Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb085752-4702-38f3-b1d5-fca3b9db8492.roa
File:                     bb085752-4702-38f3-b1d5-fca3b9db8492.roa (raw, json)
Hash identifier:          N+qtUBne5wBkui5oW4uHsTjEBnoW10rySARsNDDtkGM=
Subject key identifier:   7D:4F:82:AA:89:19:5F:68:69:07:C9:86:2E:5A:D0:8B:24:1C:CF:68
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A84123D4F61CF89ABC2372000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb085752-4702-38f3-b1d5-fca3b9db8492.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        2600:1901:c0a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:3d:4f:61:cf:89:ab:c2:37:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=22fcfb6e-7038-4caf-841f-fc08c46b90c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:47:78:58:2c:56:c9:2a:cc:b0:03:a5:30:
                    68:c5:2d:61:a1:9d:1f:01:f6:53:76:52:71:40:8f:
                    ea:5e:f5:6d:0b:cb:34:32:36:fe:bf:29:8c:2a:aa:
                    47:22:8a:70:dc:55:b1:b5:a7:aa:d5:ad:0d:83:83:
                    c3:35:0b:b6:91:10:53:ad:da:b5:d4:04:75:fe:9d:
                    67:87:c1:83:03:27:fe:9f:5c:4d:cb:44:05:85:05:
                    42:5c:86:ed:2e:00:5a:98:8c:1f:a3:88:6f:e9:0f:
                    37:33:69:72:a6:e9:e2:a3:2b:b5:68:e6:98:61:4e:
                    37:43:5c:e9:0c:5f:fd:d8:9d:cd:0c:e8:06:84:6e:
                    a1:65:2a:8e:2a:70:38:11:d3:2c:62:1e:18:36:ed:
                    d8:81:c9:53:f0:0d:ac:2d:62:57:9a:32:1e:58:92:
                    35:2a:95:7d:bb:07:24:93:fa:e8:90:c3:b9:8b:bd:
                    e5:d4:70:41:a8:d2:57:4d:61:3c:7a:78:0a:ba:29:
                    5a:a3:21:ec:70:d7:9c:0a:01:92:d2:c8:ec:bc:26:
                    99:f6:f8:a8:c2:60:37:ea:59:ab:e2:03:51:04:b7:
                    37:5a:11:cb:8e:cb:42:37:27:aa:30:94:59:dc:5c:
                    15:e7:c4:b1:d1:b6:b8:f0:35:6e:df:0f:38:9e:9a:
                    f3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4F:82:AA:89:19:5F:68:69:07:C9:86:2E:5A:D0:8B:24:1C:CF:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb085752-4702-38f3-b1d5-fca3b9db8492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1901:c0a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:32:bd:f3:0a:db:21:10:0d:c3:e2:66:cf:08:28:ec:c7:2e:
         ad:56:7f:5c:6e:00:ba:11:c1:e3:90:b2:12:2b:94:d9:49:e9:
         5a:27:0f:b8:00:5d:a2:0c:d5:35:3e:45:bd:08:c8:cd:02:7d:
         2b:e3:bf:d3:25:8d:7c:7b:71:49:10:2e:a3:4d:6f:36:da:5f:
         d4:ca:e0:d5:33:c7:d4:1f:87:0b:6a:a9:40:3a:94:35:7d:ef:
         1f:87:01:20:23:c1:33:d5:f0:89:0d:99:41:1c:20:73:d6:4b:
         7b:1a:c2:78:f9:cd:e1:ad:ff:8f:a4:ea:a1:ab:82:70:4c:19:
         9d:88:01:b1:0c:00:34:09:93:30:73:ec:8e:5c:3e:de:09:22:
         00:b1:f1:59:9d:9b:23:7c:95:de:7c:e0:ef:dc:37:4f:ac:9d:
         67:38:a5:41:c8:35:6c:36:04:c3:f1:07:ba:9e:91:20:49:a2:
         50:61:1a:44:c8:ed:00:00:8e:2d:13:d5:df:82:7e:a7:fb:4c:
         7f:03:b6:c2:0f:4d:f1:85:da:2b:0f:a2:ee:8f:8e:59:1b:50:
         7b:93:a7:68:d3:02:a1:53:b0:c6:75:05:54:6c:9e:1d:6e:13:
         00:b3:d8:50:8e:8d:cd:2f:a8:d3:e2:aa:25:cd:0f:b0:55:11:
         4a:ee:7c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:28:05 2025 by rpki-client