Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1a640b8d-2f75-3f95-bc47-eca644a37c87.roa
File:                     1a640b8d-2f75-3f95-bc47-eca644a37c87.roa (raw, json)
Hash identifier:          9MdRKVdGPxdvIxJo5e90ZJypnIKsn7e+1hit4kkwQ8Y=
Subject key identifier:   AB:51:47:31:D5:C6:3D:61:E3:26:90:C9:3E:6A:29:62:F8:59:6A:8C
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584A90A0B7A81C6B0AB56372BC00
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1a640b8d-2f75-3f95-bc47-eca644a37c87.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     394354
IP address blocks:        2620:10a:8017::/48 maxlen: 48
                          2620:10a:801a::/48 maxlen: 48
                          2620:10a:80e7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b7:a8:1c:6b:0a:b5:63:72:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=1ffb0e73-fbf4-4618-a74e-cb041446dccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:cf:0f:b8:16:ec:82:12:ed:b4:f7:15:78:
                    a8:43:1f:40:e5:e1:25:81:52:65:fe:88:37:53:e2:
                    53:68:d1:13:ac:55:b7:8c:64:45:45:72:e2:dc:b8:
                    55:a1:bc:eb:0a:58:9c:0f:1b:1b:fd:0b:65:5d:39:
                    c0:2a:6d:c5:14:2f:26:3d:a3:76:db:58:18:2f:45:
                    e5:96:b4:57:c5:e3:6b:60:38:fb:69:18:87:ca:6d:
                    c3:93:0a:d0:16:22:04:82:3b:de:97:b0:09:20:e0:
                    b8:1a:ec:5a:9d:55:96:2f:0d:5c:60:c4:b0:66:a4:
                    d0:c3:1b:f3:36:a8:b1:94:25:dd:c1:ce:70:93:60:
                    04:1f:73:b3:68:d0:1b:f9:f7:6c:a1:92:81:ca:92:
                    9b:d4:95:23:81:74:8b:0f:88:6c:bf:77:c3:49:55:
                    06:7d:c9:f9:28:c2:84:61:77:8e:11:99:63:53:7f:
                    a0:8d:df:76:87:67:ef:2d:32:8b:62:81:bd:6e:25:
                    1a:aa:59:83:f8:5e:4b:4f:08:99:9b:70:4a:45:2f:
                    f7:7a:1e:68:0d:f7:07:78:16:11:aa:b9:d5:47:4b:
                    49:55:5e:f6:9d:3e:1b:c2:8e:a4:58:42:b2:4d:18:
                    bf:8b:6b:dd:8e:55:0b:04:01:78:62:63:d0:af:ee:
                    a0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:51:47:31:D5:C6:3D:61:E3:26:90:C9:3E:6A:29:62:F8:59:6A:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/1a640b8d-2f75-3f95-bc47-eca644a37c87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:8017::/48
                  2620:10a:801a::/48
                  2620:10a:80e7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:00:39:d1:9d:00:9f:63:b5:e9:85:36:b9:31:30:ca:3a:aa:
         f4:0a:cb:48:a4:5a:b9:d8:b5:f5:94:4c:fa:70:7c:c9:ac:c9:
         4b:e9:eb:c1:f0:bf:df:be:4b:56:f5:c6:7a:4e:53:57:bc:b0:
         c2:49:e4:72:0f:9f:06:18:d2:39:42:31:32:ef:a1:6b:38:f1:
         81:7a:90:3e:6c:66:17:83:f8:c4:e9:d6:f3:6f:8f:a1:49:03:
         7a:89:c7:22:aa:26:39:29:7a:18:97:37:d5:c0:78:2e:3a:fc:
         79:16:58:38:d3:88:1c:4a:27:99:98:15:d1:28:d5:d0:5a:a0:
         f4:e4:7b:25:16:c9:c1:56:e3:a7:86:1c:d9:41:4a:d4:e3:68:
         22:89:66:7e:93:02:52:83:49:cd:c8:bf:3c:94:24:b6:12:f1:
         4a:1c:82:1c:b6:9f:e9:2a:67:6e:37:b7:e1:7e:36:26:ae:33:
         88:50:32:0c:fc:b7:64:e8:a0:41:0f:46:45:98:2d:be:ac:c2:
         26:ce:11:56:2d:f1:0e:a2:8a:e3:b2:d9:93:ac:ea:ed:e5:1a:
         21:75:98:6f:0d:b8:49:f9:73:6c:33:d9:93:86:f2:e2:fd:54:
         1e:67:2a:45:53:44:19:6b:24:2d:03:1e:2e:f0:59:f1:39:d3:
         00:43:95:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:24:13 2025 by rpki-client