Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/99d9220f-d777-3314-a61f-f30f5e9c3026.roa
File:                     99d9220f-d777-3314-a61f-f30f5e9c3026.roa (raw, json)
Hash identifier:          D0UTRcDqE4IEq+c9A2gftfHANQhbuto/P9T6ID1MBiA=
Subject key identifier:   EC:7F:7F:8C:14:C3:BA:E8:5B:07:CC:72:2B:9B:7F:13:E5:BD:BC:45
Certificate issuer:       /CN=17321389-82c8-40ad-969d-f355a789f579
Certificate serial:       010D0C9F4328584AECC14B02C3358BDA97177140
Authority key identifier: F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/99d9220f-d777-3314-a61f-f30f5e9c3026.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        2604:4f00:feed::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:4b:02:c3:35:8b:da:97:17:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17321389-82c8-40ad-969d-f355a789f579
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=09f6165a-a24e-4543-967a-0cfd1297c6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:88:67:2b:c0:4b:f8:46:3a:44:b0:e0:6e:96:
                    97:79:7d:a4:e2:37:7b:86:61:07:ea:e1:e2:8b:69:
                    e1:ed:c6:07:63:05:fc:3c:f2:1e:e4:d2:e6:58:4d:
                    c1:82:d5:f5:0d:ab:3b:23:a3:fa:26:2b:bc:34:1f:
                    31:1c:45:a1:b5:2d:90:b1:a4:9a:d7:78:23:9d:c2:
                    0f:50:74:9e:fc:c8:8b:77:c8:53:43:d2:c6:8a:fe:
                    1f:c8:97:80:0b:d9:29:b7:77:98:53:60:2f:85:5d:
                    8d:5c:22:81:fd:a4:ba:89:80:07:be:68:16:35:5c:
                    ca:a9:be:f2:c6:03:dd:41:78:fa:57:2d:c8:03:07:
                    bf:4a:fc:50:09:b4:ec:4b:2f:00:7d:9c:2e:1d:33:
                    88:53:87:fb:05:3c:29:20:e8:23:b7:c0:ce:cc:4e:
                    bb:30:a8:b9:53:a8:d9:bb:7f:62:a5:05:29:1b:b7:
                    9b:cf:9f:6e:6a:67:80:d1:6d:c3:e2:25:30:e9:5a:
                    78:4b:3f:de:65:32:fa:42:c3:c0:af:3b:8b:ff:58:
                    c3:89:c8:74:5e:80:c6:8f:f4:45:c5:08:6a:4a:e3:
                    9e:b1:40:cc:4b:ca:c2:1c:53:57:25:79:47:80:c1:
                    3d:45:98:c5:fe:46:68:8d:ee:36:74:0e:88:00:ea:
                    30:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7F:7F:8C:14:C3:BA:E8:5B:07:CC:72:2B:9B:7F:13:E5:BD:BC:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/99d9220f-d777-3314-a61f-f30f5e9c3026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl

            X509v3 Authority Key Identifier:
                keyid:F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4f00:feed::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:39:11:6e:d8:7c:d9:8e:5b:68:fc:26:d7:3d:11:42:99:22:
         67:ed:97:a3:8b:6a:10:a6:c5:fb:13:c4:96:25:93:37:64:81:
         04:70:03:0d:fa:79:4f:34:19:6d:6a:74:08:89:fb:b4:64:d9:
         34:ac:36:b4:05:bc:e8:8e:09:bf:d9:ef:00:65:03:8c:57:8b:
         70:b4:12:5a:e0:9b:26:fc:67:72:99:e9:4d:06:e0:7f:72:60:
         18:be:49:b3:ba:c1:c5:4d:34:ff:b7:d8:31:02:ce:fa:28:7c:
         cc:fd:44:a1:c6:63:d9:35:60:61:94:17:f7:f7:ee:1c:91:c0:
         95:9b:b4:c3:e9:1a:ac:a7:88:a8:2f:99:58:6d:75:f0:31:60:
         4c:6a:42:aa:93:f0:ca:53:d1:ee:81:2b:17:e7:5f:f9:33:f4:
         6f:ba:37:4e:bc:73:06:1c:c0:d6:40:cf:ad:e6:8d:69:3d:40:
         6f:fa:ee:99:7f:0c:73:11:43:d5:cc:1d:94:57:73:92:ce:e7:
         45:4f:3b:7f:76:da:e4:c3:43:08:90:a8:b9:8d:af:05:81:9b:
         00:75:0e:c3:69:ad:2a:36:fd:ee:76:4e:94:ed:d7:75:28:b3:
         25:a7:cf:a5:78:23:b0:65:04:bc:cf:ad:56:cb:fd:49:06:76:
         e0:16:85:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:49:39 2025 by rpki-client