Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b7e20f29-d5d5-32f8-8f5b-772e851d0307.roa
File:                     b7e20f29-d5d5-32f8-8f5b-772e851d0307.roa (raw, json)
Hash identifier:          0pSG68FSftBK/28dDduzekVRjKyCV/atmobji3C8npc=
Subject key identifier:   4B:90:C8:EA:B3:D8:DF:BB:0D:E6:0D:A8:FD:61:70:57:2E:E5:31:5B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7085EEA9CE8DAB57E9140880
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b7e20f29-d5d5-32f8-8f5b-772e851d0307.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     7861
IP address blocks:        2001:56b:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:ee:a9:ce:8d:ab:57:e9:14:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=c8c6ea4c-245d-4eba-83b4-451a31cbbbb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:68:32:a8:cd:f0:6b:57:e8:5f:d3:77:de:9e:
                    05:7b:05:57:ed:8d:d5:ff:93:e3:3f:64:fa:a9:d7:
                    90:e0:b9:2b:1d:d1:62:82:61:11:55:f3:07:2b:6f:
                    c2:0a:15:d6:a0:8f:d1:dc:df:c6:5d:90:7e:92:92:
                    24:48:d7:9a:f2:15:36:8c:f5:64:8c:f4:16:90:fc:
                    83:97:b8:81:3a:0b:56:b2:e2:cb:81:b5:2f:b2:4a:
                    47:75:31:67:77:20:07:74:70:3b:fb:65:e8:67:7c:
                    fe:21:36:db:79:fa:8b:82:28:b0:1e:55:2f:80:23:
                    2e:b2:6f:48:04:35:59:13:ac:fb:8a:f1:0f:37:d0:
                    b8:24:67:5e:b4:6a:a0:15:8b:b5:72:2b:2b:78:b2:
                    5b:6c:1a:46:d2:39:04:21:64:5a:0a:cd:67:f7:76:
                    0b:09:05:a8:22:a0:54:0d:81:1c:eb:77:03:49:4e:
                    8a:eb:c1:b2:fd:1e:9e:fa:a2:93:8d:2b:e9:ad:c7:
                    98:f6:d6:f7:47:b0:6c:3c:59:ce:a7:07:a2:3b:0e:
                    99:26:28:c1:1a:c1:67:5d:07:27:49:ee:f5:50:f0:
                    51:bc:e0:57:d5:e1:29:66:c3:86:d6:a0:c4:6e:61:
                    60:26:9f:3e:2f:04:03:3a:e1:94:00:11:f0:c0:b3:
                    a0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:90:C8:EA:B3:D8:DF:BB:0D:E6:0D:A8:FD:61:70:57:2E:E5:31:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b7e20f29-d5d5-32f8-8f5b-772e851d0307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:c5:f9:a9:23:c1:ae:4d:f9:fc:41:24:e0:8f:da:c5:6e:84:
         8e:be:c8:48:a3:17:db:cf:e7:8b:66:01:7d:23:b7:c8:e9:cb:
         6d:a0:31:15:aa:45:fd:72:b2:b5:12:52:4c:58:e7:67:b0:99:
         bf:14:81:38:99:76:c6:0c:b1:67:94:ed:ef:54:52:88:07:37:
         8c:8a:7e:6f:09:ab:2f:a7:df:dc:49:de:34:34:4e:4e:84:7c:
         b8:46:e0:8b:75:82:65:63:e1:48:10:7a:2f:0c:da:ce:6e:37:
         12:f6:c4:dc:68:93:8b:b8:f2:50:f9:51:da:ac:23:57:c7:0b:
         2b:2c:34:12:c1:1c:3b:aa:3c:8a:09:e8:8f:09:47:ba:e7:57:
         61:0f:26:32:14:95:7c:a0:44:d0:2c:e5:2a:c5:9d:98:9b:2a:
         53:fb:a9:a0:dc:ee:66:74:57:98:90:1d:34:9e:67:de:a4:9d:
         8b:fd:d2:d5:17:19:78:4d:e3:3a:f0:09:b6:aa:47:81:52:4c:
         ad:80:ae:df:ad:8e:db:0f:3b:4d:18:b8:88:e5:fc:eb:80:d1:
         fa:8a:69:8a:39:cd:4b:08:fe:57:5d:55:9b:76:a7:78:f7:e2:
         31:0c:fe:ec:7d:ed:d4:cb:37:93:30:0c:a9:47:b4:bd:9c:41:
         58:b5:7f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:38:33 2025 by rpki-client