Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/bc7f6c54-30aa-3602-8e8d-8d07be9e0bbf.roa
File:                     bc7f6c54-30aa-3602-8e8d-8d07be9e0bbf.roa (raw, json)
Hash identifier:          P23Q4qUy7Ogh12yL3kKAzyeFC3Kpst3tk+6tvVdkygI=
Subject key identifier:   60:A7:AF:95:C9:F1:1F:5F:15:2A:D0:D2:EA:D3:04:9F:3E:C5:59:BA
Certificate issuer:       /CN=8780f59d-efa1-4d8e-b7c0-66773735a31d
Certificate serial:       010D0C9F4328584A7E7B5B6D02770F933F23F0C0
Authority key identifier: 6E:AA:38:FA:81:26:FD:B9:F1:3B:FC:A7:1E:F9:74:FC:4E:6D:D4:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/bc7f6c54-30aa-3602-8e8d-8d07be9e0bbf.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     11711
IP address blocks:        2607:f068::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:5b:6d:02:77:0f:93:3f:23:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8780f59d-efa1-4d8e-b7c0-66773735a31d
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=03e67c61-ca3c-4e17-addf-2fbe35cdcd26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:da:08:ed:d5:1c:22:a6:43:32:d1:7f:32:
                    ee:af:2f:2e:df:af:50:56:4d:99:96:f0:be:64:0a:
                    8e:22:30:72:f3:89:39:61:f2:b6:48:92:38:e5:73:
                    90:06:c6:c6:e3:56:ae:6b:77:a9:ef:bd:ed:0a:02:
                    0d:d3:27:fc:3a:fc:06:07:5a:2a:a1:79:d9:b4:8b:
                    45:01:b6:24:bc:ef:3d:d1:7d:54:68:83:a4:b2:c8:
                    d7:55:2a:02:2d:43:bd:fd:89:46:0c:06:f1:76:9b:
                    ad:ad:8e:60:db:86:39:1a:1d:71:52:4d:40:7e:f8:
                    ea:9b:48:81:13:53:c5:a8:58:1d:fb:d5:f1:bf:00:
                    66:9d:39:18:6f:bd:66:f7:66:ad:c5:06:46:f2:61:
                    5f:be:fa:48:7e:53:10:9a:2f:55:8d:de:12:4d:31:
                    7f:49:50:2f:71:36:cd:4c:dc:20:9f:4b:c6:15:dc:
                    82:5c:73:6b:89:57:20:a6:21:e5:44:bb:0b:86:20:
                    b0:92:cc:3e:81:02:16:69:93:a5:3c:3a:ff:90:00:
                    74:af:63:14:1b:76:c9:0e:22:bd:1f:65:77:9c:b2:
                    ff:73:83:7e:55:03:f9:bb:2a:cb:f7:49:0b:da:e3:
                    b2:7a:54:6b:5e:22:f5:0d:69:c6:4e:57:65:46:0a:
                    9a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A7:AF:95:C9:F1:1F:5F:15:2A:D0:D2:EA:D3:04:9F:3E:C5:59:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/bc7f6c54-30aa-3602-8e8d-8d07be9e0bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d/8780f59d-efa1-4d8e-b7c0-66773735a31d.crl

            X509v3 Authority Key Identifier:
                keyid:6E:AA:38:FA:81:26:FD:B9:F1:3B:FC:A7:1E:F9:74:FC:4E:6D:D4:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8780f59d-efa1-4d8e-b7c0-66773735a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f068::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:c1:d7:5e:73:df:ea:54:3d:a1:bd:9d:f0:27:d8:45:78:56:
         36:03:6a:5f:30:12:7b:53:c6:37:32:2e:29:2e:f0:09:1b:bb:
         59:ae:35:a7:1a:c8:a3:c2:da:b8:1c:be:1b:82:e5:df:9d:f9:
         a6:4c:1e:b6:d6:9e:77:ae:48:1f:c3:ad:fe:fb:f4:8a:5b:45:
         da:fa:4d:cf:e3:f1:c4:79:d5:3b:e7:e9:bb:7a:7f:ef:3a:94:
         b3:79:82:92:0e:e8:db:12:a7:66:6b:bb:6c:9d:f4:b0:b9:f4:
         db:c5:8e:a0:66:5d:65:90:fb:99:d0:2d:24:1c:2d:bd:c4:81:
         a5:dc:9b:67:17:17:34:db:9f:f3:96:c6:ff:a6:f3:85:9a:f9:
         d9:7f:d4:4b:1e:9b:1a:c6:07:75:5d:79:97:24:e4:a6:ae:82:
         b1:0c:b6:68:db:a0:5b:7e:82:52:36:50:0e:48:05:57:26:67:
         31:5a:3a:93:3a:3a:ec:23:5d:6e:2e:1a:ea:2b:85:29:fd:ea:
         a3:ea:eb:e4:bb:0b:45:01:c6:31:11:ab:44:b9:3e:6c:bc:e6:
         fe:21:d6:42:99:06:55:5f:1c:71:cc:ce:07:be:21:c1:a6:2c:
         28:32:29:eb:f4:7c:a9:0d:81:61:6a:19:a1:47:b8:a2:b5:3e:
         21:aa:03:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:56:21 2025 by rpki-client