Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d001ec8b-d4ca-3582-af14-49ef52b83d0f.roa
File:                     d001ec8b-d4ca-3582-af14-49ef52b83d0f.roa (raw, json)
Hash identifier:          beXQP3NrvvVEAZL4ZbRzfwTSPIfWeLdNDkKo2qSrFNs=
Subject key identifier:   FF:C1:E4:DA:4A:82:7D:50:59:D7:CE:A3:7A:63:73:AF:A8:DB:A9:8C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584A841194E35A0BF5124B245D80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d001ec8b-d4ca-3582-af14-49ef52b83d0f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     396982
IP address blocks:        2600:1900:4244::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:94:e3:5a:0b:f5:12:4b:24:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=f6c8bd18-43d4-47ee-a3bf-2b100e549a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:92:07:b9:b7:35:ac:34:42:39:24:76:2f:fd:
                    71:97:a4:08:03:9d:96:19:af:ab:7d:1d:e1:2e:bb:
                    fb:4b:3d:7a:8d:d5:50:4b:ff:83:0a:e8:63:41:9d:
                    9e:c7:74:de:b4:ed:5c:a9:8f:63:9e:12:c5:91:2b:
                    01:09:5f:b0:77:ca:24:e0:55:27:44:f5:34:b6:12:
                    05:14:75:ca:0f:34:e0:87:7a:1b:2c:9b:c6:ec:50:
                    9f:0a:48:65:6e:cd:6f:a6:6e:bb:2f:33:dc:be:35:
                    d7:ee:57:84:54:f6:d9:ca:8a:80:07:b6:bf:49:34:
                    9f:54:2f:1b:e5:08:b5:5d:68:01:81:25:ef:c8:a2:
                    61:4e:a2:69:84:76:78:44:9e:52:5a:2d:57:a9:23:
                    ac:56:ee:d5:0d:e4:70:49:1a:73:85:f6:11:cd:68:
                    12:48:cf:af:80:3d:42:62:7d:c5:39:81:f5:92:b0:
                    ca:bb:b9:6c:bc:3a:1a:6f:d4:9a:c2:10:c8:aa:f5:
                    c7:92:b6:0c:3f:a3:be:76:64:a5:10:24:1c:40:8b:
                    06:f9:21:b1:d9:da:da:bd:c1:69:21:50:b8:38:25:
                    2c:35:e0:bd:2d:23:6c:09:ac:6a:b0:3e:3a:46:86:
                    7a:54:4a:6c:92:99:0f:5f:eb:94:91:6a:d2:2b:8e:
                    83:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C1:E4:DA:4A:82:7D:50:59:D7:CE:A3:7A:63:73:AF:A8:DB:A9:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d001ec8b-d4ca-3582-af14-49ef52b83d0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:4244::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:13:71:f2:ea:bd:b6:2a:91:4c:9d:3a:61:35:c8:62:3b:91:
         e6:cd:20:98:d8:a4:6d:5c:d2:ce:5b:4c:4f:13:7e:f4:ac:5a:
         a2:d8:c1:67:2c:91:aa:1b:6c:3a:ce:5a:1c:98:77:e9:b1:ab:
         59:d3:14:f2:74:c5:c1:8a:fd:ba:00:90:78:21:07:61:6d:9b:
         4a:60:33:01:89:f1:b2:b7:6c:9a:c5:51:fa:98:7e:17:3c:fc:
         b8:6c:53:6c:f7:8b:fc:69:f2:7d:b1:2e:4d:15:28:d5:f3:a5:
         aa:ba:99:04:49:c5:f3:c2:ea:81:92:ee:7b:ef:f3:2b:a6:c6:
         6c:26:35:14:bc:2e:3a:d1:a4:1e:4a:1b:d8:d5:ef:b3:62:d9:
         49:c4:92:8a:92:1c:bb:b0:d5:cd:e7:a7:0d:9a:80:75:bf:9c:
         fe:d5:f8:61:7a:60:67:c5:0e:b4:fa:f4:12:08:2f:d9:47:c6:
         4b:6e:be:8b:19:4f:2c:04:46:05:6e:71:6a:ae:fe:c3:5a:41:
         7d:23:ef:c5:27:f1:85:24:71:15:17:4c:10:2d:c6:74:39:af:
         43:c5:5a:34:45:75:0b:a7:45:32:ae:f7:74:58:f5:d2:96:f1:
         c3:be:d5:d9:14:17:08:17:14:2f:c4:3a:ea:d7:50:50:59:c1:
         1d:f8:f2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:27:21 2025 by rpki-client