Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f5631e20-5f00-30fc-850d-69db3c55e904.roa
File:                     f5631e20-5f00-30fc-850d-69db3c55e904.roa (raw, json)
Hash identifier:          a2YVtMcDZQwp/NCeMKwor9qPVAlPLkNiaVovb34Ow5w=
Subject key identifier:   DD:11:C9:81:50:D2:5E:DF:53:19:12:F8:F5:36:1A:3E:13:6E:F6:4F
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584B33F1A6A54841086CA86E08C0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f5631e20-5f00-30fc-850d-69db3c55e904.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     62896
IP address blocks:        2604:7a0f:fff0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:a6:a5:48:41:08:6c:a8:6e:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=aaf4d646-62a8-4e2d-a514-c07a43701f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:af:a6:fd:6f:6f:7b:df:a3:ee:64:26:09:12:
                    85:ee:a7:80:f4:eb:bb:89:68:7d:a0:8b:51:74:1d:
                    fa:5c:08:fe:cb:46:76:ca:85:6e:7e:2f:4c:93:a3:
                    d5:cb:4f:56:3c:88:cb:f4:64:13:54:ec:4d:62:83:
                    0d:70:fd:30:a5:ff:74:63:6b:73:ed:0e:29:a7:20:
                    7b:99:12:24:18:5e:70:f4:91:74:b5:2d:17:06:f3:
                    29:d0:ab:99:f6:7f:03:a2:73:a0:0d:fe:75:55:d0:
                    d0:8c:61:0f:9e:86:41:81:58:47:25:2d:21:2b:ab:
                    17:dc:b7:6d:54:b6:ff:70:02:3b:6e:d4:07:8f:04:
                    e0:f2:e3:8d:7e:09:da:fe:6e:37:c0:af:96:71:12:
                    96:91:8d:38:4f:c4:d7:64:cf:4b:3d:5c:10:49:24:
                    55:29:23:08:16:25:a7:cf:64:7a:fd:c5:40:04:60:
                    05:c1:fe:96:d0:5b:9c:7d:85:76:19:d1:24:5c:a7:
                    32:e0:15:f4:b3:6d:7f:b6:8a:28:79:a4:43:ed:47:
                    cc:4a:18:c3:3d:af:7d:e8:45:1f:89:5f:d8:27:17:
                    2a:6b:c0:12:06:26:f1:77:b0:62:8b:a8:b3:88:ee:
                    aa:d4:20:08:08:bf:10:8d:7b:84:ab:fc:68:cf:7b:
                    6b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:11:C9:81:50:D2:5E:DF:53:19:12:F8:F5:36:1A:3E:13:6E:F6:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f5631e20-5f00-30fc-850d-69db3c55e904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a0f:fff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f7:82:1b:cf:ba:6b:a3:0d:8b:59:49:b3:1e:1b:35:2e:e3:
         76:74:7e:81:00:5e:b0:d9:9d:63:9c:15:66:dc:b8:61:5c:fe:
         6a:f6:f9:f5:93:65:fd:f1:66:03:f9:a4:ee:98:cd:ab:09:a4:
         d4:17:d1:75:8c:ac:16:be:c2:d2:41:7c:85:db:6a:bb:a9:da:
         ef:4e:b2:31:5d:3d:3c:9c:3e:9e:58:5c:6d:5a:46:3a:a7:ed:
         3d:93:bb:fa:8f:12:e1:7d:a1:f7:d4:63:3b:1d:37:de:05:a7:
         63:1c:9d:aa:20:45:0a:8f:57:72:19:f8:e1:cd:a8:e5:be:00:
         77:29:e6:58:91:16:4b:98:78:db:1c:87:75:09:8e:87:c7:99:
         a4:42:b4:c3:e4:92:33:ba:68:96:c9:58:c8:bb:f0:27:2c:f6:
         1f:fe:0a:db:50:ce:31:34:24:1d:20:4e:78:1a:34:51:a2:d2:
         54:d9:bf:01:e3:de:5e:72:bd:e3:06:84:4d:03:0b:c0:b4:1d:
         dc:28:2a:8f:13:a0:44:a2:9a:7a:c4:69:7c:5d:4c:2b:45:47:
         17:04:b8:80:32:68:5a:a4:62:c3:ee:66:8e:f1:89:7b:20:86:
         28:6b:e5:34:3c:8f:3d:d0:5a:4b:9d:a1:b2:6f:6c:17:e8:31:
         f4:23:69:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 00:47:18 2025 by rpki-client