Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3/7b19297c-ebc5-32a0-88ed-c3e7524e56e5.roa
File:                     7b19297c-ebc5-32a0-88ed-c3e7524e56e5.roa (raw, json)
Hash identifier:          j9YaSfefcqLPZKd8iuHAqZQIoGkMJnScwmJj9PK1ih4=
Subject key identifier:   2C:31:58:3F:65:8B:05:86:01:6C:DC:C4:44:D1:CC:C7:52:28:24:71
Certificate issuer:       /CN=55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3
Certificate serial:       010D0C9F4328584AC83B53379D351CD7D6FE0F00
Authority key identifier: 88:9F:BC:7A:6D:8E:4B:B1:51:08:02:A9:F8:0A:C4:84:C7:B6:9D:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3/7b19297c-ebc5-32a0-88ed-c3e7524e56e5.roa
Signing time:             Thu 07 Aug 2025 23:01:58 +0000
ROA not before:           Thu 07 Aug 2025 23:01:58 +0000
ROA not after:            Thu 06 Nov 2025 00:01:58 +0000
asID:                     401903
IP address blocks:        2602:81c:1000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:3b:53:37:9d:35:1c:d7:d6:fe:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3
        Validity
            Not Before: Aug  7 23:01:58 2025 GMT
            Not After : Nov  6 00:01:58 2025 GMT
        Subject: CN=3474350b-65fc-42e3-9a4b-762d841779e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:16:ea:bd:dd:f6:62:93:b1:c9:fa:12:7e:76:
                    a6:06:e4:b9:58:e1:18:fc:59:37:f9:b4:67:df:08:
                    98:a2:1a:03:6e:50:66:73:45:41:ad:da:7a:b4:bf:
                    a6:a7:8d:f2:3f:f9:c7:12:fd:4d:10:56:73:4f:77:
                    08:10:73:46:7e:11:dd:79:05:dc:80:fe:58:07:08:
                    5c:55:c3:89:da:3f:f0:42:20:fc:96:7e:3d:88:b3:
                    9a:dd:50:4a:4a:32:56:5e:43:13:88:dd:31:ed:5f:
                    b5:d0:5c:91:72:6f:33:46:0c:71:79:fd:db:38:4d:
                    ef:bd:6f:f2:90:0d:a4:f1:73:0d:d3:97:b8:0d:ea:
                    80:72:5d:ae:a5:32:c2:39:87:67:f2:4f:97:a3:c1:
                    43:e1:8e:d1:d6:9c:e5:27:cf:c6:9b:88:e3:77:fa:
                    2d:de:35:f4:98:31:a5:9d:3a:46:5c:2d:3d:c3:91:
                    b8:f3:3b:cc:11:91:9d:9f:ce:2a:21:0c:f8:0e:86:
                    97:51:e0:6c:ad:55:0b:6c:2e:2a:6c:08:8e:41:cb:
                    d9:4f:f9:e2:49:14:58:9f:a7:fb:21:16:12:66:84:
                    8f:c5:32:f6:17:41:55:d7:1e:53:0c:ba:23:5f:f0:
                    65:f0:3a:99:c1:b1:1b:98:6a:08:d6:6a:3a:66:1b:
                    97:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:31:58:3F:65:8B:05:86:01:6C:DC:C4:44:D1:CC:C7:52:28:24:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3/7b19297c-ebc5-32a0-88ed-c3e7524e56e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3.crl

            X509v3 Authority Key Identifier:
                keyid:88:9F:BC:7A:6D:8E:4B:B1:51:08:02:A9:F8:0A:C4:84:C7:B6:9D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/55a4ffe2-8a87-4d73-b2fc-3eff5e062ec3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81c:1000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:13:49:47:c1:4d:60:60:dd:7d:cc:f1:5b:39:e5:a6:f0:79:
         74:da:06:ca:82:50:06:c5:d8:06:9c:49:30:97:4d:2b:31:c1:
         a5:2e:52:4b:83:66:16:12:d4:b9:cd:f0:86:37:f7:a3:f0:ae:
         db:15:e4:a0:55:9e:3e:fd:3a:5b:c7:39:93:1b:ce:5d:57:f5:
         d4:4b:52:0c:04:63:d9:03:8f:7a:ec:c7:ce:c5:20:f9:6d:52:
         74:18:29:8b:18:89:5e:de:97:27:ef:18:d9:f0:fb:c7:0d:71:
         23:6a:cd:63:2b:68:74:52:17:00:53:7d:94:58:2f:e4:2d:42:
         cd:1d:88:88:dc:64:1e:e4:d1:dc:0a:e1:d9:9c:cc:f3:23:05:
         a1:93:d9:d5:76:ed:dc:c3:de:ed:09:05:52:f8:20:94:47:cc:
         02:f8:6a:d7:10:1d:df:60:cb:ed:56:cc:d3:2a:ad:51:64:d5:
         24:d9:4f:6c:7e:ac:56:53:84:92:c8:33:dd:d9:bb:a0:e0:b3:
         62:b0:b8:cd:07:56:76:72:89:7b:f1:2f:0b:ad:80:02:92:99:
         3f:0b:b3:fc:f5:1e:88:1e:74:fc:9b:c8:28:90:d4:65:64:04:
         bb:ff:a2:9a:56:22:d0:04:5c:c2:1b:07:70:6b:00:91:db:aa:
         89:33:4c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:34:01 2025 by rpki-client