Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/7cd53b18-84bc-3058-88b5-0aa5a64fe4fe.roa
File:                     7cd53b18-84bc-3058-88b5-0aa5a64fe4fe.roa (raw, json)
Hash identifier:          djNitPUYI0SZYeBU0yW2a8DXFAyus+yTbD55zlbDGCQ=
Subject key identifier:   A2:62:95:94:E1:1C:F4:57:4D:7F:87:5A:A8:B3:DF:F4:1C:E2:86:A8
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584AC2E10A73853F838863D6CF80
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/7cd53b18-84bc-3058-88b5-0aa5a64fe4fe.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     11105
IP address blocks:        2607:f8f0:620::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:0a:73:85:3f:83:88:63:d6:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=b82b7148-f182-4bbd-8e19-34269152a5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f3:35:54:cb:bd:6a:78:4e:fe:06:78:2e:77:
                    42:59:fe:04:8c:cc:35:7e:34:e3:71:02:f5:83:98:
                    c0:70:e3:72:e1:19:9e:fc:d3:26:59:3d:ac:15:c1:
                    6c:04:25:c4:e7:4c:44:a3:48:d6:33:ab:03:9e:d2:
                    9b:f5:bb:da:fa:29:bb:db:6c:90:49:31:f0:34:c1:
                    2e:70:24:bf:ac:0a:d8:3e:e0:76:24:d0:cc:7d:fb:
                    a3:44:07:bb:3e:8d:d3:a2:b2:2c:2d:dd:64:b7:46:
                    1d:bc:f9:94:82:bb:d5:99:73:98:7b:37:74:b8:ed:
                    9f:a9:f8:06:3e:79:d9:47:79:bf:88:d0:34:f3:0f:
                    1d:09:82:e2:e8:39:4e:bf:5f:5f:fb:24:88:4e:38:
                    c1:95:32:b9:1d:ef:fa:6e:9a:07:97:63:13:3c:25:
                    be:9e:f1:14:29:1a:75:84:f9:8d:5b:33:81:7a:06:
                    09:89:db:4f:9e:d0:5c:d7:ef:f3:69:b8:14:e4:c4:
                    95:fe:17:71:6b:f3:d7:62:44:8e:f1:66:25:61:0b:
                    e0:20:c0:e4:ba:76:7f:9b:3b:ef:7f:b2:c1:f1:62:
                    4e:34:57:62:c0:42:6f:e7:36:d3:ab:e7:c9:44:e5:
                    7d:ff:51:27:fe:af:78:b5:b3:8c:c5:de:9e:9c:52:
                    7e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:62:95:94:E1:1C:F4:57:4D:7F:87:5A:A8:B3:DF:F4:1C:E2:86:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/7cd53b18-84bc-3058-88b5-0aa5a64fe4fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:620::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:36:47:61:eb:96:c0:24:e6:d3:b3:26:f2:4f:e0:38:43:3f:
         84:56:76:b8:06:c5:ad:ef:ee:96:48:1a:4c:32:3d:d6:12:8d:
         09:d5:23:6e:1f:ae:14:06:01:83:7b:e8:a9:ca:54:93:b5:75:
         1f:01:63:ff:d4:2b:29:40:12:bd:8a:8d:79:1b:e4:22:5f:d1:
         40:69:53:b5:07:92:2c:d8:de:5c:62:e4:d7:41:51:59:b9:bd:
         f6:aa:5f:f3:40:97:f6:a2:7a:54:5f:73:c0:dd:5f:5d:53:4f:
         29:ae:42:fe:fe:c3:62:cc:d2:df:9c:e6:f2:dc:7c:08:f6:56:
         03:be:c0:79:2f:45:ea:7c:6f:c2:86:88:5f:c7:12:e8:b6:ce:
         ff:c3:48:ff:43:c9:82:0f:bb:02:13:a3:7e:1d:54:ee:e5:3b:
         9e:a2:d1:00:b1:0d:34:b5:f3:de:83:8f:d6:68:d4:73:ee:f4:
         73:c3:1a:4b:68:82:c2:f5:7f:47:5a:8f:8a:bf:09:56:60:64:
         66:c6:61:81:8e:a9:8f:88:63:ea:f8:a4:13:53:a4:5d:db:36:
         e2:0e:bc:5e:49:11:83:1b:1f:c4:c3:c9:7f:d9:4f:64:e2:d9:
         d3:9e:68:bb:66:24:bb:86:54:ea:a9:b9:19:7d:60:bb:b2:04:
         8b:3b:db:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:53:23 2025 by rpki-client