Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e5bb2ee4-efc4-3ffb-92c7-8cd872982229.roa
File:                     e5bb2ee4-efc4-3ffb-92c7-8cd872982229.roa (raw, json)
Hash identifier:          4XfuKHwoEqDEalvdA63nSrjaE0yzPCv54P+mqDU2qBQ=
Subject key identifier:   B8:38:34:5B:BD:74:B3:23:C9:E7:89:F7:B1:F5:23:84:EE:D3:E1:2F
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A71EB3E86BCCCA11048BA67C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e5bb2ee4-efc4-3ffb-92c7-8cd872982229.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        2607:fe88:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:3e:86:bc:cc:a1:10:48:ba:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=6cb3f6f2-c561-4ced-88fa-f4eb4af3f604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:17:7e:fc:8f:d8:56:e3:da:d0:7d:16:a2:95:
                    7f:48:b2:da:68:ba:f9:8c:52:16:9f:02:ba:54:54:
                    90:0c:a4:a1:dc:d7:30:b1:2f:ce:d6:ef:97:f0:a0:
                    0d:6a:14:b5:cb:92:61:90:15:7b:2d:2f:53:56:dc:
                    28:8b:6f:3b:0d:88:96:7b:a7:a1:bc:03:c1:a1:73:
                    34:b2:37:2d:04:4e:f3:a2:1b:7c:67:8e:a6:11:0a:
                    39:8d:83:90:a3:60:0a:72:c6:42:40:26:3c:c6:cc:
                    0e:2f:2c:3d:18:4f:ef:6d:0d:e4:10:c6:34:22:d8:
                    b2:67:d1:36:c1:53:da:ce:bb:8c:63:6c:6e:65:d4:
                    ec:82:3f:23:bf:e0:bd:60:99:05:bb:b0:8a:c2:b6:
                    26:f0:b0:95:41:21:00:2a:38:53:65:60:bd:49:38:
                    90:00:2f:e6:e8:fe:0c:16:73:23:72:e6:c3:fb:02:
                    00:3c:69:7a:f9:04:aa:1e:6e:90:8b:38:1d:eb:ca:
                    4c:6f:c6:f1:32:29:69:56:c4:c5:94:a0:a5:8e:a1:
                    a3:60:04:a8:b9:ed:2e:2d:a7:63:64:fe:ae:32:e7:
                    03:63:c4:8d:8d:8d:52:50:04:52:4e:30:6b:c2:01:
                    75:f9:de:06:ea:3d:f6:20:f3:81:62:11:82:f8:59:
                    c2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:38:34:5B:BD:74:B3:23:C9:E7:89:F7:B1:F5:23:84:EE:D3:E1:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e5bb2ee4-efc4-3ffb-92c7-8cd872982229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe88:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:ad:5b:fc:c8:eb:5f:d7:38:64:7d:ad:14:ca:c5:b3:f0:08:
         42:bb:3f:2e:38:22:0e:02:02:0f:85:bb:04:a3:8b:84:90:0c:
         93:9f:e5:53:04:00:e9:aa:1f:f1:1d:0c:2e:cd:49:b7:42:9a:
         d0:a3:9e:32:54:46:07:b6:34:9a:f4:11:c7:5d:1f:f4:de:55:
         cc:49:8a:ab:52:83:17:17:93:a3:af:1b:27:b0:4e:ca:d5:b7:
         b1:4f:c4:34:28:fe:a8:73:e9:46:15:d1:63:a8:d6:17:f3:66:
         09:10:62:aa:8b:1b:3c:f3:d7:92:6a:b6:96:c1:0e:fb:d4:39:
         5a:7f:94:71:28:53:e0:c6:ce:27:30:62:38:a3:00:78:16:ac:
         8d:b5:8d:f7:44:8e:c8:e6:e6:49:0a:5d:7f:3a:9b:58:d1:0c:
         f8:74:a8:a4:42:66:2a:29:65:1e:0f:bb:b5:2d:b5:a7:3c:38:
         b0:dc:2f:00:2a:35:9c:8c:ab:d1:df:bf:7b:ff:d7:dd:21:27:
         a1:78:a3:e3:55:c8:9f:e9:e5:02:64:39:96:14:36:ab:14:19:
         65:25:a9:b2:c1:5f:a5:75:a6:14:63:49:2c:55:73:29:54:18:
         f3:12:ed:b0:ec:f8:d9:e6:06:60:fb:99:4c:50:55:3f:10:bd:
         18:69:d4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:32:12 2025 by rpki-client