Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/dcf68a2e-a4f1-3b4d-86dd-631c7a382283.roa
File:                     dcf68a2e-a4f1-3b4d-86dd-631c7a382283.roa (raw, json)
Hash identifier:          R1v1VogxWrzksyulX3pyF3W6B3Jr9wAYYY9L3ZqK3uI=
Subject key identifier:   DD:70:5D:EE:B4:9D:F9:FF:16:54:4D:C2:E0:E9:BF:A5:24:3B:FF:28
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584A90A0B798EB1BBCCA74C9E420
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/dcf68a2e-a4f1-3b4d-86dd-631c7a382283.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     55195
IP address blocks:        2620:10a:80ef::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b7:98:eb:1b:bc:ca:74:c9:e4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=500e6aea-804a-4c60-a516-154db20f4b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:51:f2:98:32:1c:a6:96:b5:1a:f3:0a:b6:e0:
                    84:62:69:03:15:ef:0d:63:29:a2:2b:06:89:ef:de:
                    0d:28:17:9c:9e:d6:a6:bc:c3:bf:54:74:7c:c9:35:
                    04:db:ba:58:4c:6b:1d:73:16:d1:86:fb:52:29:d0:
                    c7:d7:af:af:e2:a1:91:64:bf:5b:a2:68:a3:75:ec:
                    b6:01:99:06:8e:de:77:7c:47:45:13:29:0b:04:b4:
                    74:61:ff:f1:21:3a:29:49:eb:f0:6e:b7:f5:d1:54:
                    6f:31:6f:c2:16:e1:e1:64:cb:8b:0c:3d:15:96:9e:
                    e6:28:5d:6c:c8:a3:a6:59:18:f5:a5:47:5f:e3:21:
                    4a:99:cd:d9:1c:78:d0:c3:f6:03:d8:72:20:12:78:
                    2d:1d:c9:c3:c7:ee:6c:a0:05:09:88:43:bb:ad:5f:
                    cc:02:b2:e5:a8:9a:a6:0d:eb:15:46:69:36:34:17:
                    95:d9:40:80:2a:48:e1:33:14:29:be:39:39:60:eb:
                    ed:e5:2c:b8:ee:4b:58:d2:83:b3:bb:0a:c1:cb:7a:
                    8c:a1:e3:53:33:61:e7:f1:f0:cf:73:bc:51:88:5e:
                    d4:7b:01:af:20:38:e0:54:fa:b4:69:f1:0c:a4:fc:
                    d3:d0:5d:46:49:2f:76:08:82:f9:12:15:0c:c9:b7:
                    26:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:70:5D:EE:B4:9D:F9:FF:16:54:4D:C2:E0:E9:BF:A5:24:3B:FF:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/dcf68a2e-a4f1-3b4d-86dd-631c7a382283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:80ef::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:b5:70:6b:5f:1d:4b:43:ef:13:be:1d:40:aa:ea:c8:e6:ce:
         f6:d5:53:58:4b:66:c7:7e:a5:2d:5a:af:3c:82:e9:9f:be:67:
         f8:b6:08:a8:2f:48:f8:13:ec:0e:f6:84:a2:e2:4e:40:59:2d:
         6f:db:8c:05:a6:e0:90:b5:5d:3d:7a:5c:6d:cc:7f:2b:fb:70:
         e0:c2:a7:53:a1:19:2b:0c:4b:ff:3f:03:21:fe:cd:5e:3e:d5:
         a8:83:ca:8b:79:0d:8f:ea:a0:2e:26:7d:c9:1b:bc:13:b5:04:
         10:22:3e:bf:15:39:9a:d6:7c:e4:b3:8d:c4:3b:8a:5c:2d:b5:
         15:2f:55:4f:c4:9b:21:af:13:a0:b0:f1:10:02:04:10:f7:17:
         d0:8b:e4:b1:8d:09:76:88:64:e6:6f:aa:d4:24:27:ce:0b:44:
         9c:41:f3:ce:bf:20:21:b3:76:5b:d2:65:25:f1:99:58:82:b6:
         76:da:b1:a1:b2:c9:0b:d6:2b:f8:7f:44:13:ce:05:15:21:00:
         58:46:28:82:68:5e:7b:04:ba:c9:d5:1b:76:38:d9:3e:f2:cb:
         1c:81:0e:a6:a3:06:39:db:31:6d:ef:07:42:81:30:5d:66:a4:
         31:0d:65:6f:cc:32:b1:68:cf:8b:82:3f:04:dc:33:e3:e9:5b:
         e1:d6:7f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:29:43 2025 by rpki-client