Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/0aa972d8-0e27-3bbf-8c3d-dfe70e4a216f.roa
File:                     0aa972d8-0e27-3bbf-8c3d-dfe70e4a216f.roa (raw, json)
Hash identifier:          ZWnVY/G4BVQjuAkSY3qvIjsdyk12k6vbehuFJ5kjhgA=
Subject key identifier:   CF:2D:EE:AC:6D:95:3B:B3:72:79:C8:A3:86:2C:62:15:D6:6A:B9:6B
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584A6F2073CAC85CC23F0F8EA080
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/0aa972d8-0e27-3bbf-8c3d-dfe70e4a216f.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     5650
IP address blocks:        2605:640e::/32 maxlen: 48
                          2605:640f::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:73:ca:c8:5c:c2:3f:0f:8e:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=b640bb77-a964-4cde-9aba-b22f4893b25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:69:fe:84:f0:a4:48:e2:a5:03:e6:6c:19:11:
                    b0:91:86:a7:a2:52:f8:16:96:c3:0b:64:f0:c1:51:
                    25:af:1b:dd:89:52:4e:de:63:a9:be:ec:01:81:62:
                    f8:58:7c:52:68:70:48:71:af:86:6c:91:8d:16:de:
                    09:de:89:c3:62:d8:bf:85:1f:49:3c:0b:74:36:38:
                    0f:bf:b1:fa:04:80:d0:89:19:73:1e:22:c7:6d:1c:
                    9b:4b:ba:b1:f2:18:97:3b:b3:fe:f1:d5:cf:bd:5a:
                    0c:f6:1c:a3:c0:d3:08:63:95:04:0f:09:ae:88:5f:
                    c0:27:85:46:3e:a5:1e:5e:cd:64:f8:27:1c:0e:54:
                    a5:e1:e6:43:08:d7:63:11:fc:55:a6:a7:29:d3:d1:
                    74:a4:00:14:3d:c0:77:c6:9a:a8:42:7b:4d:16:20:
                    24:21:99:ec:0a:be:d9:7a:f9:2d:2d:ac:18:cd:90:
                    88:cb:6c:a2:72:32:17:ee:b8:c3:3a:22:da:0f:54:
                    1d:b5:02:84:84:34:1c:75:8e:cb:87:e0:47:6d:be:
                    7e:40:43:65:62:f9:0a:59:5f:0d:93:13:6a:d2:bd:
                    2e:5e:38:84:30:a1:de:e0:02:ad:02:7f:71:75:7a:
                    a8:c1:1e:bf:b7:68:b9:f9:8a:85:56:a3:b0:83:63:
                    2c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2D:EE:AC:6D:95:3B:B3:72:79:C8:A3:86:2C:62:15:D6:6A:B9:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/0aa972d8-0e27-3bbf-8c3d-dfe70e4a216f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:640e::/31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:65:aa:d4:2a:28:bb:43:5e:48:b7:2a:c0:e0:f8:27:a8:fd:
         40:9c:cb:ea:4e:d6:ff:70:d3:20:4a:29:7f:1f:fc:91:a1:56:
         95:f3:65:83:55:a6:f5:43:ee:98:07:79:bd:49:9b:5e:87:83:
         e9:41:d5:4b:0a:5d:10:0d:dc:df:17:40:82:fb:4a:9f:15:07:
         56:e1:89:59:3e:e8:40:71:f9:dd:c3:84:d3:ac:be:51:ba:5a:
         ed:35:82:57:60:3d:3e:90:8d:c5:47:a7:3d:b0:da:f9:65:af:
         62:f4:14:f3:e7:1b:80:ad:2c:49:1e:f3:73:f8:0e:35:21:d2:
         44:3b:80:a9:91:0c:6e:45:66:c0:a2:42:39:7a:df:31:eb:6d:
         8a:3c:75:6d:83:ca:07:97:ad:03:e6:3e:8f:36:17:cf:5f:df:
         30:f4:27:5a:4a:3e:52:fd:a7:f6:10:2c:42:8f:d7:cf:40:75:
         03:2d:74:ec:e1:10:e2:fc:60:90:a1:7b:d6:46:f7:dc:4a:03:
         fd:fa:99:ce:b8:78:d2:ee:8a:70:58:0a:30:73:20:68:ec:5e:
         b7:33:58:c2:3c:c7:b8:27:cd:06:6a:48:3d:86:18:18:e5:e8:
         43:e5:51:96:bb:1a:bc:87:52:a0:67:34:4a:29:ae:14:84:96:
         77:09:2f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:09:57 2025 by rpki-client