Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/8b2f032e-f8d1-3a0a-b515-26a36d68f928.roa
File:                     8b2f032e-f8d1-3a0a-b515-26a36d68f928.roa (raw, json)
Hash identifier:          UFtglIr/sRb9Q7/3vWD9CtoFHiRoiMayHcEPialY5i8=
Subject key identifier:   72:BB:39:74:01:42:C2:63:7B:83:AD:E3:79:5C:97:E4:ED:A2:7B:62
Certificate issuer:       /CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3
Certificate serial:       010D0C9F4328584ADC00F90BEC2808B000BC5200
Authority key identifier: 1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/8b2f032e-f8d1-3a0a-b515-26a36d68f928.roa
Signing time:             Fri 15 Aug 2025 01:00:32 +0000
ROA not before:           Fri 15 Aug 2025 01:00:32 +0000
ROA not after:            Thu 13 Nov 2025 02:00:32 +0000
asID:                     30083
IP address blocks:        2605:de00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dc:00:f9:0b:ec:28:08:b0:00:bc:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3
        Validity
            Not Before: Aug 15 01:00:32 2025 GMT
            Not After : Nov 13 02:00:32 2025 GMT
        Subject: CN=802ae301-0bcd-4daf-975b-2c5685497b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5d:52:25:7c:2d:a5:b4:ec:85:c8:64:78:1e:
                    a8:23:05:48:a3:ea:ef:ac:93:99:16:3c:8e:a2:65:
                    0f:62:72:0f:76:1f:b8:b4:d1:3e:fe:3c:b2:65:68:
                    f9:2a:60:ac:7d:02:70:f9:2c:df:0f:15:34:76:e5:
                    f6:23:e7:02:fd:7f:af:32:8e:ed:48:54:3e:b5:93:
                    97:be:5f:64:73:bd:a0:37:0c:e1:62:e7:60:61:1b:
                    f4:93:d0:88:14:81:11:c7:05:c1:f5:0d:29:53:a4:
                    c7:04:d6:21:f7:59:85:e4:48:b5:64:e8:2e:03:18:
                    5a:c0:96:ea:46:3f:dc:ba:c4:64:26:d0:bd:ee:f9:
                    ea:ad:22:c2:9a:c7:94:4e:d5:9b:ab:83:a2:ae:d5:
                    7c:e7:8c:07:d2:b7:1c:23:04:d6:34:9a:d9:15:d8:
                    a3:70:4e:69:9b:7b:04:31:ef:02:e8:92:1d:e4:61:
                    c6:5e:7b:ea:ad:bf:11:2b:35:87:26:26:46:ff:6b:
                    75:18:e4:60:c9:a3:dd:53:65:da:da:0a:93:66:9e:
                    d1:2f:19:79:04:6a:61:97:be:6a:44:01:b1:b9:d0:
                    fd:d6:5f:96:b2:26:ba:a2:2f:80:4a:04:36:b1:42:
                    96:4d:ea:52:6b:7e:1d:a8:45:89:38:e4:7b:9d:cb:
                    e1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BB:39:74:01:42:C2:63:7B:83:AD:E3:79:5C:97:E4:ED:A2:7B:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/8b2f032e-f8d1-3a0a-b515-26a36d68f928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl

            X509v3 Authority Key Identifier:
                keyid:1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:de00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:72:cd:6f:4d:a6:cb:3f:a8:6c:78:cf:47:01:e2:5e:13:36:
         68:f7:d2:2c:7b:92:61:ae:72:d0:62:4e:31:01:00:a7:4a:d8:
         af:f3:fd:80:9f:47:58:ce:2e:d0:2d:1c:9a:59:ba:f1:82:dc:
         08:94:97:be:18:53:9b:e9:0b:36:37:3e:ed:ef:d3:2d:c0:b4:
         c3:5d:6c:54:a8:1e:52:2f:43:7c:52:42:bd:d5:1d:96:88:ca:
         07:a7:80:c7:fd:f4:66:d7:f1:b9:5a:bb:8e:5c:2c:04:13:89:
         4d:c0:23:9a:90:55:f9:c7:b5:7f:f8:4e:9f:05:08:78:44:c5:
         5c:0d:b8:f4:4b:f5:59:c3:9d:88:a1:ab:39:f7:d4:fb:8f:88:
         1d:2d:b4:7d:7e:8f:b4:28:d9:c1:8c:99:dc:ec:0f:b9:d6:40:
         f1:a6:55:81:4a:b0:36:97:14:54:3b:fe:7a:ff:53:4c:57:ae:
         85:04:cb:1d:b9:06:09:cb:b9:e8:eb:53:25:0d:3e:57:f3:53:
         a7:82:9a:3f:2b:59:28:1c:64:39:e5:67:f9:64:03:04:d8:3d:
         e9:9c:2d:85:2e:24:d4:f8:dc:3e:b2:7d:82:76:17:80:22:5f:
         0d:7b:e3:d3:d3:f5:92:ef:dc:9a:0e:3c:e8:99:59:a2:38:13:
         f0:27:47:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:30:22 2025 by rpki-client