Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/de6c9681-7f04-385f-80d1-e86f0f8a4bc2.roa
File:                     de6c9681-7f04-385f-80d1-e86f0f8a4bc2.roa (raw, json)
Hash identifier:          189yV013TbwTz5sS4mdD1k3ydZaq3xcQoQH08Q8tqKM=
Subject key identifier:   2B:A8:D3:CE:E6:C3:AD:4D:45:B6:22:B5:DA:88:BD:9E:3C:53:41:3F
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F4328584A987092ACE4C7C3EBC9DD7E40
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/de6c9681-7f04-385f-80d1-e86f0f8a4bc2.roa
Signing time:             Mon 21 Jul 2025 20:10:27 +0000
ROA not before:           Mon 21 Jul 2025 20:10:27 +0000
ROA not after:            Sun 19 Oct 2025 20:10:27 +0000
asID:                     5744
IP address blocks:        2610:20:5120::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:98:70:92:ac:e4:c7:c3:eb:c9:dd:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Jul 21 20:10:27 2025 GMT
            Not After : Oct 19 20:10:27 2025 GMT
        Subject: CN=66c3ce8e-18c3-49a7-969f-443dfc8d98f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:82:5c:c4:24:00:76:da:6c:fb:1d:5e:e0:51:
                    06:62:c3:cf:c8:72:33:e0:12:d9:f6:6f:eb:37:23:
                    85:84:73:54:ba:87:7d:d5:cd:b4:c2:22:e7:c4:d7:
                    37:34:f3:c0:b9:52:44:1f:99:73:b3:02:3b:4b:e0:
                    96:6e:04:67:ca:9e:76:1c:b6:9e:1d:84:98:2a:75:
                    8d:af:f9:12:a0:5d:b5:57:8f:2b:8e:bf:38:5f:c1:
                    e0:b5:8c:37:3d:0b:5b:76:2b:0f:b3:ba:ea:5f:6e:
                    2d:c1:e1:cc:93:77:db:fd:09:b4:41:6a:64:f6:40:
                    64:73:6e:cd:e8:72:5a:60:91:15:36:0f:7b:d4:97:
                    cc:b4:f2:1f:30:93:fc:e0:d2:f4:da:f4:42:ce:73:
                    e1:32:8a:8e:14:35:88:6b:54:b5:d6:26:ee:cd:55:
                    2c:a8:7a:6f:45:84:32:a5:82:3a:c3:51:97:c7:27:
                    7c:a9:5f:67:2a:54:ae:87:c2:6a:e8:6d:34:2a:5e:
                    ed:d3:23:fd:ad:71:10:a1:16:d9:71:b3:f5:88:ea:
                    86:4b:6a:09:3e:62:46:1b:27:7f:70:b0:df:b8:a6:
                    62:12:e0:d6:09:52:4f:e7:f6:48:23:33:63:e7:c3:
                    8d:09:7a:50:bd:6c:d3:d4:d9:04:ad:ba:2a:37:01:
                    18:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A8:D3:CE:E6:C3:AD:4D:45:B6:22:B5:DA:88:BD:9E:3C:53:41:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/de6c9681-7f04-385f-80d1-e86f0f8a4bc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:5120::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:19:8d:3c:7e:67:fc:71:85:2f:9c:e2:4a:5a:3e:d6:85:a4:
         a2:46:fb:4e:12:f3:87:59:c4:e9:a6:44:24:bf:bb:b2:db:d6:
         6d:10:a5:0b:10:27:5c:fc:bf:3d:f6:d2:06:26:37:61:8b:8a:
         54:16:72:b1:7a:2b:20:4e:18:7a:c7:5d:07:31:af:6e:8d:eb:
         7e:4a:44:b3:8b:00:4c:be:15:83:a0:54:e1:10:b2:04:2f:40:
         e0:71:c4:aa:a2:4c:fe:7a:9e:f6:2a:0b:b5:8a:d4:f8:39:da:
         53:49:25:ad:4e:80:c0:87:50:af:ea:40:8d:c6:36:b0:43:f1:
         a3:f9:3d:94:d7:46:eb:7c:7d:c7:aa:01:05:94:96:72:e7:1b:
         4f:b6:48:85:fa:f0:ad:bf:20:42:42:c4:26:2b:5f:c9:45:18:
         1b:8e:b9:4e:5f:d4:83:83:6d:5a:c3:24:28:f4:e4:01:a3:71:
         a1:87:83:81:c2:24:a8:dc:dc:68:b8:ad:43:18:73:17:28:f3:
         e9:c9:51:42:fd:f3:7a:fb:13:a8:79:d4:61:63:12:6c:d7:93:
         5e:74:89:54:16:6b:48:7e:c0:3b:35:f9:73:1a:2d:ca:bc:4f:
         35:16:e1:a0:74:1e:33:23:a0:6d:d6:29:48:89:df:e7:94:79:
         4f:40:4e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 10:52:38 2025 by rpki-client