Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/ed0f44e6-7923-3a7f-97f3-d38dab75644e.roa
File:                     ed0f44e6-7923-3a7f-97f3-d38dab75644e.roa (raw, json)
Hash identifier:          bhAUdetDgTwSSXKCC4g3/35DfvhuWD8aMMDu4/5j6a0=
Subject key identifier:   84:8A:D1:C2:5C:73:5A:27:3C:48:3E:75:1E:16:DD:56:4E:D9:3A:43
Certificate issuer:       /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
Certificate serial:       010D0C9F4328584AECC15180DBE14A9F82444300
Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/ed0f44e6-7923-3a7f-97f3-d38dab75644e.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     14340
IP address blocks:        2600:e807:11f1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:51:80:db:e1:4a:9f:82:44:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=5bac4528-acad-4180-8722-f382c3971843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:de:e3:14:37:39:b5:af:93:18:71:47:60:66:
                    95:18:48:d6:cf:f6:ae:cf:4a:da:6f:45:12:41:2f:
                    00:26:f6:4a:fd:e1:12:4d:55:6d:bb:6b:2f:aa:21:
                    6a:28:5b:fa:26:fa:b5:84:7b:16:78:31:4a:74:c4:
                    42:7d:e6:b7:49:58:9a:43:c1:f9:86:34:40:18:5a:
                    7f:1b:f1:5d:9f:73:db:62:cc:39:88:6f:24:96:f6:
                    be:46:5d:2d:c1:2d:3b:d0:ae:14:e4:7c:78:7c:63:
                    7c:e0:f9:01:33:11:67:d4:39:65:8b:da:2b:88:59:
                    d5:8a:bd:99:15:c8:c8:ec:3b:cb:2d:b5:af:3d:b0:
                    b9:ca:c7:3b:2a:20:e9:a9:9f:b7:12:10:92:39:0c:
                    8d:9c:3a:46:99:e1:88:d8:5a:fa:1b:e8:d0:f1:f5:
                    f8:13:90:4c:2f:2c:32:f2:76:a2:39:40:23:8b:33:
                    85:69:a7:1b:f1:8b:3d:db:63:3a:dc:01:7f:f1:5a:
                    db:9b:4a:02:8c:17:29:93:54:b7:d8:9c:67:8d:c7:
                    d9:26:a2:cb:5f:ac:52:c5:e4:53:81:23:31:41:9b:
                    be:b8:54:a5:59:ea:75:d2:e7:8f:69:81:6c:69:e3:
                    3b:61:21:fd:c6:83:f4:60:a0:d5:39:e2:4c:e1:50:
                    aa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8A:D1:C2:5C:73:5A:27:3C:48:3E:75:1E:16:DD:56:4E:D9:3A:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/ed0f44e6-7923-3a7f-97f3-d38dab75644e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl

            X509v3 Authority Key Identifier:
                keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:e807:11f1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ba:06:d0:8a:2d:a2:ca:ed:9d:63:60:16:68:a7:d5:53:d9:
         0e:35:a9:e3:3a:04:19:d6:e9:96:34:44:7e:0a:22:d0:d6:71:
         72:50:aa:e4:d9:ed:1b:e2:df:33:fb:ec:67:c2:b8:fa:95:3b:
         0e:3e:ec:65:09:fe:59:25:c6:97:5f:8b:7c:41:79:3c:2f:a0:
         27:83:b6:69:53:d3:6f:f2:82:f4:7f:1f:14:b2:b8:8b:a9:e0:
         09:1e:84:6d:f0:57:52:cf:e1:1f:fa:44:08:e8:9e:85:37:23:
         14:9f:30:3a:f5:fc:69:47:c6:2a:e8:36:d7:f9:44:91:88:46:
         c9:c9:ba:19:55:65:ae:d0:8b:dd:de:d8:bb:0f:09:02:a6:5c:
         b7:e6:71:da:7c:67:a3:2f:7e:75:87:3a:e9:15:61:69:47:65:
         03:93:ca:96:80:e6:80:e0:60:44:37:42:1e:72:42:25:5a:a4:
         4f:9e:2a:fa:bc:4f:ae:17:c2:b2:57:17:11:06:84:fd:c8:7c:
         d1:e1:70:46:48:28:65:7d:00:f9:93:26:1b:66:5d:2a:f7:a2:
         f9:1c:01:30:d9:6c:88:3b:43:ac:6f:f2:99:5f:59:88:14:e9:
         c9:70:fe:80:78:99:e8:c5:7d:75:fe:83:1c:be:52:c2:43:e3:
         ac:2f:66:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:53:37 2025 by rpki-client