Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/52fe8be0-f11a-3709-a4e4-1fc3dab88c42.roa
File:                     52fe8be0-f11a-3709-a4e4-1fc3dab88c42.roa (raw, json)
Hash identifier:          KT852uwWVYOBA8BzsFYOGMkET7oRbV0i90DhuxQh4sY=
Subject key identifier:   1B:A7:30:E0:F3:0F:F9:E5:2D:8D:6F:36:A5:25:09:BA:7F:66:7A:F0
Certificate issuer:       /CN=eecc445c-064d-41ee-91f1-3ef708241983
Certificate serial:       010D0C9F4328584A4AD593DA2FDE19DD88155234
Authority key identifier: CD:40:91:39:0E:BB:C4:7C:FC:69:8C:0B:BB:EB:9B:23:66:AD:31:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/52fe8be0-f11a-3709-a4e4-1fc3dab88c42.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     394270
IP address blocks:        2620:13b:5000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:93:da:2f:de:19:dd:88:15:52:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecc445c-064d-41ee-91f1-3ef708241983
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=c5da73c6-dc90-4452-8d38-79cb681673b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:80:51:bc:ce:0c:64:6b:40:85:55:29:d6:43:
                    b8:c0:30:86:2d:e1:6b:70:ba:36:d1:db:89:70:fa:
                    a0:e2:3b:7c:f6:aa:d4:e3:5b:c6:46:58:e7:24:d0:
                    98:77:20:f7:2f:83:b0:02:e2:14:c5:f8:fb:79:64:
                    76:67:f1:2a:3e:09:66:1d:52:e5:7d:48:86:76:02:
                    57:b8:ef:01:05:5d:8c:74:2c:f6:4a:2e:99:5b:21:
                    90:60:08:8a:7e:3f:9d:6b:b6:21:5b:a8:f2:7f:0a:
                    6f:8b:41:27:ca:3f:8c:30:b3:27:15:eb:09:ca:8e:
                    e2:25:7a:68:fa:8c:f9:be:35:6c:b2:39:59:a1:4a:
                    45:96:a0:2a:2d:27:ff:c9:d7:3d:5f:1d:ee:f4:54:
                    ac:30:31:59:42:6f:4c:5d:99:2a:d9:ad:25:e4:b4:
                    25:26:b4:d4:8c:92:81:f0:0b:e0:3d:5d:c8:39:9a:
                    68:e7:06:c3:ee:d9:81:0f:d2:20:c8:a1:f4:19:4a:
                    ce:15:c8:ee:ec:df:ec:43:e3:0c:fb:18:39:f8:15:
                    5a:72:7d:b4:ac:98:b8:e2:de:9b:20:05:40:ba:74:
                    18:e9:5c:b3:62:82:a9:a4:7b:3a:dc:7f:93:e2:43:
                    f8:75:97:b2:18:9f:e1:45:77:bf:9b:ca:0f:7a:ba:
                    d8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A7:30:E0:F3:0F:F9:E5:2D:8D:6F:36:A5:25:09:BA:7F:66:7A:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/52fe8be0-f11a-3709-a4e4-1fc3dab88c42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983/eecc445c-064d-41ee-91f1-3ef708241983.crl

            X509v3 Authority Key Identifier:
                keyid:CD:40:91:39:0E:BB:C4:7C:FC:69:8C:0B:BB:EB:9B:23:66:AD:31:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eecc445c-064d-41ee-91f1-3ef708241983.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13b:5000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:e0:df:bd:7f:99:29:60:46:2f:df:74:5d:63:0c:4d:4a:d7:
         35:a9:5a:73:2f:b7:13:67:65:a4:c6:5a:f6:bc:a0:73:18:80:
         71:39:2e:85:26:0f:26:c8:c9:ec:61:46:b4:b6:c3:22:bf:6f:
         d7:3e:8a:8e:f8:98:39:fb:4c:f5:3b:fa:63:c9:f5:22:c6:c9:
         da:0e:02:2a:27:7d:d8:84:78:73:8e:72:85:be:75:82:98:9b:
         0f:51:52:9e:68:b8:4d:8d:4c:86:15:fc:24:0c:42:67:74:31:
         f9:d2:67:a2:5b:6c:b6:79:50:11:75:ee:17:d0:7e:05:c0:76:
         65:01:cb:fa:3f:ff:da:bf:14:3b:7a:a2:a4:cd:dc:eb:f4:74:
         00:e9:80:12:1a:15:ec:77:91:42:85:4a:8a:ea:a6:c0:14:64:
         c7:5d:99:df:8e:c8:e3:f7:0c:ca:09:a8:39:02:77:cb:d3:3a:
         35:a1:e7:b7:b5:09:f8:ab:12:68:3e:32:4b:88:f2:98:b2:81:
         34:d2:29:c4:49:ca:b9:6a:21:c7:d7:92:8b:84:94:3e:f4:1c:
         20:ff:52:a2:c4:d5:63:39:b6:98:c8:d7:8a:fb:38:91:4c:99:
         20:ef:60:42:1e:c5:9c:70:73:56:9b:9a:3f:cf:dd:36:36:a7:
         3d:50:78:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 22:20:22 2025 by rpki-client