Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/e65c3998-530f-3931-8b1b-cb7955a18248.roa
File:                     e65c3998-530f-3931-8b1b-cb7955a18248.roa (raw, json)
Hash identifier:          hrpeCelod7xbwtHUyB58DtXjC5QiIvS6wkAtW2xKGRg=
Subject key identifier:   14:59:A1:52:D9:7B:13:D1:D8:3F:C1:1B:71:7C:6F:44:0E:CC:8F:EC
Certificate issuer:       /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
Certificate serial:       010D0C9F4328584A5FC5E25E0BCD86A5523FC390
Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/e65c3998-530f-3931-8b1b-cb7955a18248.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     29909
IP address blocks:        2607:2a00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:e2:5e:0b:cd:86:a5:52:3f:c3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=8eebcaac-b60e-4f4d-8a36-bf49e103e417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:44:28:21:0d:66:cb:18:5d:5f:3f:32:d3:2d:
                    0e:4b:de:71:85:d9:3a:e0:9f:59:c3:5d:a4:53:ad:
                    eb:56:69:e4:2e:81:db:bc:4d:c8:b3:8c:d6:6d:81:
                    6f:74:1d:de:6d:bf:52:00:fa:04:19:28:a8:d9:9f:
                    52:13:ff:11:56:0b:f2:0d:0b:43:c0:94:17:8a:6f:
                    bc:f6:c0:42:d2:ca:0c:f5:19:85:67:44:3b:e1:77:
                    a2:b1:4a:cb:a7:f4:2f:9a:b4:25:5d:e6:6c:f4:ba:
                    ec:34:d4:01:b9:c8:75:9f:0d:6b:d4:23:97:c0:31:
                    8b:81:39:58:6c:33:69:90:9c:e3:f1:65:9d:14:95:
                    63:e8:2c:29:93:2e:cf:10:d7:f3:83:dd:33:07:81:
                    57:e4:82:d2:88:3c:ed:fc:ee:ef:48:e0:cb:15:59:
                    d5:11:9b:6a:71:90:98:90:62:5f:4b:32:58:60:64:
                    4f:cb:d7:08:cf:82:e0:3c:23:c9:75:4b:e2:61:75:
                    3b:29:27:a2:ef:d8:6e:3a:1a:3d:5d:0f:8e:81:2f:
                    11:db:21:86:6a:36:62:26:53:c8:ed:43:ad:e8:4c:
                    5e:cb:2c:a8:5e:79:59:dc:3e:9c:51:40:39:ab:69:
                    76:ad:57:f5:3d:97:5f:2e:20:1a:93:56:08:19:26:
                    d1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:59:A1:52:D9:7B:13:D1:D8:3F:C1:1B:71:7C:6F:44:0E:CC:8F:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/e65c3998-530f-3931-8b1b-cb7955a18248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl

            X509v3 Authority Key Identifier:
                keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2a00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a6:e0:ba:5a:c7:b7:52:fa:25:6e:57:c1:3c:81:26:bc:ef:
         c7:01:5d:2f:50:82:6c:c3:27:92:27:56:93:94:6d:ae:a5:a6:
         94:16:8d:72:5a:c2:9f:1d:bd:71:d7:d5:dd:9c:7c:1b:ba:9c:
         31:50:04:a2:e9:f9:7a:68:64:ec:0c:a7:82:9c:fd:41:45:6a:
         11:a9:8c:17:b8:fc:e4:ab:5d:fc:95:dc:2d:61:19:d1:3b:92:
         c7:c2:77:26:4b:60:5b:db:52:5d:70:f8:d4:ff:bb:72:28:16:
         74:06:9a:9b:de:d7:74:a9:a4:c1:69:54:1d:ee:9c:19:a1:29:
         3f:21:c0:c0:3a:43:85:d2:de:43:f0:2d:7f:4e:ec:2f:4f:b0:
         28:33:26:f2:4d:f7:2d:f5:3e:5f:f1:71:0f:94:8b:f0:6c:06:
         59:a7:86:aa:9d:d5:91:79:a4:b0:10:bb:cb:de:4b:65:94:6b:
         29:ae:13:70:3e:9a:9b:18:cd:71:25:ac:c7:06:88:6f:ae:07:
         ff:7d:fc:38:68:b1:43:ea:88:02:22:71:cc:bc:26:77:ba:4e:
         95:97:cd:bf:62:de:62:16:2c:1c:9f:64:73:ab:3a:c3:9a:d0:
         d7:07:86:4d:65:07:43:b9:8b:28:49:49:e5:cd:8d:4f:09:28:
         c5:61:be:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 07:05:52 2025 by rpki-client