Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/148ebbeb-181b-4ab5-a52f-06d2e140e40a/535beb46-c1a6-3540-a27a-d595f370e99d.roa
File:                     535beb46-c1a6-3540-a27a-d595f370e99d.roa (raw, json)
Hash identifier:          xJlqLt2rZnthZmfrC6UynCBGNKzN5OWVatKwnuzAmn0=
Subject key identifier:   38:E7:D3:75:5C:6C:2A:27:10:D1:A6:D5:9E:52:4B:E6:F3:BC:DE:3C
Certificate issuer:       /CN=148ebbeb-181b-4ab5-a52f-06d2e140e40a
Certificate serial:       010D0C9F4328584AE8912E466725876652312C00
Authority key identifier: DC:77:F9:BD:7E:33:CC:59:10:6A:58:2E:0A:B8:5B:74:16:8B:65:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/148ebbeb-181b-4ab5-a52f-06d2e140e40a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/148ebbeb-181b-4ab5-a52f-06d2e140e40a/535beb46-c1a6-3540-a27a-d595f370e99d.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     54060
IP address blocks:        2620:a2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/148ebbeb-181b-4ab5-a52f-06d2e140e40a/148ebbeb-181b-4ab5-a52f-06d2e140e40a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/148ebbeb-181b-4ab5-a52f-06d2e140e40a/148ebbeb-181b-4ab5-a52f-06d2e140e40a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/148ebbeb-181b-4ab5-a52f-06d2e140e40a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:2e:46:67:25:87:66:52:31:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=148ebbeb-181b-4ab5-a52f-06d2e140e40a
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=3237dbbe-fcf3-4f93-81f1-f2936ce828b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8f:3c:76:ad:d1:18:a6:0b:cb:f3:86:aa:cc:
                    88:39:cf:dc:c2:80:2b:15:e2:49:a7:a9:1e:dc:e4:
                    42:5c:9a:1e:bd:98:c3:81:5d:22:73:90:2c:06:81:
                    ab:e4:a6:a7:dd:ac:bc:c0:9f:4a:60:6c:90:f0:4f:
                    e6:dd:e3:66:e2:4b:f7:7e:f9:71:7a:92:7e:16:7e:
                    54:da:a8:bf:64:12:2e:8c:f8:e4:c7:e7:98:dd:77:
                    01:fc:60:d5:de:0b:55:93:a7:28:e5:2a:98:c1:b6:
                    e3:62:c7:11:7c:62:26:fd:d5:6f:cd:3d:7b:d7:73:
                    e8:1a:39:d2:f7:d6:0b:d4:10:20:c4:f4:de:ea:59:
                    44:41:ca:b6:60:ee:a2:e1:52:b3:b8:b8:2a:6a:4a:
                    dc:b6:28:5d:e5:b3:c0:58:7d:06:d9:08:b0:ff:b8:
                    7e:3b:ac:5a:dd:af:a9:26:35:14:39:dc:30:e5:99:
                    c9:ab:8c:80:c6:d5:b6:c5:f5:7c:e9:66:0e:7f:66:
                    03:57:6c:84:bd:11:a5:d1:42:06:d9:86:60:e8:b6:
                    cc:88:10:f9:94:d8:ce:a8:47:cb:f7:5f:93:3d:a0:
                    1c:33:6d:ed:b3:f7:50:29:bd:08:14:93:ee:d6:8f:
                    a7:b6:a2:da:10:9a:01:b2:25:e3:98:6f:86:be:de:
                    b2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E7:D3:75:5C:6C:2A:27:10:D1:A6:D5:9E:52:4B:E6:F3:BC:DE:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/148ebbeb-181b-4ab5-a52f-06d2e140e40a/535beb46-c1a6-3540-a27a-d595f370e99d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/148ebbeb-181b-4ab5-a52f-06d2e140e40a/148ebbeb-181b-4ab5-a52f-06d2e140e40a.crl

            X509v3 Authority Key Identifier:
                keyid:DC:77:F9:BD:7E:33:CC:59:10:6A:58:2E:0A:B8:5B:74:16:8B:65:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/148ebbeb-181b-4ab5-a52f-06d2e140e40a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d4:0f:eb:bf:04:45:f5:7e:9f:11:f3:53:8e:2d:92:0f:60:
         88:2a:cd:c1:4e:26:cb:54:0f:37:34:24:53:a3:18:63:6c:12:
         8c:a9:b0:34:02:f2:77:37:9f:3c:a4:71:8d:cb:00:27:55:d2:
         b0:d7:d7:01:e4:c3:a1:9c:ef:7c:34:bd:df:fb:d7:4c:e3:ab:
         18:2a:e0:a6:51:07:e5:45:59:19:10:81:82:35:bf:cf:ee:f0:
         fc:8c:8f:b5:b1:78:4f:75:96:75:70:7f:00:c1:a4:9d:c0:2c:
         f4:3a:10:fa:f8:a9:dc:48:88:d8:ea:6d:85:28:69:33:71:10:
         33:1d:37:a4:2b:90:53:b3:ed:fc:d0:fe:41:e0:97:76:f9:1a:
         03:37:05:e0:12:0a:fc:39:a7:ed:f5:ff:87:57:d2:21:01:96:
         06:fd:4e:32:95:ee:77:b9:cf:ee:6e:53:1f:4c:21:2b:d2:c2:
         2b:29:27:ec:58:02:f7:01:8c:b6:4d:47:b1:64:73:7b:ea:04:
         97:02:23:cf:96:3f:6d:02:7f:42:b1:91:19:5c:46:3a:f7:dd:
         13:39:ac:4a:36:29:df:17:cd:96:32:13:8d:ff:3d:49:61:9b:
         b1:05:11:83:51:ce:47:51:bb:22:01:fb:84:0c:cf:ad:a3:d2:
         d6:f4:69:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:59:56 2025 by rpki-client