Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/1efcf219-961c-32ab-b8e4-ef4be4833a1e.roa
File:                     1efcf219-961c-32ab-b8e4-ef4be4833a1e.roa (raw, json)
Hash identifier:          e4goj0QwJojR4mxjRHoB/FExrGH/FztulZrpjt+dtA8=
Subject key identifier:   58:DB:C0:FE:0B:F6:A0:6F:B7:4D:C5:53:0E:29:12:36:AD:62:4F:DE
Certificate issuer:       /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Certificate serial:       010D0C9F4328584ACA351F3BDA015C6677E94B00
Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/1efcf219-961c-32ab-b8e4-ef4be4833a1e.roa
Signing time:             Fri 08 Aug 2025 16:01:05 +0000
ROA not before:           Fri 08 Aug 2025 16:01:05 +0000
ROA not after:            Thu 06 Nov 2025 17:01:05 +0000
asID:                     32806
IP address blocks:        2604:9900:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ca:35:1f:3b:da:01:5c:66:77:e9:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
        Validity
            Not Before: Aug  8 16:01:05 2025 GMT
            Not After : Nov  6 17:01:05 2025 GMT
        Subject: CN=a325bad6-4fa1-4459-8d38-9b62097cbb1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:04:e7:59:21:8f:e0:6b:6b:38:75:7e:e5:07:
                    7b:e1:75:53:3c:b4:62:a0:e9:20:2a:e0:f9:63:f0:
                    78:88:f9:cd:50:94:76:bd:92:75:6d:a7:cc:26:3e:
                    87:13:e3:84:e3:1e:a6:55:ea:36:00:39:19:80:d8:
                    50:97:be:b8:9a:81:95:a6:a4:c3:b3:c4:66:e8:a9:
                    3d:b2:71:20:2e:b1:4a:d0:2d:5a:ec:78:a3:a0:06:
                    2c:f3:59:8b:c9:7d:00:84:8a:00:5e:4a:4e:70:84:
                    2b:d3:90:65:03:0c:f7:9c:07:98:94:31:44:aa:0d:
                    16:a6:2c:7c:21:ac:b0:4f:f0:4c:2f:e9:74:68:6e:
                    22:65:f5:94:b2:84:64:44:29:db:85:1d:ee:c5:30:
                    66:73:02:e0:be:19:73:4f:f5:36:00:ed:95:9c:87:
                    d5:50:50:27:ae:1d:ac:0f:35:64:02:a4:ab:e1:5a:
                    87:dc:9c:1d:9d:d5:a7:c5:49:ef:eb:b5:77:d9:2a:
                    e4:ac:c8:46:44:e4:f8:eb:26:00:3e:be:29:31:83:
                    a5:17:7a:78:da:f7:6c:5d:be:65:87:92:e0:82:7f:
                    f6:b0:52:fb:dd:fc:ae:1a:79:ff:d8:3d:a6:b2:81:
                    fa:59:3b:be:04:bb:a6:67:74:f4:4e:0d:34:52:41:
                    0c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DB:C0:FE:0B:F6:A0:6F:B7:4D:C5:53:0E:29:12:36:AD:62:4F:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/1efcf219-961c-32ab-b8e4-ef4be4833a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl

            X509v3 Authority Key Identifier:
                keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9900:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:27:a7:62:01:94:91:ed:a6:14:1b:ff:b9:8c:81:b2:bd:fa:
         3c:f7:2f:c1:f6:63:13:72:e5:ca:6d:b2:86:ad:5c:e8:cd:64:
         e2:cf:b9:26:a7:f4:1c:5a:19:30:af:0d:a9:b1:fd:d8:a7:af:
         c5:16:10:6f:9b:00:61:8c:02:bd:16:8c:fe:be:31:54:25:9d:
         34:76:8d:a7:cb:99:26:77:c3:76:f4:79:0a:58:c7:b2:e8:8c:
         b9:79:2f:31:e7:b9:fe:6b:7a:c2:0a:ad:3b:93:8b:35:21:86:
         4c:53:1d:b3:80:15:aa:16:86:a7:62:28:97:0a:c3:96:66:3b:
         0e:cc:d2:d6:1c:31:30:0e:49:b8:7d:5e:96:d0:03:ae:2d:42:
         08:98:5a:23:7d:cd:50:72:d4:6b:af:7c:17:4a:09:9b:29:18:
         d2:ad:a5:10:77:d9:ce:ae:27:df:4f:d9:71:38:d1:5e:65:a4:
         22:f0:db:f0:0c:78:90:7e:b5:4c:e3:32:bf:47:67:81:da:a0:
         79:02:30:af:db:be:b9:e4:fd:06:8b:c0:83:af:b7:e0:16:d8:
         36:9f:f4:41:32:c4:ff:5d:a3:80:64:aa:0c:a0:ff:cd:8a:c4:
         16:67:b4:80:9e:47:bb:95:44:a7:24:cc:b0:a9:62:9c:8e:82:
         97:d9:6e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:49:31 2025 by rpki-client