Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/3a5532ac-c330-360b-87ba-d368fdf0b0b6.roa
File:                     3a5532ac-c330-360b-87ba-d368fdf0b0b6.roa (raw, json)
Hash identifier:          45bILumh2Hd0wx0nPhEHIKpCptxY7ziGJH7Rjqz9lG0=
Subject key identifier:   83:4B:FE:47:29:BC:F0:0F:75:5B:D7:B9:AB:27:B3:ED:D0:05:16:45
Certificate issuer:       /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
Certificate serial:       010D0C9F4328584A66C06D2C98A0B03D86497580
Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/3a5532ac-c330-360b-87ba-d368fdf0b0b6.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     3584
IP address blocks:        2607:2a00:2::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:6d:2c:98:a0:b0:3d:86:49:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=e66d604d-195b-46e0-8145-2c98578ae717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cc:79:88:fc:ab:d0:5a:d9:52:68:11:6c:c8:
                    bf:a5:20:fb:a5:38:dd:c1:c2:25:cb:da:94:7d:5b:
                    3e:f1:85:fc:bc:4f:38:47:19:74:6b:b4:fe:96:bd:
                    2b:d1:e6:bd:c1:3f:61:2b:81:90:e8:ea:17:01:34:
                    65:bc:53:97:e6:c3:ad:08:8f:df:d3:51:3f:c8:22:
                    98:31:e7:8e:58:25:68:37:d9:6c:3d:3c:30:f2:c5:
                    6c:eb:e3:76:14:08:3f:93:d0:68:46:24:a8:39:46:
                    c4:84:99:81:b3:eb:2c:f8:43:77:fc:38:a4:b1:c4:
                    c6:21:37:c1:23:61:cc:48:8d:d5:55:f6:a4:12:0b:
                    91:1b:e8:ea:52:cf:44:db:ec:62:42:72:2c:4a:1f:
                    79:ef:de:6d:e1:ea:8b:64:ab:b7:07:52:89:12:1b:
                    4f:26:a6:c4:d3:ea:77:62:d4:28:ec:92:33:8f:6e:
                    1e:44:d7:75:1b:e1:2f:f3:ae:03:29:73:a1:f3:e8:
                    e8:1e:9d:ca:0d:3d:ef:d7:48:7a:dd:f4:0a:15:da:
                    dc:1b:7a:31:a2:f1:85:03:d2:83:36:c6:8a:08:78:
                    62:55:1e:f9:da:39:f6:ca:60:1e:3f:c2:ad:aa:d7:
                    c7:f3:91:7b:23:cc:34:6d:b2:9b:99:dc:cd:41:ca:
                    3a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4B:FE:47:29:BC:F0:0F:75:5B:D7:B9:AB:27:B3:ED:D0:05:16:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/3a5532ac-c330-360b-87ba-d368fdf0b0b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl

            X509v3 Authority Key Identifier:
                keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2a00:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:a6:6a:93:82:e0:f0:b6:cd:c7:10:b5:84:f3:02:90:71:2a:
         7c:e2:54:c0:ac:44:2c:23:34:a3:59:f3:66:1c:82:52:fa:ba:
         03:f2:1d:74:40:e9:14:ae:39:e8:0b:e2:62:91:30:f8:ad:c2:
         7b:f8:73:30:63:43:30:b1:07:3d:9d:5b:a4:b2:25:b1:54:e1:
         4c:61:fb:2e:f5:2a:60:58:18:e8:84:57:16:19:a6:a4:8a:a2:
         8c:c3:11:5d:05:2a:df:c6:ff:fc:de:de:07:f0:74:df:eb:36:
         58:c5:08:83:61:88:28:ac:34:bc:84:25:d9:f8:32:1a:18:19:
         6f:fb:9b:0d:70:3a:e7:71:96:83:ea:d5:02:46:9a:4e:84:c9:
         3d:90:ba:2c:76:d0:54:88:f0:93:53:34:dc:42:64:1e:56:c4:
         aa:5c:3a:c5:35:c4:36:db:c8:51:7a:bf:45:8d:a1:de:da:95:
         cd:0f:18:ff:3d:fe:85:e4:bc:7e:58:c8:0b:53:fd:19:74:b0:
         6e:cf:f3:35:83:43:e9:bc:5a:f4:8d:0e:53:c6:b8:0e:40:05:
         84:91:28:84:27:6c:09:79:11:a3:4a:19:00:2c:4b:36:7f:45:
         e1:ec:f9:82:6a:ae:1c:c1:9e:9d:72:e5:a4:b7:bb:61:f8:71:
         21:da:e4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 17:31:16 2025 by rpki-client