Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/72c6a5fc-5997-3514-aaa9-9d610df32949.roa
File:                     72c6a5fc-5997-3514-aaa9-9d610df32949.roa (raw, json)
Hash identifier:          pbQFkQM2huyElsXphHVnTWPekQLXrB2FuK+NM8xTS6I=
Subject key identifier:   97:61:3C:D6:25:48:04:50:A3:8F:03:CE:4B:23:2D:82:1C:D1:03:2F
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F4328584A00DAC79853399838A0024C00
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/72c6a5fc-5997-3514-aaa9-9d610df32949.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        2607:28c0:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c7:98:53:39:98:38:a0:02:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=7932a94e-b907-4b71-a741-380b7ad4b87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:44:d7:df:5f:a9:0d:84:af:08:98:21:ec:be:
                    99:26:6c:1e:f2:f8:30:5a:4a:21:96:41:55:46:43:
                    8c:d9:dc:ac:6b:e2:8e:4c:ca:2d:e8:27:6e:8d:46:
                    f5:4e:f5:e1:0f:7f:b6:fa:f2:1e:88:77:25:e0:9c:
                    01:a7:5f:6e:9c:82:66:fd:3c:7a:a0:e9:f9:76:e5:
                    96:15:e9:58:8b:91:b2:9f:b9:82:17:da:99:ae:e1:
                    d0:86:86:e0:08:63:43:67:89:e1:fc:90:26:5d:fe:
                    bc:0e:df:51:e6:e7:d7:83:06:1f:6a:b1:d3:6f:6d:
                    ff:ca:a1:34:55:9c:67:4e:97:6f:bc:0b:45:d4:1e:
                    c7:33:8c:ef:6e:91:b1:36:95:d8:54:e6:88:6e:cb:
                    15:04:c4:aa:be:21:5e:f6:fe:1a:b8:bc:35:f7:31:
                    86:28:20:2b:63:8b:ab:21:d6:9a:57:06:b8:60:65:
                    c7:e7:4d:eb:8f:99:f8:db:ae:57:df:95:99:47:6c:
                    9e:a6:c8:78:7f:3f:9f:9f:86:d8:da:9d:1f:8f:de:
                    d6:a6:11:33:c1:d7:de:86:42:9b:cd:c7:c3:c7:50:
                    6a:80:7b:83:dd:74:76:e7:eb:76:eb:c5:23:95:94:
                    f8:b5:1f:01:34:cd:f5:0a:cd:09:c0:8d:3a:c5:6c:
                    cc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:61:3C:D6:25:48:04:50:A3:8F:03:CE:4B:23:2D:82:1C:D1:03:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/72c6a5fc-5997-3514-aaa9-9d610df32949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:28c0:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:68:6f:c4:50:62:b1:a8:81:b8:61:d1:39:b7:63:70:81:65:
         2f:01:e2:63:d3:f4:99:ea:42:59:a5:01:93:a0:5c:ba:b0:41:
         34:19:5c:64:e2:dc:6a:03:05:1c:de:c4:3d:4b:d6:df:9d:55:
         37:6f:9e:3c:26:89:f2:0f:a9:5a:4a:88:0c:86:c1:e5:c0:40:
         ce:09:59:b2:98:47:bd:79:ce:29:48:a9:0d:7d:95:cc:4c:8a:
         6c:bd:0c:76:71:08:d2:be:69:8b:83:b3:cd:09:bd:57:dc:91:
         57:b2:c4:d9:98:bf:db:ef:69:b7:cd:d3:57:d7:f3:d6:52:50:
         1a:c6:c9:bb:9d:94:42:d5:aa:01:62:cf:be:f1:01:82:1a:38:
         b3:08:60:18:d7:9f:82:41:1e:5b:c3:a9:41:0a:29:d1:92:93:
         85:08:b5:47:2d:5c:38:dd:f9:f9:d2:13:b8:26:43:d3:f4:38:
         20:87:66:a0:00:a4:b4:e2:89:7f:fb:53:5c:93:63:c8:af:3f:
         ae:42:79:dd:41:35:cb:f6:4e:9c:2d:ad:8b:e3:54:46:b7:15:
         3b:b2:34:b6:c9:79:9c:cd:50:a1:df:21:70:8f:73:19:2e:3f:
         ac:1a:94:ea:b8:6c:64:77:6e:32:4f:f9:cc:74:a9:3c:b3:26:
         29:1d:ea:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:12:25 2025 by rpki-client