Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/cb13181f-7a7b-3fd6-99f0-5b804403bc46.roa
File:                     cb13181f-7a7b-3fd6-99f0-5b804403bc46.roa (raw, json)
Hash identifier:          o5NpwXgGwkoErdxOKo/Dg/CMhYspt3KEBo7hCYGXpUY=
Subject key identifier:   33:F7:BC:C6:A9:99:6A:B3:14:DE:79:62:F6:C3:57:55:E2:A8:15:8E
Certificate issuer:       /CN=d106a247-9308-46e9-9d88-ae987a6bdace
Certificate serial:       010D0C9F4328584A9D30D74899719727FA1385E0
Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/cb13181f-7a7b-3fd6-99f0-5b804403bc46.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     50131
IP address blocks:        2604:9cc0:1800::/38 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:d7:48:99:71:97:27:fa:13:85:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=ab166469-9a78-4242-8f58-cca1622d31a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:11:7e:96:fd:7d:30:0d:b0:00:78:2e:c3:
                    cc:c3:2f:8c:1f:14:fd:6e:bd:e4:29:b3:02:af:fa:
                    96:58:80:7d:59:4a:c1:66:13:da:dc:ec:24:ea:3c:
                    2f:e3:8b:ac:d9:80:71:7e:23:48:03:fe:a5:01:db:
                    e6:3b:03:08:d3:f3:83:e4:43:b0:e7:2f:72:6e:c5:
                    01:6d:5b:a4:8e:7d:7c:8b:f0:32:60:e6:33:45:0f:
                    72:4d:27:e1:66:31:0e:f7:fb:6d:b6:b6:69:b7:a4:
                    53:e5:b2:4e:2e:60:1f:23:8c:05:f9:b5:ae:96:fa:
                    c3:51:84:53:06:08:9e:89:75:88:04:4a:65:29:26:
                    bd:63:45:be:a6:6d:13:45:14:0d:e5:57:85:34:db:
                    ec:7a:71:3a:52:68:f8:14:5d:9a:eb:4f:a4:c4:23:
                    f0:da:81:bc:8c:cd:06:17:31:85:ec:76:07:37:9e:
                    35:15:19:43:2c:5a:4c:36:3d:09:84:79:26:0b:80:
                    c4:87:09:41:9f:e1:47:81:47:19:a9:d1:06:da:90:
                    95:ca:97:6f:52:4e:b8:18:b8:8c:77:ba:7d:98:b8:
                    45:99:ca:e9:9a:3f:f4:dd:68:d7:8f:a7:d4:fe:e2:
                    e0:6b:af:75:46:70:55:05:de:04:6c:3e:af:86:e8:
                    17:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F7:BC:C6:A9:99:6A:B3:14:DE:79:62:F6:C3:57:55:E2:A8:15:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/cb13181f-7a7b-3fd6-99f0-5b804403bc46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl

            X509v3 Authority Key Identifier:
                keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9cc0:1800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:6f:c2:a5:16:60:03:d4:48:f6:fe:45:7d:ff:27:03:61:d4:
         74:77:99:de:cd:8d:d9:c2:0e:31:b8:a7:95:ad:1b:06:e2:07:
         26:ce:d6:61:b0:51:15:37:03:d8:ad:8e:8b:aa:3b:d9:b6:82:
         d0:63:fb:5a:94:54:38:69:6e:c3:5b:2d:63:41:80:3c:60:ae:
         82:33:4d:95:f4:7b:04:09:b3:b4:f0:87:23:cc:d1:d7:96:7d:
         5a:ec:68:d6:53:49:29:6a:0e:05:df:bb:c9:32:49:3e:bd:d4:
         b2:45:3f:9e:67:d9:f1:0f:7d:be:bd:03:b8:e7:cd:a2:fc:d0:
         ee:17:62:0f:76:24:61:32:a0:c1:b3:b2:a8:8c:c5:8a:7a:bd:
         59:2c:e2:ce:ec:ff:6b:4b:cf:bb:19:6f:a2:48:ec:4d:1d:62:
         5e:d3:3e:4c:5a:0d:73:1b:c3:fd:3b:d4:28:20:34:af:c9:78:
         cc:dd:a5:86:37:ce:88:ae:52:03:95:2e:15:55:64:a9:2a:2d:
         af:64:a5:6d:e4:40:fb:56:12:7a:0d:3b:a9:37:3f:7b:a2:96:
         62:00:d8:7e:33:eb:db:88:38:24:10:a8:e9:1e:9f:3c:9c:17:
         35:0f:4d:27:5d:a0:cd:1c:09:47:db:6f:81:db:21:ab:29:f8:
         f2:5f:7d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:06:38 2025 by rpki-client