Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9effc2ce-f038-3fa6-b282-1b8d0c4133e8.roa
File:                     9effc2ce-f038-3fa6-b282-1b8d0c4133e8.roa (raw, json)
Hash identifier:          K44HsXuM+1M8s8Qlk2RNkeNBW76w6EM5UYB7S/XuDp0=
Subject key identifier:   F5:33:50:FC:91:3F:BB:59:A0:6D:BF:35:7D:FC:5A:25:73:A8:FF:E9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD86652A6B425C44EF8BA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9effc2ce-f038-3fa6-b282-1b8d0c4133e8.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        2603:3016:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:86:65:2a:6b:42:5c:44:ef:8b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=33d6ac66-4a54-40e6-bfe6-5499350ff163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:8e:ee:7c:27:5d:10:80:fe:64:ef:8e:09:
                    f3:d1:87:ec:5b:81:d5:2d:d3:5f:95:85:2a:9d:81:
                    a4:db:24:fe:fe:d5:38:b6:50:28:96:f8:c0:7b:5b:
                    32:a0:73:f0:65:85:eb:d0:22:8c:3e:5f:d2:ab:ff:
                    7e:c4:f2:06:d5:11:6a:57:e8:ca:3e:5c:06:de:26:
                    d0:16:8d:cb:c1:35:7f:e2:ab:d4:4e:35:90:b2:54:
                    7a:a1:55:ea:3f:fb:e9:0a:94:62:88:a9:f6:83:31:
                    52:78:bb:b2:78:f5:af:27:cb:65:a1:d4:37:55:91:
                    89:24:b8:1f:ad:55:be:47:ee:58:8d:5f:14:e7:53:
                    8e:bd:07:84:9e:77:92:b3:ec:c3:a3:59:14:34:c7:
                    f6:14:f4:1d:26:2b:f0:97:70:43:8e:e4:1b:c8:b9:
                    f3:f4:0b:8b:f7:e5:88:80:8b:d5:ca:28:41:e1:64:
                    83:e2:a3:ff:2d:c1:0a:48:27:94:66:73:6b:30:b1:
                    45:aa:65:01:0e:62:6f:bb:53:9d:73:46:27:ad:58:
                    e2:e3:3c:84:f9:a1:de:c2:e8:78:62:76:ed:4f:23:
                    fc:03:d7:e8:f3:fc:7d:e8:79:a4:d0:aa:54:ef:3d:
                    5a:91:b4:dd:24:60:37:18:31:a6:0f:c0:7b:64:56:
                    fc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:33:50:FC:91:3F:BB:59:A0:6D:BF:35:7D:FC:5A:25:73:A8:FF:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9effc2ce-f038-3fa6-b282-1b8d0c4133e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3016:700::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:6b:e1:67:14:1f:a6:46:be:4f:e5:1f:7e:5f:07:eb:5f:42:
         7c:59:cd:ea:05:be:32:76:09:de:90:ab:93:52:a4:ab:ba:78:
         bd:5a:9f:78:08:69:da:64:62:9a:2b:17:23:9c:74:bc:73:83:
         7c:0b:bd:9e:bd:65:58:9f:1c:55:fc:8b:51:8b:cc:09:85:ac:
         22:0c:49:58:d8:5c:2f:85:bb:63:e4:3f:17:96:8d:b9:11:48:
         81:cb:87:4e:a4:bc:e8:b1:3c:fc:9e:e0:28:46:a6:9e:b3:c8:
         0f:9a:b6:21:b1:68:43:c1:a9:0e:83:85:42:cb:37:00:02:55:
         ee:c2:5a:b3:21:36:ca:ab:74:d8:cd:28:62:e7:69:c6:f7:04:
         03:91:6b:54:a4:72:bb:a2:ca:dd:5e:2e:cc:0a:4f:f9:e9:04:
         d7:da:e5:81:78:f7:32:73:b2:8b:11:64:a9:a5:68:89:7f:a6:
         6d:87:f2:09:90:4f:a9:ee:23:d2:a8:af:1f:ab:0c:66:62:f7:
         59:8f:52:e0:cb:a9:1a:4a:86:19:be:ec:5c:80:d6:7d:70:1c:
         7f:29:9b:3c:7f:7d:6f:07:11:56:70:97:10:bd:52:87:46:19:
         36:4e:0a:4f:3a:c1:d3:95:8c:bf:d3:f5:7a:37:78:09:1f:be:
         0c:f2:ad:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:43:16 2025 by rpki-client