Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d505fff-f719-381b-b822-2695a2e94aeb.roa
File:                     4d505fff-f719-381b-b822-2695a2e94aeb.roa (raw, json)
Hash identifier:          kBIXRcBp0jIlmYEiqsyZeoeF2TD8knv4w7iA2MrE4RY=
Subject key identifier:   6A:9E:A2:F1:8D:F7:4C:B8:AE:5B:CC:96:84:05:BA:6C:6A:14:50:82
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584A6C55D9411461EA2317640480
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d505fff-f719-381b-b822-2695a2e94aeb.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     400196
IP address blocks:        2607:8240:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:d9:41:14:61:ea:23:17:64:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=bd062994-1239-40a7-98c5-bd66ef2bfa31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:25:bb:73:e5:26:cc:ca:73:d8:65:68:77:7b:
                    75:d3:ff:25:f0:46:b8:3e:ec:36:74:9c:bc:a5:af:
                    b1:b6:b6:c3:10:47:8b:04:b6:b1:8b:91:34:9c:5f:
                    0f:cb:11:01:08:5a:8a:8b:40:82:2d:33:c9:76:49:
                    bc:f2:2e:b9:a6:af:ec:0a:eb:3d:cb:c2:4c:19:47:
                    46:ec:ca:66:ad:c0:fc:19:e9:21:dc:cf:77:85:46:
                    dd:2b:ab:a4:70:af:e6:a7:dc:6d:47:15:19:71:57:
                    8e:25:a2:8d:69:43:ff:30:66:cd:d6:80:67:52:4e:
                    3a:c7:7a:7f:4d:af:ad:1c:56:b7:f4:ba:1d:af:73:
                    69:1f:4c:e5:e2:d2:0d:39:1d:21:e6:87:13:15:4a:
                    e6:81:f4:33:cd:09:eb:30:93:75:ea:26:76:cf:54:
                    5c:75:57:f6:fd:68:bb:60:12:da:85:a9:74:ea:4d:
                    9d:c7:15:ec:81:1c:d3:35:07:a6:b3:a6:6a:0b:8d:
                    29:4a:b6:c4:74:97:a3:db:77:a4:4e:7f:3b:0e:3b:
                    9a:d3:90:f0:49:f7:e0:ab:73:28:0d:31:b8:34:5c:
                    7c:0b:88:9f:bc:b2:5b:ba:05:6b:eb:d3:6a:23:bb:
                    b0:2d:42:65:3e:0d:22:9a:5c:4d:ad:e9:5e:5d:94:
                    cc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9E:A2:F1:8D:F7:4C:B8:AE:5B:CC:96:84:05:BA:6C:6A:14:50:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d505fff-f719-381b-b822-2695a2e94aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8240:ffff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:5b:cf:e7:95:b4:ee:48:23:c0:1d:7d:17:97:f1:0a:44:a4:
         6d:e9:44:a6:08:33:75:bc:7f:4d:20:58:3e:a0:34:19:84:da:
         c2:7c:dd:a2:26:af:55:5f:8d:31:c6:54:cd:a4:d1:be:f6:b0:
         c5:fe:1c:35:e3:68:0d:83:b8:93:f7:30:e2:31:11:76:54:8e:
         85:36:3c:0a:92:cd:3e:5c:f7:f5:44:c5:f1:ff:e9:44:fa:23:
         a6:cc:5d:31:6b:1c:13:e1:43:59:73:2c:d8:8a:83:7b:89:d9:
         b8:c4:c6:31:20:46:3e:18:05:b1:4f:03:c0:7b:b0:57:b3:9f:
         1d:6a:64:9b:3d:77:c2:54:0e:db:4e:2b:34:33:e4:f9:5f:86:
         0d:44:cc:f1:2e:26:57:c5:dc:26:12:9a:f9:63:f2:5a:15:c5:
         c4:09:29:fb:ad:fc:83:10:3d:2e:a0:17:44:f4:3a:e7:10:fc:
         14:47:b8:a3:46:7a:5c:b6:0b:4a:ce:aa:de:ba:85:b7:ca:f9:
         9e:6d:db:f1:4c:5b:dd:a4:21:b5:ed:82:92:38:00:6f:70:dc:
         dd:22:3d:dd:de:10:41:1d:16:38:35:5e:10:61:81:61:36:74:
         8c:1b:eb:48:4f:fa:2a:80:63:41:f7:63:c5:02:46:7e:b6:c7:
         8e:3a:87:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 07:24:12 2025 by rpki-client