Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/384920e2-45b6-3a50-85d7-5525abb96d6f.roa
File:                     384920e2-45b6-3a50-85d7-5525abb96d6f.roa (raw, json)
Hash identifier:          gBiJcA2NdkBRVZ9qTyLffLxBMTsfCoux+7zPpSStkdw=
Subject key identifier:   CD:C6:25:51:71:A2:F9:E9:B2:FE:2D:3D:B9:1A:D5:15:A9:D9:0F:17
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584B0B76D3D03ADFE0D77BC4C580
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/384920e2-45b6-3a50-85d7-5525abb96d6f.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     11232
IP address blocks:        2604:7a00:e800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:d3:d0:3a:df:e0:d7:7b:c4:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=169638b5-9901-4102-8133-f3d6a9179440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:16:04:b6:99:f2:64:04:ba:eb:75:aa:84:8a:
                    69:d8:a0:35:bb:b3:03:68:bb:60:f3:e6:30:e1:77:
                    2e:7c:30:a2:b8:41:bb:39:94:5c:d9:4d:f2:e8:59:
                    ef:fa:78:91:92:c0:a7:bc:ec:52:3f:91:c2:b0:59:
                    aa:9c:02:30:f3:53:d3:86:c0:b3:91:be:5e:4e:ce:
                    f7:a4:ad:e7:b4:66:09:41:a3:4e:34:ee:36:11:2d:
                    b0:cb:59:ea:cf:03:0b:c8:46:6e:f8:96:91:2c:14:
                    b6:dd:fb:59:70:bf:e6:94:3a:37:f2:10:7d:d7:7f:
                    87:78:d8:d0:5d:88:6b:6e:e5:9c:4c:3f:fb:ef:34:
                    76:5b:fc:8d:3f:a6:94:92:cc:69:35:cb:85:38:5d:
                    b3:19:e1:19:a7:fd:8b:76:fd:ef:6e:5f:7b:4f:f3:
                    8f:b4:4c:0e:a2:22:36:1e:ef:4e:83:7a:32:f2:ef:
                    d7:16:c8:6a:82:6f:1f:98:0d:20:f2:b7:8c:05:2a:
                    72:02:53:0c:8b:7c:72:32:42:91:d9:42:09:9d:98:
                    26:b9:30:99:66:d8:df:f4:94:b2:94:22:63:53:4d:
                    39:f9:b3:c4:26:5d:2a:86:45:9c:8f:33:6f:d6:be:
                    c9:a4:45:57:21:c0:23:24:4f:68:5c:b8:47:65:f9:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C6:25:51:71:A2:F9:E9:B2:FE:2D:3D:B9:1A:D5:15:A9:D9:0F:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/384920e2-45b6-3a50-85d7-5525abb96d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a00:e800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:bd:61:b8:33:4c:85:46:b9:09:3b:13:6b:f6:94:31:64:38:
         be:5c:d3:e0:9b:57:7f:20:02:da:21:a7:90:3e:3b:b2:a3:f1:
         c4:b1:fc:f3:95:80:88:dc:35:0c:22:9d:ce:a7:1a:3c:ff:68:
         51:8a:db:7c:2c:43:30:11:5b:61:bc:49:80:f4:b5:04:75:04:
         90:1d:11:6b:06:a2:a8:a0:d1:be:af:13:75:23:82:d4:6c:5e:
         95:26:d6:32:aa:83:47:5e:bb:48:0b:8a:46:cc:c7:6e:a1:45:
         c6:d8:76:6e:b3:05:2f:92:60:7e:ae:7d:f8:8a:10:77:86:f4:
         9e:98:55:1b:48:bc:19:ce:a5:d4:0b:99:40:5a:7a:d9:67:48:
         75:78:44:61:19:2e:cd:e0:18:24:4a:8b:e5:7f:ef:2e:14:65:
         aa:fe:74:8b:c5:83:80:96:0a:8d:66:9d:a1:74:4d:f8:32:6d:
         7c:29:03:b9:bb:91:08:ab:83:8f:ed:e0:6c:7c:95:86:ee:d0:
         75:12:17:17:c5:7f:b9:6a:e2:8e:a9:5d:b4:29:fd:9c:fe:72:
         db:23:96:2c:2e:5d:0a:ed:e3:28:57:5d:0f:ee:de:db:fe:34:
         ef:08:de:fd:37:2a:6c:8b:f2:ca:01:1d:7f:fe:c7:66:21:9e:
         9a:01:f7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:43:41 2025 by rpki-client