Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/57424064-6a27-30a2-ad95-4bff0beaa8c5.roa
File:                     57424064-6a27-30a2-ad95-4bff0beaa8c5.roa (raw, json)
Hash identifier:          URx/0hcW60aaPBEgBXe9/VCgnLKbEBrO0n58lI9FEaM=
Subject key identifier:   93:CB:1C:F9:3B:6B:88:B2:E4:BA:40:9B:91:0A:7F:E5:54:AC:05:2F
Certificate issuer:       /CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65
Certificate serial:       010D0C9F4328584A0C05550832DEB3833151EEC0
Authority key identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/57424064-6a27-30a2-ad95-4bff0beaa8c5.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     10439
IP address blocks:        2607:ff10::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:55:08:32:de:b3:83:31:51:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=a0e95b0a-c21c-4032-af27-85dfff8adcf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fd:aa:2a:2e:d9:1b:32:65:9d:46:ab:32:40:
                    3f:da:0e:1e:e5:b2:71:81:53:0e:a4:cf:0c:07:fb:
                    7d:9f:e3:30:7a:5e:61:2f:87:28:18:39:25:91:6d:
                    6a:f3:3f:a3:3f:f3:2d:1f:52:e8:4e:b5:c4:04:cc:
                    b5:57:1f:0e:cb:0f:8e:2a:d6:06:2f:7a:00:4f:b8:
                    19:3a:fd:4a:25:15:24:e1:d3:b5:7e:97:ce:d0:ba:
                    2f:ca:9b:da:0f:e0:51:39:29:e6:cb:5c:96:12:11:
                    29:2c:5e:9d:1e:e0:65:55:0e:10:8f:8e:08:19:ed:
                    71:ee:7f:31:57:e8:29:09:af:5d:4b:e2:bf:85:40:
                    da:2b:68:0c:de:07:0b:ef:09:20:5b:04:f7:bc:87:
                    3d:d7:5b:25:40:1d:ad:f5:d9:72:12:6d:79:f7:6a:
                    7d:36:bc:d2:0b:42:67:81:17:6e:7e:bb:db:cf:e1:
                    c4:23:17:de:8d:0e:63:92:1b:f3:4c:96:94:a0:a1:
                    77:e9:8d:ab:63:ea:69:c7:6d:ed:37:c1:cc:97:2e:
                    cb:ab:f4:46:05:25:69:b4:ee:30:05:13:1e:72:00:
                    2f:72:1b:af:3e:e1:6e:58:31:d5:bd:8b:79:fc:49:
                    58:5e:ff:b2:96:2c:14:f9:a3:ce:b8:e4:3b:b3:8c:
                    40:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CB:1C:F9:3B:6B:88:B2:E4:BA:40:9B:91:0A:7F:E5:54:AC:05:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/57424064-6a27-30a2-ad95-4bff0beaa8c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl

            X509v3 Authority Key Identifier:
                keyid:FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ff10::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:69:8c:30:25:39:1d:c5:20:75:68:8b:8b:33:49:ef:58:45:
         79:37:da:51:8e:cf:76:ca:f5:d8:37:45:7c:ee:0e:1e:1f:17:
         61:ce:9c:01:db:f9:da:a2:fc:6d:2b:0f:83:8a:86:17:28:1a:
         4d:7c:c8:88:40:a3:14:07:df:fe:a2:4c:6f:fc:6e:b2:07:5a:
         ae:d4:81:23:35:53:61:73:d3:36:91:2f:8d:ff:dc:f8:55:14:
         85:af:43:95:d5:92:cb:87:87:04:33:f8:1f:89:3d:3b:f6:be:
         a3:51:4b:fe:85:d1:1e:55:63:88:59:9c:cd:95:ad:32:7f:c1:
         18:b0:a9:4e:81:af:0e:ba:c7:af:70:7e:2b:6f:7a:5a:ea:d2:
         2f:0b:fc:90:2f:20:a6:cd:ba:53:d8:f8:bc:0e:89:24:b6:c3:
         06:3a:89:67:e7:45:39:93:87:47:c6:59:ed:76:2f:ac:fb:69:
         fd:37:43:50:0b:0b:39:6f:c1:b0:d2:03:e0:d3:28:ae:dc:90:
         f8:af:cc:51:4b:cb:b8:f1:fe:c8:db:e3:d7:ec:b9:76:c2:f6:
         23:0e:30:2e:ec:7e:30:42:db:61:ab:40:8d:43:b1:9d:da:37:
         e3:d1:cc:e2:44:95:74:3a:31:06:cb:b7:d4:5f:c3:48:1e:9f:
         98:e9:a5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:57:33 2025 by rpki-client