Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/907a2032-3d7d-36e2-bc36-8924c1c162b7.roa
File:                     907a2032-3d7d-36e2-bc36-8924c1c162b7.roa (raw, json)
Hash identifier:          2Nbn4GKa9NuHcb5HbCfWAECGhx2t2ePW4kVzK9G9eSI=
Subject key identifier:   AD:4B:97:3F:61:71:FF:D1:13:59:16:BC:9C:60:32:96:18:9B:2E:E6
Certificate issuer:       /CN=9f8abfb1-5f91-4570-a775-7435d3e52012
Certificate serial:       010D0C9F4328584A00DAC08305F3A9A9B7203B00
Authority key identifier: 40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/907a2032-3d7d-36e2-bc36-8924c1c162b7.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     53405
IP address blocks:        2602:2e7::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c0:83:05:f3:a9:a9:b7:20:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f8abfb1-5f91-4570-a775-7435d3e52012
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=66804a82-71b5-4062-b6bd-cd7d1b5420ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:55:11:a3:48:ee:3c:ea:2e:8f:38:8c:15:a4:
                    19:69:28:52:21:37:8e:41:6c:2a:19:ed:80:d3:49:
                    13:b4:fa:e1:78:71:fa:ae:00:74:84:14:f4:a7:01:
                    ae:1e:28:49:9e:e1:89:de:d0:19:f8:e1:71:e6:4b:
                    93:48:b4:1e:1f:7a:82:f6:91:c1:e2:84:1a:17:09:
                    77:aa:9d:a4:73:54:8c:a9:1c:7b:61:92:dd:d5:9e:
                    fb:6e:51:93:4f:72:10:41:c6:06:36:a0:41:1a:16:
                    4f:00:9e:5e:2b:7f:21:f7:b7:df:20:f3:89:5a:d4:
                    17:2c:af:d3:5f:03:d4:09:f8:89:48:02:28:12:24:
                    0c:34:db:48:b3:15:9e:75:52:e3:68:3e:9e:40:3d:
                    c9:fe:d1:0c:e1:e9:c9:e5:52:ef:3b:c9:c1:79:fc:
                    70:9b:e1:b6:b8:92:cd:5d:56:27:58:2e:7a:0a:84:
                    65:67:a0:f5:c5:bc:ac:b0:b0:c1:48:5b:bb:9e:7b:
                    cb:90:1b:78:c3:03:9d:35:bb:ab:9b:26:e9:4a:5b:
                    25:9e:5d:ee:47:23:37:05:30:73:5d:75:0c:b3:9d:
                    23:73:28:00:4e:4d:9a:c5:d5:b5:6d:28:47:6a:31:
                    82:9f:c9:f9:dd:88:f9:24:1f:7c:53:57:eb:4d:9b:
                    c4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4B:97:3F:61:71:FF:D1:13:59:16:BC:9C:60:32:96:18:9B:2E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/907a2032-3d7d-36e2-bc36-8924c1c162b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012/9f8abfb1-5f91-4570-a775-7435d3e52012.crl

            X509v3 Authority Key Identifier:
                keyid:40:25:3A:F9:1F:A1:03:19:E2:97:8A:59:30:22:60:98:D8:BB:2D:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f8abfb1-5f91-4570-a775-7435d3e52012.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2e7::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:f2:2d:f5:92:5b:2f:84:26:8f:4e:22:0c:31:60:58:58:db:
         09:57:7e:04:96:9c:3b:35:bb:2d:69:16:67:e4:51:81:f9:74:
         1e:b4:33:8e:de:2d:40:24:ca:f2:6b:e9:06:23:85:6e:25:5c:
         e1:3a:fb:7b:4a:3f:15:c6:22:6f:01:0e:d1:36:c2:39:82:66:
         42:d1:3d:08:c2:14:ba:99:bd:54:53:29:6c:b7:98:0c:42:ae:
         76:c0:79:40:25:99:f1:86:a3:39:e2:f5:08:f1:73:a9:35:4f:
         6a:25:83:2f:8d:95:57:46:af:f3:e1:13:72:69:40:4d:c1:ad:
         ee:5f:3f:55:ca:cd:0c:9e:7f:06:f9:02:3e:de:42:a2:45:d2:
         36:38:76:12:7f:e7:ac:b4:28:9a:c7:bc:a6:8c:a5:14:00:24:
         56:c8:56:cc:45:11:1d:91:e3:9b:d8:88:f3:f1:a2:8a:92:ea:
         94:f2:36:cc:27:6b:e8:dc:a1:54:84:45:08:12:e5:79:7b:d2:
         ba:4b:b4:8c:14:b7:9d:bb:75:a7:c7:e6:b6:79:a8:5b:b0:84:
         f8:73:d3:aa:1c:5f:6f:be:db:43:40:c3:e6:b0:2a:61:b6:39:
         8a:17:99:7d:18:5f:bc:97:30:44:d8:13:9a:dd:3f:22:8a:0a:
         0c:7e:ab:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:45:12 2025 by rpki-client