Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/7819596c-8a59-37cf-a9a1-ea5443d388cb.roa
File:                     7819596c-8a59-37cf-a9a1-ea5443d388cb.roa (raw, json)
Hash identifier:          GJrGilgAQHQ2DR3oKUUiMMfESpMCrO1lJXVwwE4we6E=
Subject key identifier:   D8:FC:62:AD:F8:FA:69:3E:EC:A9:3D:90:36:19:B6:56:7B:CB:85:EE
Certificate issuer:       /CN=d106a247-9308-46e9-9d88-ae987a6bdace
Certificate serial:       010D0C9F4328584A6290927AAF4DC192CFABDC20
Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/7819596c-8a59-37cf-a9a1-ea5443d388cb.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     50131
IP address blocks:        2604:9cc0:c00::/38 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:92:7a:af:4d:c1:92:cf:ab:dc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=9ea80763-f692-4626-8598-f5fff5c054c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fc:4b:b7:17:24:4e:9c:c8:31:7c:73:7a:db:
                    80:e4:a8:15:8a:2e:6d:e1:71:5e:f1:19:49:d0:31:
                    f7:1c:1a:04:ed:83:4d:7f:10:2a:68:6a:fc:4b:b8:
                    ef:7a:1f:30:26:5e:39:8f:e3:32:40:a5:60:a6:f9:
                    6d:62:78:20:4d:c9:5a:0f:c4:fd:dd:99:d3:c2:e3:
                    ef:fa:e9:a6:d8:95:2b:1b:7d:bc:f4:8e:7e:60:fb:
                    9b:7c:d6:0f:10:85:83:46:d1:3d:6c:82:a7:95:ce:
                    d2:71:0e:1a:61:e8:ae:71:a5:5e:28:40:54:9f:67:
                    38:9c:2a:f8:a6:7b:ce:fe:b2:ae:c7:57:ca:bc:4a:
                    c4:4c:03:a0:16:52:36:6a:b3:95:e6:a9:be:db:ee:
                    11:fe:2b:83:06:08:ea:52:1c:4c:4c:69:3d:c7:7c:
                    0e:f8:9b:7f:5b:37:7c:69:bb:00:21:15:6a:69:54:
                    1c:02:8c:48:c5:dd:55:6b:28:50:55:59:1c:0f:2d:
                    e0:ba:35:f1:a3:07:c3:20:c8:19:ae:77:90:98:bf:
                    78:67:d3:38:82:4f:96:fe:82:e1:6c:45:f5:71:2a:
                    db:c4:d6:ee:16:cf:ee:40:98:80:bd:2e:1c:12:fd:
                    c5:b2:e4:2c:50:4f:20:7c:54:33:56:6f:dd:54:2a:
                    bc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FC:62:AD:F8:FA:69:3E:EC:A9:3D:90:36:19:B6:56:7B:CB:85:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/7819596c-8a59-37cf-a9a1-ea5443d388cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl

            X509v3 Authority Key Identifier:
                keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9cc0:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:d7:44:30:3e:1a:69:e0:76:c1:d3:39:a9:4c:f6:f9:7a:42:
         3c:8f:8c:f9:96:f4:a5:f3:0e:18:25:56:f5:55:40:57:4b:7e:
         dd:04:3b:1e:e1:ca:7b:a9:a0:6b:df:8a:56:31:ce:8a:c1:c9:
         f5:0c:b4:4f:15:c0:ac:db:08:06:b6:fe:3c:2a:71:9e:4d:21:
         2b:08:9b:3c:f6:e0:12:2b:3c:fd:1f:bb:19:25:30:89:13:54:
         7c:b3:05:c4:03:28:ae:29:48:26:50:e8:1b:ee:b4:ca:23:6e:
         a3:5c:59:f2:1b:8a:69:bc:c7:c8:05:85:1e:9e:5c:8a:60:2f:
         32:75:5f:1c:0b:6d:7a:33:aa:e7:56:6a:9f:0b:f0:14:48:9a:
         2a:7d:10:f6:92:21:ce:92:c2:e1:ff:f8:b9:8c:3c:8c:58:c8:
         62:06:53:a4:99:8b:9c:68:0c:51:1e:a0:8c:44:4d:83:c4:1f:
         5d:f1:2d:dd:72:a5:c2:f2:83:d2:68:f1:70:bd:42:6f:7a:6e:
         df:93:fb:03:c5:5d:28:a8:bf:d5:82:f6:bd:a4:ef:78:4e:c0:
         1a:78:2c:95:e1:01:6c:97:bf:73:4a:2e:05:50:45:75:ad:66:
         27:c7:e7:45:fe:34:b5:6a:9b:d6:51:90:e4:b2:ac:d5:99:08:
         d5:67:86:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:11:42 2025 by rpki-client