Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ef1b3344-c905-30cf-aa32-014affac7e18.roa
File:                     ef1b3344-c905-30cf-aa32-014affac7e18.roa (raw, json)
Hash identifier:          u+/1cwkhBS47y2DbWEoXwq4g4aPr4dtzw5BKBN0g+hg=
Subject key identifier:   20:01:3B:6C:AD:41:94:C2:D8:8B:33:C1:14:71:36:E7:64:75:77:79
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584A90A0B78711028DFD09F6FE00
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ef1b3344-c905-30cf-aa32-014affac7e18.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     55195
IP address blocks:        2620:10a:80e3::/48 maxlen: 48
                          2620:10a:80e4::/48 maxlen: 48
                          2620:10a:80e6::/48 maxlen: 48
                          2620:10a:80e8::/48 maxlen: 48
                          2620:10a:80e9::/48 maxlen: 48
                          2620:10a:80ea::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b7:87:11:02:8d:fd:09:f6:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=d5dbf2cc-7eba-446d-b33a-7d42a92e19ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b5:d3:4d:a6:86:76:e6:d8:a7:32:4d:ef:c6:
                    6e:57:f3:37:9e:e0:28:cb:e3:f4:37:2a:52:44:9b:
                    92:d7:39:c5:4a:97:fa:e6:83:8c:95:e8:03:9e:30:
                    67:03:c0:25:93:86:2d:34:aa:1a:95:68:d1:02:a3:
                    68:d6:8d:7c:b6:0a:29:4c:ea:9b:c2:59:1a:bf:16:
                    72:e7:28:22:ca:24:00:2f:31:45:bf:54:a4:7f:d5:
                    2f:f6:28:80:d9:cf:28:6a:f4:c3:d6:a0:e2:b4:e4:
                    50:e4:00:9f:0f:e7:20:14:6d:20:b2:14:30:94:39:
                    1f:d0:73:e2:88:ef:fc:76:7b:4c:ef:dc:20:b0:80:
                    03:75:1d:01:ba:be:fb:4a:ba:98:f8:e8:2f:c0:1d:
                    a5:14:c1:68:20:32:9e:62:04:f2:d0:0d:40:7e:53:
                    cf:68:ab:74:5d:1f:d2:d8:85:53:32:58:5e:47:07:
                    fc:a6:44:cc:57:5c:83:aa:40:eb:c5:7a:a1:75:ba:
                    0a:f7:b2:9b:83:3e:b4:e8:99:59:ad:9b:9e:b4:00:
                    d8:2e:9e:04:df:ee:61:2d:19:94:1c:fd:20:9c:a5:
                    5b:32:35:3f:c0:88:e9:f7:6d:1d:06:cc:d6:bb:58:
                    2a:6a:5b:bd:37:04:12:20:f0:af:2a:1c:cd:71:a0:
                    ee:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:01:3B:6C:AD:41:94:C2:D8:8B:33:C1:14:71:36:E7:64:75:77:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ef1b3344-c905-30cf-aa32-014affac7e18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:80e3::-2620:10a:80e4:ffff:ffff:ffff:ffff:ffff
                  2620:10a:80e6::/48
                  2620:10a:80e8::-2620:10a:80ea:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:fb:8d:8c:9d:df:f8:8c:9a:f3:fc:fd:78:70:0b:b6:cb:7f:
         5a:4b:59:a7:24:ea:f3:27:5c:88:3e:25:5f:bd:c2:70:8d:57:
         f6:2c:94:dc:26:be:a4:46:b8:9d:70:28:39:fa:1a:2a:8f:5d:
         ba:12:a2:1c:e0:ea:13:11:b8:d5:31:e2:01:85:4c:fd:57:b9:
         07:65:43:f2:4b:00:2a:5c:b5:92:fb:df:d1:a8:da:8c:18:eb:
         bc:bd:c9:4a:67:3a:46:bf:f5:82:d8:9d:b1:ca:46:8b:4d:cb:
         7c:e6:0b:f4:ab:f0:12:62:0d:d2:99:fd:ac:78:10:e6:c0:f1:
         2e:57:f6:81:df:7c:7a:34:da:ba:fd:63:05:08:cc:54:de:18:
         b7:35:1f:91:af:37:44:c0:40:d8:ce:8c:ee:bb:09:58:97:9a:
         d4:2e:fc:6f:7b:08:92:1a:41:86:c9:e3:24:b1:fb:82:e0:52:
         1f:47:8f:40:6d:30:85:59:7a:70:b0:d9:77:52:1e:4b:1c:6e:
         90:66:1b:f6:57:b6:6b:7d:24:8e:72:6c:1c:41:d0:2a:c1:6c:
         47:71:1e:3c:ce:14:74:f8:d0:36:a7:d5:6c:c1:c8:47:54:d9:
         9f:5e:48:c6:67:f5:c6:53:84:e4:65:9f:29:38:ee:a0:0a:bb:
         26:1c:76:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:32:15 2025 by rpki-client