Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/cfeb9df8-cf85-3c80-8f83-0c3c26f94510.roa
File:                     cfeb9df8-cf85-3c80-8f83-0c3c26f94510.roa (raw, json)
Hash identifier:          5KXhtvftH+F3lnIDdzHnKZjQS6XtYh0HSUpjlBYRrqg=
Subject key identifier:   0E:23:79:9A:3B:45:84:B5:5E:FD:64:17:7E:E3:91:3E:91:DF:72:6C
Certificate issuer:       /CN=b927dc15-9316-467a-b50d-d6b361478436
Certificate serial:       010D0C9F4328584AECC1523ACE0ED45652FCA100
Authority key identifier: 9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/cfeb9df8-cf85-3c80-8f83-0c3c26f94510.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     2901
IP address blocks:        2605:800::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:52:3a:ce:0e:d4:56:52:fc:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b927dc15-9316-467a-b50d-d6b361478436
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=77aed396-0e29-45ce-99ad-ccfea634aca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:46:3c:e9:ff:66:8c:92:e7:61:3f:fa:37:54:
                    71:0a:c0:4e:e1:16:2e:c1:7c:0a:04:ac:a7:7f:b3:
                    67:0a:25:03:f4:53:5f:c3:2a:8d:b3:e4:59:fa:a3:
                    8e:d0:20:23:f1:e0:71:4f:da:82:0d:75:bf:7e:c1:
                    d9:aa:f2:5f:45:90:5f:ee:a6:e2:d4:d1:9b:a9:b3:
                    ec:49:83:24:af:28:2a:68:81:b2:8b:cb:a2:29:85:
                    3f:29:c4:b4:30:80:f7:c8:00:18:bf:5a:0b:7e:a1:
                    c3:51:57:fb:a4:1d:92:22:bf:c3:08:3a:fd:04:3c:
                    91:d1:a5:c7:f0:e4:e6:6d:72:c0:fe:71:31:42:49:
                    d4:c5:50:21:e3:15:da:ff:e9:ac:86:0e:70:c5:e0:
                    fd:40:d3:2f:9d:91:6b:31:0d:9c:54:75:96:53:37:
                    fd:f6:ab:31:30:78:e1:e0:4b:bd:4b:59:11:26:ba:
                    40:9a:2c:e8:2f:63:a5:cd:1d:98:f8:56:ce:9a:31:
                    c4:ba:20:ca:86:6c:1c:6a:36:a7:0d:92:5f:b7:7f:
                    a3:04:1a:5f:c1:97:1a:84:ac:e5:80:40:d6:eb:a8:
                    57:88:ad:53:1d:5e:8f:f6:1d:c7:74:b3:5f:4b:08:
                    38:79:47:3c:af:0e:68:30:0e:a1:bd:28:c8:dc:bb:
                    76:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:23:79:9A:3B:45:84:B5:5E:FD:64:17:7E:E3:91:3E:91:DF:72:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/cfeb9df8-cf85-3c80-8f83-0c3c26f94510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.crl

            X509v3 Authority Key Identifier:
                keyid:9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:88:15:d6:9a:59:b0:37:7e:2a:6a:0d:82:4b:a7:66:a8:aa:
         3a:bd:10:c6:72:38:ef:d8:4c:f8:73:ba:c4:e4:9c:54:cb:11:
         08:a9:77:35:62:a9:69:d5:a5:08:bf:f7:ff:b6:e0:63:f0:24:
         6c:ff:a0:fd:74:8a:14:e9:ab:c3:a2:66:85:c2:d5:47:15:f6:
         1e:16:4c:8f:e6:74:49:86:14:8a:72:e3:64:64:b5:62:b6:53:
         e0:8d:19:72:4f:90:9c:df:8a:ed:53:ce:b8:e4:51:ba:62:c2:
         eb:77:75:63:47:a9:58:99:c0:97:18:57:bf:92:bd:f7:b4:c3:
         d5:52:97:0e:0b:83:ea:a3:e7:a4:5c:aa:d4:97:cf:da:24:4d:
         f2:ee:3a:f9:a3:0d:10:54:a9:a2:28:81:25:f2:48:61:22:01:
         e0:2c:1f:80:47:87:0d:fd:59:aa:59:1c:99:6f:93:33:c4:57:
         23:13:73:62:7a:cf:39:5f:b4:2b:f4:7e:32:d4:bc:05:f2:36:
         79:03:4b:97:35:57:4b:31:cc:a5:b5:4e:ab:1b:ef:a4:b9:e7:
         97:2c:35:1e:59:08:4b:10:6c:7a:c5:84:5c:c3:1f:3f:1b:1b:
         68:5c:a8:21:20:ab:45:03:0a:f4:e5:e3:86:60:6b:a8:2e:8b:
         a7:6f:3a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:36:30 2025 by rpki-client