Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/f61adb1e-bc9e-34ec-80fb-4d5ecf11e1dd.roa
File:                     f61adb1e-bc9e-34ec-80fb-4d5ecf11e1dd.roa (raw, json)
Hash identifier:          5lj3D02uOpDBjw5bgEtR9W2seeKpVDIXQ6ADtNYeRfM=
Subject key identifier:   1F:0E:8B:6B:4B:FA:03:7D:CE:5E:42:2B:DA:4D:B9:C5:FF:D1:67:57
Certificate issuer:       /CN=eb3726d7-0f8c-4949-99b6-eecda94a0675
Certificate serial:       010D0C9F43285849F2E532FC6708E80CAB4EE700
Authority key identifier: 9E:F0:8D:44:A7:A6:26:F4:A9:17:81:5E:EA:26:57:FC:D8:00:89:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/f61adb1e-bc9e-34ec-80fb-4d5ecf11e1dd.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     194
IP address blocks:        2620:117:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/eb3726d7-0f8c-4949-99b6-eecda94a0675.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/eb3726d7-0f8c-4949-99b6-eecda94a0675.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:32:fc:67:08:e8:0c:ab:4e:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb3726d7-0f8c-4949-99b6-eecda94a0675
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=3dca90cc-556d-4b51-b64f-ed5c420d1aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:47:65:88:74:96:37:0a:02:30:e9:dc:ce:f8:
                    2d:82:b8:ba:b4:f9:f1:cb:20:0c:7a:5d:23:7f:12:
                    54:33:e9:70:85:96:7c:5b:6e:e6:c8:3d:e7:f8:73:
                    3a:37:1a:7e:b2:fe:5e:d3:62:35:77:a6:a9:da:eb:
                    4a:2a:0c:b9:24:ed:df:ce:1b:fd:cb:9e:79:90:db:
                    45:99:0d:16:ae:19:15:d4:3b:3e:c4:ad:31:f9:eb:
                    f7:51:76:4f:16:49:91:cf:aa:ca:8d:fc:31:ee:cd:
                    39:86:04:6a:69:18:a7:3b:dc:15:c4:e5:3f:c1:1f:
                    2e:8e:2d:c7:23:cb:46:eb:22:38:7e:8d:f5:bb:04:
                    ca:d7:c0:38:1c:2f:b3:1f:b9:ba:51:2c:b7:15:6d:
                    a9:88:59:33:5e:69:2e:33:6f:7f:bd:0a:ac:2e:38:
                    23:fa:03:39:38:e0:70:b8:1f:db:78:2d:a3:e1:e2:
                    4d:13:e4:ad:e9:52:9d:2e:20:9e:0e:b8:3c:88:e1:
                    28:6c:40:4b:4a:f3:c5:01:52:25:bd:19:4e:c4:4e:
                    4e:fc:b1:78:4e:93:ca:6b:92:65:34:b3:a5:3e:8c:
                    d6:2f:8d:b9:91:46:b6:f0:4c:56:26:ca:0e:b4:1d:
                    5e:33:13:fc:6b:19:30:46:db:3f:d7:69:e8:33:1b:
                    60:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0E:8B:6B:4B:FA:03:7D:CE:5E:42:2B:DA:4D:B9:C5:FF:D1:67:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/f61adb1e-bc9e-34ec-80fb-4d5ecf11e1dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/eb3726d7-0f8c-4949-99b6-eecda94a0675.crl

            X509v3 Authority Key Identifier:
                keyid:9E:F0:8D:44:A7:A6:26:F4:A9:17:81:5E:EA:26:57:FC:D8:00:89:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:117:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:3b:f3:de:78:ec:8b:72:3d:4d:58:91:da:e1:82:b7:e2:83:
         03:cd:7a:77:82:b8:ea:ed:fc:96:14:57:3a:53:e0:c5:48:56:
         ef:0b:69:64:e0:32:ed:0c:4c:51:c1:ca:b5:84:ef:76:b0:1c:
         47:b1:fa:7d:49:68:45:7e:67:76:c4:48:58:1a:2d:5f:83:5a:
         29:34:5f:bd:b7:85:8d:a9:40:97:28:51:4e:8d:f6:e9:d8:6c:
         87:d8:16:b9:ca:7b:7c:2a:7b:69:98:1c:4b:e8:7a:23:ef:e3:
         9b:a6:72:89:08:39:d9:7c:2b:cd:c7:26:f0:c3:b9:e5:56:51:
         cf:29:da:54:d8:f5:2a:af:f2:4e:80:87:a3:01:d4:d3:54:62:
         6c:2d:4d:d9:00:6e:59:e6:a8:46:99:10:8c:7e:9b:e7:38:0e:
         e6:03:9f:8c:23:e0:0a:42:c5:e3:5d:e6:78:f4:b3:83:06:3d:
         b7:68:ab:34:b3:11:8a:d2:96:2c:b7:9f:37:81:df:4b:26:31:
         db:47:e2:4b:60:18:17:5e:b3:56:a7:97:2f:ef:fd:10:89:f8:
         af:22:49:43:44:8e:89:ae:37:ed:63:27:ce:88:29:08:8b:84:
         80:07:f6:e2:3f:0c:94:80:e4:05:31:13:56:b0:f9:4d:b4:89:
         14:38:7e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:09:26 2025 by rpki-client