Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/f3eb19d5-af1e-3d62-921a-950796610e1c.roa
File:                     f3eb19d5-af1e-3d62-921a-950796610e1c.roa (raw, json)
Hash identifier:          giZELWrStk3Et8GnOR/OjiCr8TKDfxASwOnQyd5v+Ww=
Subject key identifier:   0E:BF:C1:6C:5F:3B:DF:31:73:A6:45:D5:CA:A1:E6:E1:04:95:3B:47
Certificate issuer:       /CN=c266fc5e-8a05-4885-8e18-2330a83fc5f6
Certificate serial:       010D0C9F4328584A6826099450F52D9F5645E600
Authority key identifier: CD:16:19:DD:66:99:8A:39:E4:FC:4E:B1:24:2B:A2:C7:63:72:07:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/f3eb19d5-af1e-3d62-921a-950796610e1c.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     393581
IP address blocks:        2620:1fe::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:09:94:50:f5:2d:9f:56:45:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c266fc5e-8a05-4885-8e18-2330a83fc5f6
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=5dbb37ab-3c29-4876-b219-b70614b7cbd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:36:23:4d:eb:92:de:97:c8:0a:23:4a:f6:20:
                    bf:3e:60:fb:ca:b1:fe:6a:f7:60:d1:e3:66:ab:33:
                    5f:9a:28:9f:d5:78:b2:8c:4b:29:3f:23:7e:e2:7d:
                    18:f8:9d:c1:2d:d1:39:33:2c:86:b6:36:9d:53:df:
                    14:0d:6b:fa:c3:63:bf:d4:e3:26:17:11:54:83:25:
                    87:9f:52:92:3e:c2:f3:29:e1:4e:ed:b9:44:b6:25:
                    a5:26:49:cc:d2:e1:9f:38:c5:24:8e:36:c6:e0:05:
                    57:fe:19:85:29:4d:61:4c:49:3b:1e:e2:33:e7:e0:
                    d6:af:be:50:de:3b:59:40:67:4c:2e:20:b5:7b:1e:
                    34:cf:a5:f9:5e:04:21:66:74:43:04:87:e8:0e:da:
                    fd:4b:ea:51:ac:f7:46:0b:20:d1:70:c8:06:3d:b8:
                    06:9c:f0:2f:2f:25:01:30:a7:45:40:b2:19:dd:f1:
                    59:9e:b9:e5:6d:8d:a2:1b:0d:eb:c8:ca:9a:18:cc:
                    71:41:e3:07:ea:8a:25:3b:54:c1:74:65:65:45:a0:
                    b2:d0:96:4e:95:c3:08:15:1e:d2:74:f9:8d:ee:a2:
                    ab:ed:e6:71:51:da:43:2d:a8:e8:ba:f7:e9:a0:39:
                    30:c6:6c:f0:3e:b6:68:08:1e:24:15:db:f9:7c:e9:
                    5e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BF:C1:6C:5F:3B:DF:31:73:A6:45:D5:CA:A1:E6:E1:04:95:3B:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/f3eb19d5-af1e-3d62-921a-950796610e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.crl

            X509v3 Authority Key Identifier:
                keyid:CD:16:19:DD:66:99:8A:39:E4:FC:4E:B1:24:2B:A2:C7:63:72:07:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1fe::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b0:3f:4f:19:38:6f:ba:23:02:74:5d:bf:bd:50:8d:51:d0:
         fc:2b:20:9f:dc:40:4c:76:8c:a3:58:23:ba:1a:4e:36:56:5d:
         ce:d2:2f:38:b1:5e:27:a8:e7:c6:91:24:0b:83:31:8a:0a:db:
         60:63:82:07:a1:0d:db:cb:34:99:2d:c4:3c:2e:26:0a:a8:9b:
         f9:aa:2c:cd:1f:38:3b:81:83:07:da:e4:25:1f:57:21:48:ea:
         e7:85:2c:fb:6e:14:08:b0:ec:5b:67:2b:23:2d:7b:40:34:82:
         2c:a2:15:1b:ec:1f:e5:ec:55:3a:76:c5:b2:ea:f4:2b:37:91:
         05:91:cd:1b:47:8a:57:dd:4f:0e:77:79:65:23:f7:38:16:a3:
         44:01:18:32:37:cd:17:3f:96:e2:db:bb:c5:5c:48:64:34:a1:
         5f:36:76:7b:64:2a:bb:7c:2a:40:4f:fd:64:6a:dd:46:87:5c:
         27:78:12:3f:f0:e7:0d:c8:68:34:7b:74:63:e9:6a:2a:99:bb:
         49:e3:61:e1:4f:bf:0a:02:18:54:a2:81:02:a2:6c:30:91:f7:
         f3:ac:5b:89:25:49:cf:b8:cb:9d:90:6f:d6:38:4b:1c:03:08:
         41:de:30:41:9d:c3:3d:fb:6e:30:37:bd:cc:bd:db:8f:94:b4:
         c3:cf:1c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 09:30:11 2025 by rpki-client