Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e/753a0e65-65b0-3526-8531-09488bd32ab1.roa
File:                     753a0e65-65b0-3526-8531-09488bd32ab1.roa (raw, json)
Hash identifier:          D2T55SUQATF43B06Zuf01NsnOSFK09j9CncEZzZ94TA=
Subject key identifier:   66:D5:B1:DF:FD:E8:A7:29:68:82:55:98:A2:54:9F:53:38:EB:86:4B
Certificate issuer:       /CN=9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e
Certificate serial:       010D0C9F4328584A58CB07C4150A9BD8E7090360
Authority key identifier: D3:92:CC:31:43:E3:2B:30:BA:92:B6:88:FD:3B:51:49:A4:92:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e/753a0e65-65b0-3526-8531-09488bd32ab1.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     10261
IP address blocks:        2620:ba:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:07:c4:15:0a:9b:d8:e7:09:03:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=14d7f37e-1f5a-4704-961f-3aa1b37ba6a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:92:85:ff:8f:0f:ed:77:9a:c6:d4:1a:83:a8:
                    67:99:05:7d:53:27:c6:08:d2:9c:3c:0d:9b:0b:e5:
                    97:38:6d:8c:f7:3f:8b:37:0f:fa:cb:d3:32:ca:05:
                    8f:86:81:ac:e7:0f:ec:27:c1:b2:a1:8d:0d:28:c7:
                    ad:37:3a:b6:2d:d6:3e:24:07:3d:3f:08:6b:54:7f:
                    92:12:cc:01:ef:bb:e8:84:0e:d6:14:84:c7:b1:97:
                    c4:61:52:60:25:2f:0c:79:ed:cc:00:6a:0c:e1:ce:
                    b3:5b:e0:ca:f5:a7:67:69:2c:8d:95:b2:55:f5:d1:
                    04:04:47:99:9c:be:44:ae:22:87:86:9f:a7:34:f7:
                    92:cc:d4:e9:f6:a2:99:a7:e8:48:ce:b3:c6:b9:8f:
                    be:de:c0:33:61:5c:5b:61:4d:61:09:92:00:a5:42:
                    fc:7e:f4:4c:67:b4:b6:60:3d:bd:10:2d:3d:75:76:
                    e2:3f:fe:50:8b:ad:fb:9b:88:ac:29:19:1f:48:46:
                    b6:11:ca:01:9d:3a:67:d1:16:60:e8:eb:6c:22:81:
                    5b:2b:22:94:3b:ba:54:5e:a1:1f:6b:ea:db:99:14:
                    2e:a4:73:1c:6c:18:c4:1c:03:ac:31:3d:57:08:2a:
                    bd:0a:01:5f:45:51:95:38:b2:32:63:28:78:33:70:
                    bb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D5:B1:DF:FD:E8:A7:29:68:82:55:98:A2:54:9F:53:38:EB:86:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e/753a0e65-65b0-3526-8531-09488bd32ab1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:92:CC:31:43:E3:2B:30:BA:92:B6:88:FD:3B:51:49:A4:92:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9e8a6798-0b2d-4ff1-9547-f8b6cc6af30e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ba:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:3b:63:c4:18:35:17:bf:7f:2b:85:86:89:69:f1:1a:b6:27:
         e6:a2:ae:39:78:de:b3:3a:26:cb:ca:44:48:1e:37:f6:96:67:
         46:57:c7:0e:77:98:a4:bc:24:8e:f6:32:2b:db:22:72:34:96:
         65:0f:2a:ea:7e:b6:68:24:09:29:55:c3:65:62:56:5f:d2:3b:
         eb:e6:cd:e2:eb:6c:7b:1d:00:21:7b:0f:28:49:96:a4:56:cc:
         25:7a:dc:7b:f2:2d:7c:ab:9c:c0:9f:f5:09:fe:b1:fa:92:fd:
         39:75:92:1c:c2:68:11:21:03:3b:d5:47:df:a6:92:fa:ef:51:
         6a:0d:bb:bf:d4:db:53:de:a0:c8:a1:23:9b:97:60:4a:02:e8:
         88:22:7d:a0:88:a9:12:72:64:63:d9:5f:8a:30:c7:d0:ca:d3:
         ef:b7:7d:98:26:d6:0d:e9:82:3e:04:7c:13:fa:ba:68:8f:31:
         92:20:51:35:cf:f1:a9:cc:56:56:87:a7:03:85:1a:cf:0b:e4:
         d2:44:f1:80:79:6b:d7:f2:f0:e2:fb:8e:c7:a9:d8:0c:d7:21:
         58:4c:52:71:dc:96:8b:72:18:48:47:ef:ec:ae:f6:9f:0f:d0:
         70:10:37:42:b0:ec:b9:69:f4:25:3f:e6:9d:a4:a2:84:c1:e7:
         f6:15:54:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:16:30 2025 by rpki-client