:41:19:dc:af:2a:12:41:2f:8e:93:15:54:
                    0a:3e:4b:39:3e:5c:23:a6:5c:b8:84:3e:11:d5:d1:
                    ad:be:7b:6f:30:c9:3c:c1:ce:cb:b9:2e:4d:99:cf:
                    19:24:d0:e7:f0:08:c3:4c:d7:4a:55:11:f5:30:7c:
                    1c:ea:a9:10:7b:a5:e4:e2:ff:38:90:45:2e:a2:e2:
                    a6:a3:26:68:13:14:52:a5:58:c6:3d:70:20:f3:2e:
                    59:e4:2b:5e:45:15:6d:fc:73:f1:58:b8:48:e4:d5:
                    9c:93:06:0c:d4:20:e7:ee:c2:b6:8d:82:25:1e:f2:
                    4e:09:f9:a4:7a:dc:7e:5b:e2:95:0d:ea:69:17:19:
                    a8:78:e9:18:1e:d0:61:af:18:24:a8:39:15:36:6e:
                    10:81:81:5c:e2:c1:5d:88:a7:1a:fc:b2:d9:ac:87:
                    31:aa:f1:d0:4d:7d:8d:2f:9e:10:ea:00:72:f6:7c:
                    f1:48:08:ea:a8:f3:c2:78:88:51:0d:79:b5:2b:a2:
                    43:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7D:55:E4:48:17:97:73:0A:27:EB:95:87:4A:34:EB:A8:A1:AC:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/def16803-04ad-3e2d-b114-2580adfdbd46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56a:8f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:cf:e7:cc:3d:90:08:cb:16:8e:68:99:6c:50:82:0f:27:0f:
         c0:f2:56:1f:21:31:d2:3c:b4:db:21:83:91:3b:6b:1e:f9:5f:
         f1:bd:fa:4a:0f:55:df:15:48:28:db:3b:c6:73:15:b2:6a:b2:
         79:b9:eb:c7:03:72:60:d0:8a:81:e5:be:b6:70:68:d2:86:c2:
         62:bd:04:2f:20:da:f3:99:0a:ee:52:ff:32:44:be:16:bf:1a:
         52:db:c6:c3:c7:ab:24:28:9c:0f:09:d0:8f:3a:72:da:9c:d0:
         a7:63:aa:8f:04:6a:37:e9:4d:57:1b:b0:89:1a:d7:24:f0:cd:
         b0:ab:4b:10:21:bd:70:13:5a:c0:fa:df:1f:c3:b5:da:bb:8f:
         9e:3f:99:ae:89:c1:ae:56:d8:e7:6e:07:4c:67:fa:08:d8:3b:
         e5:72:32:b5:30:55:63:2e:a5:6c:ad:66:9d:b2:69:a7:df:f7:
         ac:a9:79:9b:ae:f1:c9:b0:df:99:7e:8d:92:2d:ca:6a:74:51:
         5f:8f:96:07:f5:09:5c:5e:c2:36:a9:2d:d2:df:5a:af:23:16:
         4e:eb:2e:58:ec:ec:a5:4c:9f:49:d1:33:84:44:9e:2f:e7:54:
         1d:13:a0:aa:ae:f1:03:76:2e:33:fc:b5:38:2f:b3:43:3f:76:
         83:ac:4e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:17:13 2025 by rpki-client