Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/7750dbea-23be-30cb-a5c2-247a4b108e61.roa
File:                     7750dbea-23be-30cb-a5c2-247a4b108e61.roa (raw, json)
Hash identifier:          1WVCQc1RpS3I3WZsvBvtmPHN++mGHQHCdSSezYz002Y=
Subject key identifier:   09:7F:56:32:FB:CD:3F:55:5C:1B:01:64:5A:DA:A5:5F:08:A6:A9:73
Certificate issuer:       /CN=8ce84fb2-c539-46e7-8212-12b9730afeba
Certificate serial:       010D0C9F4328584A0C05545E86B97BD2453CE480
Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/7750dbea-23be-30cb-a5c2-247a4b108e61.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     398464
IP address blocks:        2606:8940::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:54:5e:86:b9:7b:d2:45:3c:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=fd5ac966-a431-457a-8a8a-832bbeb7ff5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0b:fe:57:bd:a0:ab:0f:2d:1a:b2:e5:55:1f:
                    95:f4:22:38:19:a1:f9:7b:8d:b9:b7:41:ed:86:1b:
                    3f:ca:7a:f9:97:8d:40:f1:10:c8:e0:99:24:91:77:
                    ab:55:49:fa:1f:8c:d4:c5:1b:b7:a1:c8:29:64:40:
                    b5:f3:85:8a:68:8d:41:47:13:2b:01:e2:de:72:b5:
                    10:84:90:f6:7f:eb:7e:51:11:c5:32:af:2e:67:0d:
                    eb:ca:46:37:dc:1d:15:90:2b:a2:d3:6f:b3:05:9a:
                    67:38:05:cf:22:3a:87:fa:d8:6c:8e:ba:cd:1c:75:
                    f7:9e:26:a7:dd:63:53:2c:40:e5:a6:e2:67:6f:1e:
                    1d:5d:47:12:e6:e4:e5:13:76:6c:57:c5:dd:2d:86:
                    6d:8b:6c:88:12:13:3f:4b:e4:a4:b0:26:75:e4:bd:
                    1b:02:f2:9c:c4:b6:21:64:6b:1d:34:4f:3e:19:c4:
                    5e:f6:d5:eb:c5:39:25:e7:1e:53:68:98:18:bb:09:
                    62:7d:b0:5a:c9:74:40:c9:bb:98:16:4d:f9:1f:d7:
                    00:34:13:d5:89:13:61:50:02:fe:c5:29:8a:a7:f0:
                    91:4e:c4:99:ae:ba:61:ed:f3:64:57:55:3c:05:7a:
                    9c:87:d7:e0:ab:0a:26:07:77:65:24:63:80:af:ab:
                    d1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7F:56:32:FB:CD:3F:55:5C:1B:01:64:5A:DA:A5:5F:08:A6:A9:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/7750dbea-23be-30cb-a5c2-247a4b108e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl

            X509v3 Authority Key Identifier:
                keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:7f:24:7f:10:d1:18:08:63:2e:11:3c:4b:5f:f3:92:68:9e:
         37:91:46:82:a8:0f:5f:81:ce:95:bf:25:6a:c3:9a:82:8b:9f:
         c2:9c:34:48:8f:7f:31:06:70:7b:46:98:e1:58:18:53:ca:2d:
         e6:d2:a1:0f:88:61:24:73:46:b8:90:cb:43:c7:36:d4:0e:4a:
         07:8c:7a:fe:b6:fe:a5:1d:6e:49:17:08:6e:4e:1b:7e:42:48:
         94:2a:77:19:d0:fd:03:67:8d:53:63:4e:2f:b9:a2:46:6b:04:
         ef:3e:78:1a:fe:08:58:fc:ce:fb:f7:c4:95:69:94:d8:eb:bf:
         7e:99:c4:71:a9:c9:6a:ce:6a:7b:be:71:5f:bc:94:9b:d8:6a:
         db:a8:ed:1d:47:70:e4:d8:54:4e:8c:42:83:c9:23:7f:71:e2:
         1f:50:47:f7:1b:47:28:03:7a:93:01:44:1a:89:ff:c3:08:06:
         e0:ec:11:8d:e3:98:b8:45:e2:86:01:b7:5a:c9:a6:b5:62:75:
         1a:52:87:2d:a3:74:8d:a4:22:a6:57:0c:a7:44:68:94:8b:5e:
         62:8d:70:ff:f1:cc:fb:b0:b0:da:71:61:c5:e3:2b:8f:f4:f1:
         e5:05:12:33:27:a9:03:bd:7a:e3:c3:82:76:b4:f2:91:e2:c7:
         dc:5d:94:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:06:01 2025 by rpki-client