Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/0eb699f0-d26e-339c-8d33-655398830750.roa
File:                     0eb699f0-d26e-339c-8d33-655398830750.roa (raw, json)
Hash identifier:          V8tqSr5DhzI1h58XYPbJZj4lW20ep0U4zvFnnGx480Q=
Subject key identifier:   C5:8E:DF:E4:95:5D:D0:F5:0C:E5:72:7A:53:FE:90:95:01:08:9E:52
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584AE461135C35318EFB291D5D00
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/0eb699f0-d26e-339c-8d33-655398830750.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     211481
IP address blocks:        2605:640f:bcd7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:13:5c:35:31:8e:fb:29:1d:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=786773b2-efdd-4ab3-981a-34091c1d9151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6e:47:ee:9e:93:f0:e7:3d:f6:da:be:b9:4b:
                    23:42:37:70:91:72:f3:3f:fa:91:07:8a:5c:56:f6:
                    66:c9:2c:16:1c:86:01:20:d6:2a:64:16:6f:ee:b0:
                    2d:0b:5c:bf:d4:09:8d:ba:40:7f:f7:d3:ae:f3:b1:
                    35:74:09:87:52:52:31:2b:9e:cf:34:7e:c3:47:e0:
                    b1:a1:67:4c:93:a0:08:b9:0e:63:92:e2:b0:fc:be:
                    69:e5:31:da:a9:c4:84:41:c3:bf:8c:c2:4b:35:bb:
                    00:3c:21:01:4a:08:bd:a6:9f:b0:bc:1d:bf:49:fb:
                    44:86:7b:a9:4a:9c:68:04:ab:f8:c9:2c:0a:2f:34:
                    4c:42:21:95:af:71:f1:ef:a9:58:b0:e1:a1:24:c9:
                    64:88:e6:c3:83:c3:d1:87:cd:7b:1f:dc:e0:51:c2:
                    f5:83:1c:32:b3:51:81:1d:ac:b3:6a:28:fc:71:3c:
                    07:db:f2:73:bc:33:57:d0:ad:e8:2f:11:95:b6:3f:
                    94:79:b4:f2:de:b6:88:c9:f4:38:22:27:c5:47:78:
                    bb:0f:d9:00:7c:3e:2c:7c:f7:a9:70:b7:e8:de:df:
                    7e:f6:b4:90:cf:48:d5:04:b6:f7:40:13:d6:34:6d:
                    5a:29:59:e2:b4:d8:e2:7e:c3:5a:50:81:99:52:ae:
                    e5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8E:DF:E4:95:5D:D0:F5:0C:E5:72:7A:53:FE:90:95:01:08:9E:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/0eb699f0-d26e-339c-8d33-655398830750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:640f:bcd7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:91:43:38:a4:45:e1:95:e9:7e:7d:59:89:79:d0:d3:92:22:
         2a:75:54:e0:97:79:66:7f:38:1e:63:6b:5c:90:b2:5c:2c:82:
         3c:a6:e8:b5:91:18:27:85:a6:51:06:7e:e3:5a:cd:ad:4f:91:
         bc:77:5a:47:99:71:12:0c:96:45:7e:5b:27:f9:96:5b:2d:b8:
         b8:7f:cb:02:29:5b:90:97:4a:45:76:7a:5b:1d:e1:8c:e0:0d:
         0b:57:28:b2:b9:17:74:01:56:66:27:a4:16:09:4f:89:81:a3:
         cc:91:30:da:76:4f:e4:2e:90:c9:cd:bc:b3:f9:de:99:0f:76:
         b9:8b:ca:76:83:e6:03:f9:2e:53:65:0d:ba:72:02:c6:23:0f:
         52:bb:66:41:15:63:f6:23:1c:19:7d:af:92:f4:db:60:39:63:
         8f:06:67:f3:be:0a:b4:ac:43:46:cc:fc:7b:f0:8d:25:b0:bd:
         8b:e5:6a:3a:bb:ab:99:53:a6:97:b1:e1:19:35:90:90:d1:f6:
         a7:7a:ae:3d:0a:ab:5e:dc:bc:2a:3b:28:61:43:f8:82:dd:17:
         6e:c5:a0:1d:a2:a0:19:07:84:01:e8:31:6c:38:c4:98:df:67:
         bc:ee:70:0b:52:ff:4c:38:84:10:6b:07:49:4e:43:87:a9:30:
         f3:90:f7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:20:43 2025 by rpki-client