Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/e5d9b7b7-221f-3eee-b52b-b8f95c278eb1.roa
File:                     e5d9b7b7-221f-3eee-b52b-b8f95c278eb1.roa (raw, json)
Hash identifier:          kkFgeFajPSPV8OyTUFaYqhdCBuAgUP3W0Q+zhzQa010=
Subject key identifier:   86:71:4F:EC:32:1B:70:9F:7D:79:10:B0:28:01:8C:EA:8D:F7:0D:40
Certificate issuer:       /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
Certificate serial:       010D0C9F4328584A00DACDDD79547C779AA5C640
Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/e5d9b7b7-221f-3eee-b52b-b8f95c278eb1.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6597
IP address blocks:        2607:f948::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:cd:dd:79:54:7c:77:9a:a5:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=a38a56f6-4ad6-414d-b7dd-c47b32183c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c6:72:e2:6c:f7:ad:9f:69:30:b9:95:5d:23:
                    f2:fd:27:84:0d:c8:82:15:ed:02:db:ad:89:00:03:
                    41:d1:7f:7c:a4:59:b7:7e:34:41:24:e5:1e:ea:4a:
                    90:4d:db:93:4d:8f:bd:c2:3e:6c:16:72:ab:42:1b:
                    6e:e2:ed:76:f4:3f:21:aa:ae:7d:38:ce:e0:db:43:
                    27:88:b8:e0:a6:35:0e:bb:48:90:d1:40:95:cc:da:
                    28:99:da:c5:5e:07:0f:6f:63:69:9c:2a:cf:b2:a8:
                    7b:e7:d2:ed:c0:9f:ed:79:0c:29:1a:1c:36:fc:b8:
                    f8:61:f4:0d:34:fb:22:58:b3:ed:2b:7c:95:24:90:
                    f5:d5:7b:08:18:e4:fd:52:b8:1b:6d:4c:dd:68:1e:
                    78:06:8e:83:5d:6a:2b:6f:5f:d1:40:5a:88:8f:a5:
                    fa:21:59:ba:b3:85:55:17:c6:27:15:50:7a:a9:de:
                    46:07:63:22:c3:1c:37:77:ad:cf:8e:8b:7e:03:17:
                    2a:84:f4:32:ba:70:29:5f:77:88:e4:26:68:bf:d9:
                    85:3a:04:18:42:8c:35:89:76:78:74:b9:64:92:ed:
                    b5:60:10:50:b1:c9:17:ca:fc:39:cb:6e:a9:cf:c5:
                    8d:8e:ae:13:61:4e:a4:fe:80:43:bc:d3:58:01:49:
                    26:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:71:4F:EC:32:1B:70:9F:7D:79:10:B0:28:01:8C:EA:8D:F7:0D:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/e5d9b7b7-221f-3eee-b52b-b8f95c278eb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl

            X509v3 Authority Key Identifier:
                keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f948::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:3d:1a:69:13:41:4a:3f:48:5f:1c:9b:b8:ab:76:d3:0f:cf:
         c8:5e:3b:fa:b4:7e:af:75:1e:b0:15:d6:b7:86:7d:c8:ae:f7:
         d0:85:b4:dc:44:bc:7f:c0:62:13:ed:38:c1:dd:7f:c3:03:1d:
         ee:6c:05:fc:c7:99:0e:ef:ff:59:ae:27:f7:dd:16:b2:86:5f:
         a3:95:3f:c4:8d:e2:d9:7f:1d:cf:6f:18:59:d2:0c:67:ce:b5:
         34:8c:1f:c7:30:4f:4e:d0:ad:4d:44:42:89:55:6a:be:9f:0b:
         f0:10:56:61:25:30:44:5d:91:f2:54:34:c5:2a:d9:b9:e7:b4:
         27:a7:ec:91:c1:23:eb:a7:9e:05:1e:b5:76:86:18:68:df:71:
         a9:9a:bf:3a:90:1b:87:84:6a:e0:95:c7:41:1c:7a:05:f8:43:
         55:b0:e4:02:6e:fc:d9:25:a7:8d:47:c3:3c:ac:da:1c:d2:41:
         a1:87:61:19:6d:3d:17:e4:6c:3b:09:3a:cd:fc:de:d2:98:6f:
         94:b6:a5:a5:c1:31:51:61:59:f5:50:63:df:9b:c9:f2:20:dc:
         26:3b:24:6f:4b:4b:02:f8:f9:22:d5:fd:de:01:7a:0b:64:69:
         c3:dd:04:1d:4d:5a:3a:e4:8d:85:7e:42:39:af:d2:5d:2e:06:
         3b:be:1d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:03:35 2025 by rpki-client