Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa
File:                     8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa (raw, json)
Hash identifier:          MbzKTj4+vhvnBLVg0+hUf9zITFmeFyyIoQbqLc7R7Wk=
Subject key identifier:   86:5D:86:FF:7D:3D:33:C8:D6:DA:D9:90:1D:A6:A4:09:8C:C3:42:1C
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F4328584AD23BB115643CC10A84F972E0
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     20454
IP address blocks:        2607:fe80:1000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:b1:15:64:3c:c1:0a:84:f9:72:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=e14948d2-0ea9-4568-bddc-0908bd0a6dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:9f:29:b6:30:43:4c:a5:02:ac:15:76:ae:
                    eb:cd:e7:aa:31:45:04:cf:ac:de:71:b2:ff:5e:0c:
                    a1:74:49:30:e0:1f:5f:de:f9:95:f5:24:16:58:91:
                    cd:91:e1:91:43:ea:03:ee:21:38:d4:74:f5:f3:2f:
                    22:6e:a2:b7:b8:95:4a:1d:d8:89:07:50:ef:24:ed:
                    fb:f6:c7:90:89:26:54:f9:f7:19:77:fa:0a:c4:c6:
                    45:bf:ab:11:1c:14:bc:72:4e:1b:ef:82:4e:2d:0a:
                    5d:79:0d:7c:e3:1a:5a:30:45:a2:5a:e7:6e:75:f8:
                    85:b2:69:60:e3:94:16:4f:15:cf:68:11:07:f4:ec:
                    0b:ae:b3:72:17:b8:a5:29:ea:e0:c8:b1:70:09:fd:
                    ca:cc:8d:88:64:9e:77:69:52:f7:fb:64:09:a4:d1:
                    4e:46:88:e2:84:44:a3:c2:ca:d4:e5:c9:3e:29:13:
                    a4:5d:cc:e5:1a:6a:b6:72:de:9a:c5:67:ac:eb:10:
                    07:b7:63:ae:da:4f:0b:17:d6:f9:f1:41:91:25:c5:
                    78:64:25:cc:2a:e8:30:8a:0e:a2:23:a8:c2:c4:c0:
                    76:f7:73:03:89:c6:09:c0:f1:17:4c:b2:ae:02:cb:
                    2a:1a:e8:f8:2b:3f:6b:e2:a9:35:c1:39:05:23:2c:
                    e9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5D:86:FF:7D:3D:33:C8:D6:DA:D9:90:1D:A6:A4:09:8C:C3:42:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe80:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:18:63:60:f6:57:d6:dc:dc:e5:6c:2d:8c:01:de:7a:0c:86:
         dd:01:3b:6e:19:11:62:38:46:a4:bc:4c:68:d4:ac:bf:56:00:
         d2:74:60:88:a5:d4:46:74:38:79:3f:cd:ae:43:a2:b8:3a:a7:
         05:86:21:8e:f0:76:38:ff:e1:73:44:ca:8b:2c:d3:92:cc:0e:
         1d:6b:59:f3:35:6c:8c:3c:d5:48:cd:c0:53:b5:ca:16:51:6a:
         43:75:d8:25:af:c3:94:6b:ba:43:20:a2:d8:21:1d:84:96:a6:
         84:ec:71:32:5b:5d:19:73:14:a3:81:66:0f:ff:b3:8f:c2:44:
         e3:18:a6:e6:6a:7a:30:45:b1:54:aa:9f:72:08:4b:00:64:15:
         13:dc:79:d2:8a:57:33:d9:b6:3c:97:80:fc:75:b8:55:b8:ff:
         9e:66:58:82:09:f1:d4:f0:4a:64:01:58:b8:58:a4:e0:43:cf:
         64:4d:91:c7:78:28:6e:86:b0:9f:7b:e3:b9:cc:ec:6c:bf:23:
         50:ef:a6:7b:4f:9f:a4:03:d0:ef:99:94:a6:a3:b6:8b:47:46:
         45:63:6a:87:ae:ce:5e:d8:e7:8a:f7:fe:10:e5:a2:46:e4:ae:
         c4:d4:55:5b:05:67:88:15:ce:29:47:51:15:76:03:80:af:88:
         35:2b:c1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:04:02 2025 by rpki-client