Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa
File:                     c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa (raw, json)
Hash identifier:          G3i7AI+sZli5RmabC8L4JLdk/4tlRaImL8eCB8xvrL4=
Subject key identifier:   A2:9E:BC:69:8C:B5:10:0A:7D:F4:E9:38:20:EF:A4:3E:5E:28:13:8D
Certificate issuer:       /CN=435c5779-0e0b-4ca5-9213-6edddad9bc55
Certificate serial:       010D0C9F4328584A68260309BB60E2D451F46860
Authority key identifier: DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     54665
IP address blocks:        2604:4a80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:03:09:bb:60:e2:d4:51:f4:68:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435c5779-0e0b-4ca5-9213-6edddad9bc55
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=b7477947-cd74-4bb8-945a-d17ee9299af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:ec:f2:37:20:a3:15:c7:0a:d9:5e:66:dc:
                    d0:54:00:6b:07:a5:49:8c:c7:9b:93:02:54:fa:da:
                    a7:0e:bf:a0:30:93:2c:bb:7a:7d:c8:45:0b:dd:12:
                    fa:85:60:52:a3:c1:4a:bb:88:09:16:f1:64:10:dd:
                    10:92:97:93:1e:30:a7:7d:8a:3c:6e:86:98:9d:0b:
                    b9:31:77:c5:13:29:d0:43:a1:32:5f:2d:a7:0a:7a:
                    1b:1d:bd:26:0f:c9:dd:40:9c:3c:ae:cd:c6:bc:9f:
                    21:dc:0c:e3:03:b6:8d:1b:55:32:30:d1:33:61:ee:
                    1b:24:ed:00:c6:84:81:73:f7:18:32:6d:8d:5c:20:
                    c8:5a:e8:8b:d3:2f:37:8d:4e:1d:98:bd:df:2f:2a:
                    63:7f:ba:40:cb:e5:01:d3:fc:8b:ef:ac:76:7c:0d:
                    ac:f0:40:ef:ef:0e:59:e0:0a:30:9d:7f:ee:cf:b6:
                    a1:9d:40:d5:fe:ad:e1:d2:be:6c:79:08:c2:88:90:
                    41:7b:79:c0:c9:72:6c:cb:64:e5:a0:e0:82:8a:e3:
                    6f:9b:6e:a1:df:83:74:53:70:d0:de:75:fc:3a:88:
                    c6:18:a0:ae:71:6e:9f:df:1c:07:4d:ab:e9:c7:8b:
                    4e:9e:e9:42:28:bc:d4:56:fa:1d:0e:86:e2:d5:69:
                    f4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9E:BC:69:8C:B5:10:0A:7D:F4:E9:38:20:EF:A4:3E:5E:28:13:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl

            X509v3 Authority Key Identifier:
                keyid:DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b8:0c:2b:d6:e5:13:d1:b8:9d:89:0c:37:df:58:60:7f:18:
         b8:1d:a6:da:0c:fe:db:46:b6:58:54:4c:be:1b:26:82:f0:21:
         57:e1:d5:3c:14:6c:81:e5:bb:7f:4b:45:3e:9d:93:e8:11:00:
         bc:fb:db:e9:ec:c6:ab:b0:12:60:be:e5:6c:ff:f6:21:7d:59:
         f4:63:1c:2d:a9:59:18:7b:08:91:36:fc:a7:91:6e:5e:34:23:
         a8:a8:b8:8f:53:2d:9c:58:e3:4e:b7:e9:60:e5:21:e2:b6:95:
         ca:43:38:7f:15:f8:41:35:d7:cb:96:94:aa:8a:09:6f:5c:ab:
         43:91:08:49:72:20:0a:48:32:17:22:4d:77:5a:e3:f0:a5:63:
         54:af:14:84:76:43:c8:7b:1c:21:f2:a7:76:d5:54:71:86:31:
         3b:76:3d:9c:35:4c:dd:da:3e:d9:25:39:81:e3:5b:b3:0c:d2:
         e8:17:50:0d:96:a2:a8:51:91:94:f0:af:0e:21:2a:96:03:ac:
         c1:d4:bb:d6:d9:e4:b2:87:59:2f:b8:38:0a:9a:96:da:e1:4b:
         1f:5a:ac:5e:90:29:f2:18:4c:8d:0f:30:93:75:8f:d2:cf:c7:
         a3:7f:e3:fc:6e:78:4b:d1:67:15:28:96:32:e8:f9:d8:d6:17:
         a0:bd:5c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:09:33 2025 by rpki-client