Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/eaca4724-7534-3822-8b3f-ea442122afba.roa
File:                     eaca4724-7534-3822-8b3f-ea442122afba.roa (raw, json)
Hash identifier:          4kl32VQEuh7BP7vwBf6IvQ5JvYCVkcx1lVUKbTL6JHQ=
Subject key identifier:   36:A0:06:46:C9:5F:FF:BE:08:92:E7:13:51:AD:33:31:B2:B1:5C:9B
Certificate issuer:       /CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3
Certificate serial:       010D0C9F4328584AD32FA8312271E7F668F24C00
Authority key identifier: 8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/eaca4724-7534-3822-8b3f-ea442122afba.roa
Signing time:             Mon 11 Aug 2025 21:12:21 +0000
ROA not before:           Mon 11 Aug 2025 21:12:21 +0000
ROA not after:            Sun 09 Nov 2025 22:12:21 +0000
asID:                     8103
IP address blocks:        2001:520:1018::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:2f:a8:31:22:71:e7:f6:68:f2:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3
        Validity
            Not Before: Aug 11 21:12:21 2025 GMT
            Not After : Nov  9 22:12:21 2025 GMT
        Subject: CN=d6c11133-c4e9-4473-8e55-fff6b877dd8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:87:e4:12:ff:77:05:02:4e:1c:5d:24:89:32:
                    8d:b0:f0:ac:a3:2c:71:29:64:4a:71:b1:b1:19:0b:
                    91:da:a8:c4:56:4a:c0:36:c4:c5:9f:90:18:82:dc:
                    ea:fb:a3:da:72:70:fd:3a:06:9a:76:34:27:4d:fe:
                    06:de:74:92:cc:95:a4:96:9e:2a:b6:80:b1:29:e5:
                    d5:1d:d8:af:87:72:8d:ff:e6:2c:5e:0a:fe:bb:ab:
                    31:0e:cc:f6:9c:09:11:ac:0a:88:5c:1d:8e:17:6e:
                    fe:c8:31:a0:21:a6:08:ea:40:04:fc:b1:c8:de:4b:
                    34:e6:f9:56:6f:17:99:b2:77:88:cc:63:c1:20:d4:
                    ad:78:17:d9:11:c7:fa:0e:90:d0:25:28:45:5b:26:
                    c4:86:4a:93:5c:4a:16:63:9a:d8:8e:67:3e:a8:7e:
                    9f:db:c7:19:cb:6b:6d:5b:66:b3:c3:f5:aa:07:21:
                    bd:e1:e1:08:db:2f:73:18:47:f2:14:83:6e:88:9f:
                    1a:7e:5a:d1:ac:9d:1a:95:c5:82:7d:a9:c5:0c:0a:
                    92:f8:56:b7:ba:a0:ba:6e:d5:02:98:53:68:66:40:
                    33:71:a1:8a:7f:62:c5:a0:49:96:6f:11:7c:65:c1:
                    3f:28:21:82:89:21:91:61:bc:18:0a:6b:61:4f:f8:
                    ec:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A0:06:46:C9:5F:FF:BE:08:92:E7:13:51:AD:33:31:B2:B1:5C:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/eaca4724-7534-3822-8b3f-ea442122afba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.crl

            X509v3 Authority Key Identifier:
                keyid:8C:05:C7:5B:68:24:2C:00:C6:FC:D0:51:53:4F:91:FB:1A:B7:F1:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e6f3d63c-78c3-419e-9c5b-d937e0a0e8c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:520:1018::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a0:7d:3a:23:3a:14:96:7f:fa:ea:c8:2c:2e:b1:27:ab:23:
         13:50:37:16:94:bf:23:83:e0:2d:1f:7d:ab:40:53:ca:b0:0f:
         05:78:56:0e:7d:2f:3f:a9:aa:be:ae:e7:3b:9a:40:37:16:e8:
         1f:92:33:42:ff:50:e1:6c:f5:e7:9e:80:0f:6b:26:06:54:89:
         a2:e4:1a:da:61:80:85:4b:47:07:77:4d:58:45:7c:b2:2f:06:
         3f:72:7f:69:c0:36:7e:d3:dc:35:09:59:9d:47:2a:f0:47:fd:
         48:eb:15:31:3f:b2:b9:7b:e0:85:c6:26:3a:ba:cb:e6:de:c1:
         c6:73:98:c1:b1:cc:a2:0f:64:45:98:4d:28:aa:62:40:5e:e9:
         9c:b9:a3:a1:ca:83:15:02:ac:87:31:1d:1d:db:4e:3b:3b:fb:
         44:57:76:55:48:3f:bf:3c:ea:66:c6:a3:98:0b:cd:1b:75:b9:
         d5:88:45:2f:c8:e1:25:46:bb:0d:96:ca:dc:88:f9:b6:9f:d8:
         a8:ee:e8:7e:bf:bb:b3:2d:1d:0d:5c:b7:10:ef:c2:76:e6:1a:
         d3:11:e0:ac:6f:94:21:47:e6:9d:f5:68:76:ab:55:66:3a:02:
         88:5b:c2:01:5b:7f:51:d5:c5:6d:cb:f7:c1:52:73:e4:18:51:
         55:ec:70:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 19:31:00 2025 by rpki-client