Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e50f05de-bce4-36e8-a1e9-1fab8ed0662f.roa
File:                     e50f05de-bce4-36e8-a1e9-1fab8ed0662f.roa (raw, json)
Hash identifier:          eGobTeldCdV18rD0i5uJKCscSEf3sQXJfG6GcwxMiqc=
Subject key identifier:   DB:97:AF:CC:8B:C5:43:16:6B:14:C1:3C:3E:69:2D:55:E8:7F:C3:38
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F4328584A9E961764499F3A076029FD60
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e50f05de-bce4-36e8-a1e9-1fab8ed0662f.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     8070
IP address blocks:        2607:f368:a004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:17:64:49:9f:3a:07:60:29:fd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=4427f30e-63cf-48a9-a121-0101924d80d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b0:4f:cc:1c:ef:ad:14:74:59:5a:ec:92:ef:
                    ee:32:03:b2:51:26:d0:3f:6c:3e:08:37:60:b5:fe:
                    ed:b4:d2:d1:79:d6:87:43:c2:69:16:3d:eb:ab:a4:
                    e7:ca:d7:f2:71:27:b8:9b:79:1a:63:81:6d:d4:c4:
                    4c:09:8b:79:63:7a:6a:1c:ed:8b:24:4f:ae:02:89:
                    ad:63:00:c8:fa:05:5a:64:78:95:e9:b5:81:1c:29:
                    fd:fc:b5:31:bd:61:2d:15:39:0c:12:08:33:c8:01:
                    e2:47:f5:8e:a0:58:54:5f:06:1b:cf:f2:70:cf:a8:
                    27:f6:fc:e8:c4:7e:d6:77:2a:d1:5d:89:a0:44:48:
                    e8:02:7b:53:c0:b4:63:50:bd:af:4e:6d:4d:85:54:
                    d5:3e:e0:69:16:e3:4d:42:d7:24:7a:73:b9:f4:70:
                    7e:27:07:c7:86:41:6d:7c:99:cf:e3:f4:d7:c3:5b:
                    d9:a1:d4:c0:76:ce:dc:5e:5c:e7:e6:90:fe:a5:63:
                    5b:14:db:f8:22:a9:fe:eb:53:f9:6e:fc:18:32:0a:
                    f7:12:06:dd:d8:96:fe:ab:70:5a:74:61:be:35:5f:
                    a2:65:8c:5c:ad:f8:ac:ca:6d:97:f5:0d:e2:ad:c8:
                    83:37:60:46:7b:cd:c4:9e:07:06:be:a4:cc:c4:5f:
                    60:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:97:AF:CC:8B:C5:43:16:6B:14:C1:3C:3E:69:2D:55:E8:7F:C3:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e50f05de-bce4-36e8-a1e9-1fab8ed0662f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:a004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:46:ee:9c:37:f0:64:d3:1f:ee:00:4b:62:fd:cc:ac:71:e5:
         48:66:4c:4a:0c:ac:a5:0c:7a:01:30:d8:7a:6a:76:69:0e:3a:
         5b:0d:86:41:f4:ae:cf:7d:b7:ed:f6:fa:72:d4:82:29:37:13:
         c0:fd:fe:4f:c0:ef:76:24:cb:fd:fd:b3:fd:54:6b:fb:eb:50:
         9e:33:e4:5e:41:cc:62:0b:77:bc:4f:ce:d6:74:b6:3a:0f:f8:
         73:39:b0:57:6c:cc:03:db:1b:23:bd:1e:6d:a8:9c:72:cc:19:
         05:b1:c9:25:ae:4b:ac:07:b9:ea:73:35:8a:6f:5a:df:11:06:
         27:d6:0a:e8:31:47:0e:4e:89:c8:65:40:8e:f4:c8:3a:72:34:
         e1:6c:12:c7:c5:76:ee:05:e5:3e:4c:72:06:5b:bb:ee:cc:a6:
         88:de:e9:58:a1:63:d7:3f:5b:16:62:2a:d0:61:6a:83:f8:26:
         eb:e3:39:d1:2e:f8:2c:12:7b:c8:21:c4:39:4a:e0:c7:e6:51:
         d5:97:23:6d:0d:af:25:ef:1b:08:e6:4b:9c:3c:5b:38:d0:65:
         61:d7:09:47:e4:6e:72:88:56:1a:6d:c6:f1:48:bd:28:e4:3b:
         45:cb:4d:2c:ab:2b:da:9a:5c:25:ab:f4:ab:af:ad:7d:b8:34:
         23:d2:9d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 20:52:50 2025 by rpki-client