Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4947c9ff-09de-3bc1-8377-678f76db9c3e.roa
File:                     4947c9ff-09de-3bc1-8377-678f76db9c3e.roa (raw, json)
Hash identifier:          +YKICmom/kjFvMBJGnJ25Bq7YD/Nx8H/gDR9LRXhmCY=
Subject key identifier:   96:2D:09:7A:44:31:31:9F:37:54:6D:4E:5C:86:97:84:8C:0B:44:26
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B1814323A41A117862E0EEB60
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4947c9ff-09de-3bc1-8377-678f76db9c3e.roa
Signing time:             Fri 05 Sep 2025 13:27:48 +0000
ROA not before:           Fri 05 Sep 2025 13:27:48 +0000
ROA not after:            Thu 04 Dec 2025 14:27:48 +0000
asID:                     22516
IP address blocks:        2605:a408:31::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:14:32:3a:41:a1:17:86:2e:0e:eb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  5 13:27:48 2025 GMT
            Not After : Dec  4 14:27:48 2025 GMT
        Subject: CN=e0a71021-62ee-4eee-a914-6b0c2d9fd529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cd:35:46:e8:8a:86:ab:e4:70:bb:c5:7e:03:
                    58:c6:c6:6f:d0:fc:5d:e9:7e:48:82:53:e7:f5:11:
                    50:18:6c:f9:5c:be:05:ff:a4:da:28:cb:35:48:36:
                    9d:dd:f4:12:fc:e7:59:cb:53:b5:09:4b:5a:10:be:
                    27:69:49:37:24:af:70:dd:b6:9f:42:03:0b:08:c9:
                    43:62:45:34:2f:6d:99:f2:ea:e3:b5:b6:23:f3:f9:
                    e1:88:d6:1a:89:d5:bf:79:7b:b4:2f:ef:08:6c:00:
                    ec:23:a1:ff:b7:2b:5d:a1:c0:7d:74:5e:13:24:a4:
                    73:19:9e:f7:24:13:b0:dc:0c:60:31:52:00:d8:01:
                    6b:dc:2f:8b:ea:45:26:e7:10:4e:04:14:80:6b:72:
                    91:45:1f:60:03:1e:73:11:52:0e:67:50:2b:73:b1:
                    b0:de:47:33:c3:b1:9b:87:40:73:82:d1:6c:3c:d7:
                    44:9a:f2:a8:5f:a5:0a:ae:18:fe:b5:70:35:aa:8b:
                    65:c3:4d:fe:f1:59:fd:6c:93:91:c8:c7:cd:df:d3:
                    e2:57:09:f5:b5:1e:6b:8d:67:e3:d7:0a:1c:6c:36:
                    7a:ba:be:f1:e8:45:e2:e3:e8:37:48:4d:12:40:51:
                    3c:19:dd:4f:b9:a5:4e:20:e1:ac:58:1a:ec:44:c6:
                    03:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2D:09:7A:44:31:31:9F:37:54:6D:4E:5C:86:97:84:8C:0B:44:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4947c9ff-09de-3bc1-8377-678f76db9c3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a408:31::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d8:6a:74:2f:42:a4:d6:fb:e3:35:e2:81:1e:97:4c:94:1c:
         dc:15:e1:99:bf:3f:da:7d:f8:b0:e8:46:a3:d0:29:ad:83:9a:
         64:35:bc:0a:89:6e:af:dc:bd:0f:3f:ff:44:68:02:6f:5e:d7:
         6a:ab:9a:b8:1c:68:d4:e0:45:b4:75:52:4c:17:fd:cb:46:47:
         79:f5:f7:ec:7b:5c:e9:82:26:85:41:45:28:75:2f:c0:13:2f:
         86:22:bc:41:f6:27:60:dc:7f:ca:d5:ea:a3:d4:18:0b:41:f0:
         69:72:4e:82:36:db:b6:19:67:57:0f:27:f7:f8:91:0e:38:b7:
         57:d0:19:b1:da:9f:ef:70:24:c1:3e:48:ca:91:68:8d:77:4e:
         b4:e4:1e:df:11:50:0c:a0:21:5a:2c:ce:b1:20:18:35:9a:a8:
         a8:14:fe:81:7e:2a:65:96:c9:c1:21:d1:84:ac:5a:38:63:ad:
         9f:88:0f:38:06:52:0e:95:8c:20:a2:dd:1f:e7:69:de:0f:af:
         69:90:45:50:df:32:8a:7f:a2:b8:fa:e7:04:31:a0:cd:70:de:
         d3:d0:74:90:10:ab:cb:9a:64:90:9f:8c:5f:56:e5:ef:65:88:
         2e:3c:d4:8d:68:d1:40:5a:ac:59:d8:15:69:73:2a:1c:ab:61:
         fb:b6:9e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:18:48 2025 by rpki-client