Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f1970620-a10f-3a27-ad09-03ade55e9519.roa
File:                     f1970620-a10f-3a27-ad09-03ade55e9519.roa (raw, json)
Hash identifier:          I1u60NZC6d3RakWeC4D3p83L30EO+KoF3nmjvMxfkE4=
Subject key identifier:   85:AC:14:1E:66:82:CB:48:34:AD:1B:BF:F9:F1:3C:90:9D:EE:FA:88
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A71EB3B7424E46812FD3F6B40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f1970620-a10f-3a27-ad09-03ade55e9519.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        2001:56a:dff0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:3b:74:24:e4:68:12:fd:3f:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=7c1201a0-8150-4555-b951-c14fc655ab1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c7:0b:09:b0:37:ac:d6:ab:09:2e:ca:65:37:
                    c4:aa:94:54:c9:36:e9:5e:5f:b8:92:c2:16:83:6c:
                    6e:ad:ed:3c:40:db:27:47:b7:a1:d1:e8:7f:70:e3:
                    b9:94:4e:0c:d3:5c:f4:26:c3:3e:3f:a1:8d:2b:47:
                    f0:1e:7b:3a:3d:40:ca:5e:4f:c4:b2:c8:7c:73:b5:
                    49:70:68:5d:5d:16:68:74:9d:4a:29:1a:80:cc:d9:
                    e8:a4:0f:ae:ac:99:bb:0f:cc:e5:be:1e:50:ab:98:
                    86:9e:93:a5:db:cb:50:dc:d5:b8:0d:fe:a5:fb:cf:
                    23:8f:f3:a8:97:1d:c6:70:b3:61:f1:74:3b:2c:04:
                    36:97:9f:67:16:b3:63:c1:b1:00:f6:bc:0b:fb:c3:
                    be:6a:b3:75:70:b7:8a:05:9b:9c:80:a7:f7:7c:55:
                    98:18:5c:06:e0:67:2e:6b:cc:bd:ac:48:06:3e:49:
                    30:01:ce:fc:15:ac:85:fe:3d:bf:ae:19:02:f7:84:
                    71:da:a9:86:6a:6d:96:5b:68:35:68:cd:d8:39:5a:
                    08:21:81:fe:4e:06:9a:ad:6c:5d:08:26:09:8e:ee:
                    06:9d:8f:1d:1b:ab:4e:8b:07:04:14:e2:c9:83:d4:
                    d3:25:bc:a2:ad:39:d9:cb:fe:b6:22:cc:a9:48:6e:
                    86:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AC:14:1E:66:82:CB:48:34:AD:1B:BF:F9:F1:3C:90:9D:EE:FA:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f1970620-a10f-3a27-ad09-03ade55e9519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56a:dff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e9:a6:90:91:36:79:21:50:71:aa:41:de:a3:32:5c:51:9f:89:
         fd:ff:1d:a6:2c:b5:f0:00:e5:11:57:cb:37:bb:61:1a:19:89:
         c1:6c:00:45:7a:63:8e:47:cf:33:e2:39:24:0c:45:5e:da:e5:
         8d:35:a2:37:3c:cc:cc:e2:38:fd:35:30:69:d8:26:84:ab:bd:
         52:44:2c:7a:49:92:77:2c:8e:df:7d:0e:11:1c:7e:b6:0c:62:
         83:89:08:5b:4f:d9:b7:ce:2d:07:3e:5b:83:19:e5:4b:ea:1b:
         06:f3:11:e4:6f:09:e7:3e:cb:00:b7:ba:5d:25:8f:d6:25:f5:
         42:13:5f:18:28:0e:30:f1:08:15:25:fa:9d:33:18:77:73:1d:
         12:a3:2b:e1:86:2b:bf:3e:92:50:3c:3f:40:78:1a:0f:1b:bf:
         4c:a2:4e:2c:f0:62:a9:6e:f6:60:0a:67:40:d8:b3:1a:50:eb:
         ca:83:43:58:dd:15:6c:ae:79:d7:f4:8e:0a:56:8e:6a:76:cc:
         75:23:01:3f:ef:ec:06:46:2c:83:45:4a:35:32:10:78:43:96:
         69:79:55:c1:a8:42:b9:80:13:1e:f6:9d:0e:6a:a4:5b:24:7e:
         80:14:6d:80:59:81:25:de:12:14:7a:6c:e8:56:93:c3:c3:49:
         cb:45:fd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:23:02 2025 by rpki-client