Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42ed9af8-bb98-3354-8444-e10a4ecfafc4.roa
File:                     42ed9af8-bb98-3354-8444-e10a4ecfafc4.roa (raw, json)
Hash identifier:          n6fl1JR1kDHeOXYvV1u8ZNFcBpqLWohcyP2rpMD4exc=
Subject key identifier:   BA:A6:D9:DA:6D:0B:12:A1:76:34:A6:DE:05:8B:D4:FB:60:F7:96:46
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ADBCD1A2855825891812B54C0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42ed9af8-bb98-3354-8444-e10a4ecfafc4.roa
Signing time:             Thu 14 Aug 2025 23:16:03 +0000
ROA not before:           Thu 14 Aug 2025 23:16:03 +0000
ROA not after:            Thu 13 Nov 2025 00:16:03 +0000
asID:                     396982
IP address blocks:        2605:4300:3b08::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:db:cd:1a:28:55:82:58:91:81:2b:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 14 23:16:03 2025 GMT
            Not After : Nov 13 00:16:03 2025 GMT
        Subject: CN=78bbcd7d-3e4e-4182-b757-01a08c82148d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2a:74:8a:40:5b:9b:06:e6:9e:97:f2:0e:ca:
                    d8:6e:6b:11:7c:6c:94:4f:e8:85:81:97:74:7a:9f:
                    bd:42:c5:98:a4:34:79:22:78:b5:aa:18:72:92:7c:
                    fe:39:b2:11:b1:d3:09:2a:1d:17:47:f5:2f:47:37:
                    b9:4a:2c:61:d5:a9:c8:53:96:a6:bd:57:04:de:99:
                    ba:26:96:d5:3d:67:24:1e:8d:1b:b9:9a:d9:da:6d:
                    e9:35:15:29:67:05:fa:0b:b5:57:f9:0c:e1:40:13:
                    91:45:35:be:b3:db:53:b4:1a:50:7f:8a:89:c5:cc:
                    9f:5e:72:e7:78:ee:88:76:9a:18:a6:4f:d0:74:dc:
                    68:da:8d:0f:c6:c1:2c:55:e9:01:86:7c:ae:54:7d:
                    f1:98:93:5f:58:0b:4b:6c:97:9d:1c:f1:76:13:d9:
                    9b:7f:90:f5:41:a9:80:bb:17:91:dd:8d:9a:db:31:
                    4c:c7:5c:bf:98:0f:6d:fe:1a:1b:16:76:8b:45:3c:
                    56:2b:0c:a9:d8:ec:68:9d:5d:f8:91:dd:38:e4:7e:
                    55:7a:07:51:64:73:10:08:50:ec:37:c7:5d:be:9f:
                    2d:b9:a8:b1:e7:de:c6:b7:a7:a7:a6:d9:c3:c5:3c:
                    be:12:07:00:db:2e:3b:0c:12:20:7d:07:1e:74:3b:
                    62:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A6:D9:DA:6D:0B:12:A1:76:34:A6:DE:05:8B:D4:FB:60:F7:96:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42ed9af8-bb98-3354-8444-e10a4ecfafc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:3b08::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:bd:63:4b:3c:4e:1b:d7:63:e5:cd:b6:f4:d2:d6:7d:4d:37:
         07:6d:e0:05:8d:b7:c1:d1:7c:b5:20:e5:63:bf:1a:7d:62:50:
         50:ee:84:02:2e:61:a2:3b:eb:ef:4b:29:ec:07:b6:db:37:6f:
         13:f1:95:9e:62:93:86:95:da:27:f3:00:88:dd:fd:f0:e1:92:
         1f:11:79:29:e2:be:05:a5:6a:9e:07:f1:8b:88:a3:c1:98:c6:
         ae:cc:6f:43:c4:59:1d:36:08:2b:24:f8:91:af:a6:01:62:3a:
         ab:bd:69:92:65:de:b6:8e:21:1b:5a:bd:84:64:08:5f:a6:22:
         23:94:c6:36:6f:2c:49:c2:2e:a7:9c:7d:bd:5d:07:bf:fc:83:
         e3:5b:e0:05:dd:57:8a:42:fd:68:03:4a:c2:5c:67:05:b8:4a:
         4f:39:63:a6:1c:c8:a4:43:95:b7:43:0d:c6:ed:41:b0:d9:5e:
         b7:83:a6:75:f7:70:bb:e3:ee:72:66:3e:7b:f0:8d:72:88:4e:
         3f:44:f6:52:c3:06:9f:0f:97:4a:7a:7b:8b:78:86:0a:c3:01:
         3b:21:58:19:5b:f8:1f:9a:9c:98:7c:98:93:b5:43:fb:4d:c1:
         4b:20:3a:77:04:df:76:d4:cc:7f:e3:79:9e:ae:82:9d:33:ec:
         8d:12:12:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 08:44:02 2025 by rpki-client