Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/eaf64540-d802-3e1b-adfe-c5e72f37f729.roa
File:                     eaf64540-d802-3e1b-adfe-c5e72f37f729.roa (raw, json)
Hash identifier:          7kCmK0o0aCQtm0lyZsFYlgqpMSj1n9wUCeFRXWJBwnw=
Subject key identifier:   F6:54:0B:B0:9E:27:F2:DB:7C:40:31:8C:CD:5B:E6:E8:9E:73:6A:1B
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F4328584AE8912ADD07A72528786AC0F4
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/eaf64540-d802-3e1b-adfe-c5e72f37f729.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     53828
IP address blocks:        2605:a380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:2a:dd:07:a7:25:28:78:6a:c0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=8fe59488-a0e7-45e4-8d14-ed79a0f7e8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3c:a2:9e:32:17:90:0f:6b:64:cb:ce:a7:2d:
                    18:15:b7:ce:56:92:62:80:35:cf:b8:d5:b6:98:77:
                    36:ea:a5:21:58:64:a1:01:9d:e4:ed:ba:8e:9b:2c:
                    e0:92:2c:a8:02:e2:dd:6a:c7:3d:6c:d8:22:b6:c5:
                    11:02:f9:c6:57:2c:ea:82:c8:be:14:98:f8:7a:1a:
                    7c:d7:23:e3:34:08:ee:a2:0d:d5:13:38:b9:ab:78:
                    fe:da:91:1a:8f:10:6d:a7:4b:8b:f6:65:8f:62:b0:
                    23:d7:e2:4e:aa:3d:d6:c2:fe:40:51:ed:e6:ec:b4:
                    4d:c0:61:58:21:89:63:b4:53:17:dc:93:8f:a1:76:
                    d5:07:bc:bc:b8:bc:91:78:0f:10:bb:11:f6:93:6c:
                    72:3e:88:ed:66:fe:85:0c:d5:c2:fd:b9:59:4a:10:
                    b6:97:32:5a:1d:cd:1e:82:0e:da:1b:72:06:f5:20:
                    e4:7e:ca:c5:89:08:16:83:ba:21:4a:ec:65:f3:95:
                    c0:ec:44:9a:b1:8a:d3:fa:a2:9e:e7:e3:30:ce:9c:
                    9d:c2:45:45:75:cf:24:ec:94:5c:4a:fd:19:1c:fe:
                    b1:e8:52:8e:37:ed:c2:1e:0f:5a:10:8a:02:0c:70:
                    99:7b:2b:d5:ab:ce:99:48:bb:f5:be:b2:2f:45:33:
                    61:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:54:0B:B0:9E:27:F2:DB:7C:40:31:8C:CD:5B:E6:E8:9E:73:6A:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/eaf64540-d802-3e1b-adfe-c5e72f37f729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:fe:58:e1:67:b9:73:23:7a:c6:c6:c6:4b:d3:d4:07:c4:7a:
         41:e2:b6:83:a8:bf:a8:49:78:3a:22:60:70:59:c0:b4:e9:b7:
         c5:39:26:9e:d9:a1:66:e1:48:21:52:15:da:5a:ea:3d:06:bb:
         98:c7:83:60:b7:93:87:e9:44:b5:68:70:65:0a:f7:2f:fa:cb:
         8e:bb:d8:4e:a5:39:d1:ee:fe:97:c3:6a:e1:c9:96:0b:79:a8:
         cb:64:78:26:6f:db:aa:ed:2d:d3:81:15:ac:3a:90:57:ae:56:
         bb:e2:1f:7b:27:8d:f9:43:eb:89:f4:c0:aa:22:f7:0e:b4:e7:
         66:66:63:d7:6d:ec:ff:2c:47:62:cc:2e:4a:87:cf:2c:4a:fa:
         d8:d7:81:b9:95:13:2c:2e:47:2b:d9:96:28:59:de:62:e8:55:
         53:ea:84:cf:10:fb:de:d5:15:ec:be:98:f5:00:78:32:c0:96:
         06:f5:39:83:9b:24:e6:06:24:d2:e8:88:94:64:25:71:32:bc:
         4b:9b:cd:f2:9a:dd:00:0b:ad:5a:06:6b:b0:6e:00:4f:09:ec:
         63:2f:53:14:27:74:b0:50:e6:a8:da:74:09:e3:b9:de:a7:92:
         53:08:ba:bd:06:95:fb:30:f4:51:5e:fc:8a:7c:dd:58:77:7c:
         d9:74:05:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:38:32 2025 by rpki-client