Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/eaa04c5e-f2b6-3bba-9459-d16cc6f50e06.roa
File:                     eaa04c5e-f2b6-3bba-9459-d16cc6f50e06.roa (raw, json)
Hash identifier:          Gv/s+Ykyxp2MwzKpZ0IXtfBc/qXruzNoOJFMKdcKMrk=
Subject key identifier:   83:D0:37:0B:B8:F1:29:B2:21:D3:BB:03:13:7C:29:31:AF:1C:1B:80
Certificate issuer:       /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial:       010D0C9F4328584B0A1166B2B944A1BAB5724500
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/eaa04c5e-f2b6-3bba-9459-d16cc6f50e06.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     393885
IP address blocks:        2604:4a00:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:66:b2:b9:44:a1:ba:b5:72:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=61ef6dae-e5d3-441c-9563-214e760fa7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a7:a0:39:02:ed:3e:2c:02:55:71:b3:04:04:
                    77:ba:aa:fa:22:78:3b:00:a7:87:1d:a8:a0:e8:f0:
                    7d:11:4d:6b:6c:40:6e:cb:9e:54:be:9d:09:4b:09:
                    94:35:a6:66:9d:87:42:19:82:cc:9d:96:0c:69:74:
                    85:82:92:6c:58:40:cc:00:0d:e9:9c:46:6d:55:85:
                    a6:ba:71:2e:24:9f:b1:19:8f:af:25:13:1c:f1:15:
                    2a:19:51:fd:48:7c:11:6b:32:48:cf:22:7a:7e:0c:
                    2e:7c:c9:5d:55:8b:08:1a:d5:21:13:fd:71:06:c2:
                    fe:ba:fc:a2:90:c6:4b:22:c6:f1:d0:13:5f:8b:9a:
                    76:12:8e:08:cd:b7:ba:db:f3:e6:c7:97:1c:64:a3:
                    3b:ac:84:31:be:3e:70:12:0f:96:03:d5:f7:93:8e:
                    5a:d9:8a:b8:8c:e6:f1:97:ab:b3:f8:f5:f3:99:f7:
                    d4:b2:e5:be:ac:ac:38:8f:ae:e5:c4:94:3a:97:1d:
                    61:09:4e:ba:cb:96:a6:86:5a:19:43:10:a4:f2:59:
                    16:21:7e:b3:67:34:a3:e7:7c:82:d5:59:50:fe:a4:
                    b1:46:77:4a:a5:26:81:af:8e:d7:d3:85:c3:37:59:
                    f1:32:ff:cb:fa:37:8d:2d:f1:b5:75:c5:a3:2e:1b:
                    fe:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D0:37:0B:B8:F1:29:B2:21:D3:BB:03:13:7C:29:31:AF:1C:1B:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/eaa04c5e-f2b6-3bba-9459-d16cc6f50e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a00:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:be:1e:1d:cb:a5:08:69:4e:2a:48:04:38:52:c9:ae:46:d5:
         75:cf:c7:87:21:a6:6c:0a:03:84:63:ab:85:b2:c9:1a:96:50:
         2b:09:09:e1:59:0f:3e:ba:8b:e6:18:d5:4e:16:d0:82:6a:64:
         5b:f6:8c:8e:2b:06:15:a9:de:59:dc:9d:91:42:bc:db:29:10:
         ec:d7:54:27:3f:d6:bf:f4:ed:57:b0:10:f7:1e:f1:4a:85:67:
         6d:dd:e8:23:11:98:3b:4c:0a:90:81:4b:e2:8f:46:38:31:b3:
         41:26:c1:74:ed:f8:08:7f:4c:d1:32:9c:2e:ae:8a:a7:5a:04:
         43:18:0c:d8:20:74:9e:5e:f9:c0:f8:42:8c:5d:99:6a:49:29:
         96:3d:aa:f2:2e:68:ee:34:8d:de:e8:e9:8a:d6:74:49:fe:35:
         fa:30:ae:ad:c6:70:2e:9d:b1:b4:bf:6a:60:05:6a:98:d1:dd:
         e0:cb:16:56:3f:c9:6d:e1:5b:ab:1f:c9:87:b2:32:ce:b8:0a:
         1a:d1:27:0d:53:f5:ed:93:81:99:77:06:90:d1:dc:8c:38:c3:
         29:d5:1a:43:62:b9:bd:c6:0f:03:13:35:6c:47:f4:c3:f8:57:
         68:90:8d:23:21:b2:77:e4:aa:0e:ef:fe:33:3a:73:d9:c6:65:
         5c:2a:06:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:41:43 2025 by rpki-client