Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/0cac666c-efe7-384a-95e7-52d5993c915a.roa
File:                     0cac666c-efe7-384a-95e7-52d5993c915a.roa (raw, json)
Hash identifier:          +zEhRfSjz3tIQIeR4y9GnhKx+V/sIboxt83iWLkXe0k=
Subject key identifier:   11:AA:AD:98:A2:CB:4A:37:34:AA:8E:64:22:C2:B1:12:0F:63:10:27
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584A896C8D6DA0296E7AE1476C80
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/0cac666c-efe7-384a-95e7-52d5993c915a.roa
Signing time:             Wed 16 Jul 2025 11:05:13 +0000
ROA not before:           Wed 16 Jul 2025 11:05:13 +0000
ROA not after:            Tue 14 Oct 2025 11:05:13 +0000
asID:                     216321
IP address blocks:        2605:dd40:2800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:6c:8d:6d:a0:29:6e:7a:e1:47:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Jul 16 11:05:13 2025 GMT
            Not After : Oct 14 11:05:13 2025 GMT
        Subject: CN=119a837b-7f40-434c-88cf-6a26d09d8d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8d:42:50:ca:8a:02:fe:4e:ad:57:08:b1:41:
                    67:44:4f:3f:5b:18:ea:b3:23:9b:69:4d:45:9a:19:
                    1a:34:57:51:bc:79:e9:f0:2f:fd:6a:ca:17:75:0c:
                    a5:a2:09:a1:81:23:b2:3e:c7:45:66:26:33:5b:12:
                    e4:5d:1d:00:06:28:e4:08:dc:06:e8:52:8a:e9:69:
                    81:d9:3a:05:3b:b1:e8:65:71:e9:8d:3f:df:2f:04:
                    1c:98:10:e3:4f:b4:12:f7:29:d0:76:6b:8c:f1:ed:
                    f9:de:39:3c:93:37:7c:45:72:39:4e:92:15:9b:9f:
                    92:b6:6f:5d:51:ef:74:c1:85:19:dc:f7:23:b2:69:
                    3b:c8:34:d7:99:59:6d:ab:57:7d:fc:ce:fe:1f:7a:
                    a4:73:a2:86:33:af:f1:f6:00:2b:e3:a7:31:11:7c:
                    0d:aa:b5:41:3f:c6:1f:f7:0b:2c:ee:81:c3:92:80:
                    d1:71:37:46:35:ac:f3:80:0a:af:8b:fc:73:9b:14:
                    59:df:c8:20:f4:10:50:b4:86:d4:30:d0:34:79:08:
                    9d:f8:1d:53:db:65:36:c4:f8:b6:d3:76:67:46:ac:
                    a1:4f:83:2e:87:d1:e4:0a:99:a7:dd:01:b1:4c:87:
                    a7:b1:c0:18:2f:6e:c4:0a:23:5b:aa:ac:b1:e1:7d:
                    28:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AA:AD:98:A2:CB:4A:37:34:AA:8E:64:22:C2:B1:12:0F:63:10:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/0cac666c-efe7-384a-95e7-52d5993c915a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:2800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:06:da:61:77:86:59:60:dd:76:35:70:2b:a0:79:b4:61:71:
         86:9d:61:33:18:34:ec:5f:96:9d:db:26:34:82:97:a2:4d:04:
         e6:99:2c:d7:56:aa:40:5c:51:3d:06:2f:5d:33:33:20:0d:aa:
         18:57:28:42:9f:f3:07:46:99:d3:16:77:e3:06:d1:c2:b7:b8:
         51:36:fa:37:de:15:1b:ce:89:4a:5c:35:05:50:d7:f6:e5:ae:
         b2:a2:88:99:c2:f1:7a:a0:1f:e3:38:da:22:6b:c0:43:c0:0f:
         e6:07:07:96:73:f7:5a:7d:ec:0a:39:4d:05:9d:00:dd:1e:fd:
         c5:94:55:74:e4:8a:f5:2a:85:4c:eb:0b:68:55:5a:4a:a1:fe:
         b0:8e:7d:f3:ad:bf:56:f3:62:5f:3f:4e:97:51:45:4d:85:2b:
         13:77:97:e1:14:87:e2:36:da:87:92:44:ac:11:d1:d2:95:57:
         c8:82:85:db:97:34:83:0e:ad:d5:2a:a1:c3:55:d4:0d:77:ff:
         f2:7e:05:31:a5:55:52:3c:84:4c:fe:fc:8f:ff:5d:be:02:37:
         7a:87:db:21:d8:34:14:f0:40:e6:19:31:b7:69:82:36:61:0e:
         6e:5a:3a:45:ab:b0:5b:31:b9:8b:cd:0c:04:ca:32:ef:ed:d0:
         96:d0:69:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:46:56 2025 by rpki-client