Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dee88f5f-56a7-311a-b481-95eb3fb841c0.roa
File:                     dee88f5f-56a7-311a-b481-95eb3fb841c0.roa (raw, json)
Hash identifier:          +7J1a3rbRETooFYjamoiHdFLI+pLlIl64WDXyQFrSUw=
Subject key identifier:   9D:2A:35:AB:17:72:D8:A1:0A:20:BB:0E:07:86:D1:F9:CD:17:CA:75
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A71EB3EB787E6304FCFA1C180
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dee88f5f-56a7-311a-b481-95eb3fb841c0.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        2607:fe88:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:3e:b7:87:e6:30:4f:cf:a1:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=824228e3-e233-4168-8fd1-a57f2ba6af41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a5:32:77:e6:e7:53:74:3d:32:5d:11:d5:7f:
                    8b:37:0b:52:fa:d8:a2:6a:53:1f:e4:14:19:91:79:
                    bf:9d:16:89:a1:e2:97:05:44:ad:3f:61:b7:bb:64:
                    28:99:c8:b2:16:42:b7:d3:0e:50:90:85:37:79:34:
                    d5:b7:2a:92:b8:92:5d:45:22:77:5d:96:d0:7c:52:
                    f8:74:87:5f:0a:cb:a4:f5:86:ba:e1:83:3f:42:e9:
                    47:07:e7:9e:55:19:46:65:47:13:e6:50:b8:47:9b:
                    48:df:a5:7b:33:88:a8:aa:70:cc:08:1d:e4:16:2e:
                    fa:84:f0:f5:49:3d:01:d0:f9:14:8d:3e:17:e9:c9:
                    da:63:57:b6:56:0d:83:7a:db:af:16:c8:bd:bb:c8:
                    03:0b:63:85:53:dc:42:7d:51:03:ef:c9:75:a6:aa:
                    9c:52:74:90:7f:68:9b:c4:97:80:56:17:5b:6b:45:
                    3e:32:9b:bd:b6:ef:f4:b2:a3:ce:91:54:a3:2d:ea:
                    23:89:c2:08:b4:85:51:5b:d3:17:36:8b:69:38:dc:
                    29:77:db:ef:17:2a:ab:14:7d:10:11:92:63:27:18:
                    a3:e1:3b:be:0d:7b:66:08:ae:a7:13:d9:f5:8c:0a:
                    13:1f:35:09:19:a7:a7:80:a5:95:5b:4d:09:24:d8:
                    49:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2A:35:AB:17:72:D8:A1:0A:20:BB:0E:07:86:D1:F9:CD:17:CA:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dee88f5f-56a7-311a-b481-95eb3fb841c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe88:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:b9:5c:34:84:48:12:69:0e:f7:e6:a7:19:b9:27:28:59:6f:
         12:cd:49:64:d4:32:a7:43:bf:17:c5:70:74:74:ba:06:a1:86:
         d0:2b:8e:74:7e:82:ed:67:61:a8:4f:1c:ab:70:10:09:03:2d:
         eb:7e:f4:6f:05:03:13:ff:ff:be:61:e7:4d:00:f2:79:8d:f6:
         29:d7:f6:7e:10:f5:dd:58:54:cf:01:1e:6c:51:30:3b:51:89:
         94:b7:5c:ac:79:f5:b1:22:5d:76:f8:02:9b:1f:07:38:26:2b:
         50:59:c8:eb:68:0d:ff:0e:cc:7a:23:79:86:6b:0e:08:43:7f:
         e2:5f:16:a9:05:f3:35:f9:c7:06:8f:ba:41:88:66:9f:29:70:
         79:68:35:d7:bf:76:d3:bf:ab:49:c8:00:5f:86:b7:16:c2:71:
         3c:48:ce:c6:af:34:51:3b:60:ed:92:18:67:8d:78:a9:48:06:
         2f:95:a6:dc:b6:12:96:1b:4e:04:0b:c5:97:6d:89:1a:ec:f2:
         40:80:0a:9e:f7:78:9e:b7:c1:09:45:0e:c0:30:ad:7a:4f:c6:
         07:7e:48:18:60:9e:60:1e:aa:ec:1d:9b:32:55:af:3a:bc:e3:
         61:f9:f8:b5:33:38:ef:24:c2:86:e3:61:68:34:da:97:d4:30:
         26:13:80:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:23:50 2025 by rpki-client