Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/5d25e087-be39-300b-9ac3-0f9a2a629082.roa
File:                     5d25e087-be39-300b-9ac3-0f9a2a629082.roa (raw, json)
Hash identifier:          aym5t1oUnHzCMI9/s+K0K65HuCf1mSpfsliuJlD6ANY=
Subject key identifier:   99:58:5B:B2:95:F0:11:9D:5A:C4:F7:4C:C1:DA:B8:3E:49:E7:3A:97
Certificate issuer:       /CN=567ba016-7d2d-4729-a696-45a28ff7f6ec
Certificate serial:       010D0C9F4328584AB220DCA95D2D5E5911D91A40
Authority key identifier: D6:6E:19:18:0A:CA:D3:59:B1:E7:67:53:04:B4:DE:32:DA:8A:07:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/5d25e087-be39-300b-9ac3-0f9a2a629082.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     5670
IP address blocks:        2607:97c0:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/567ba016-7d2d-4729-a696-45a28ff7f6ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/567ba016-7d2d-4729-a696-45a28ff7f6ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:dc:a9:5d:2d:5e:59:11:d9:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567ba016-7d2d-4729-a696-45a28ff7f6ec
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=bc7ee8fb-1dba-45c5-b2ba-bcfef3ba46c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3f:a8:9d:c9:64:a7:e2:a5:ee:0c:2e:a0:42:
                    4c:52:03:ef:6f:14:a2:36:ec:a5:8f:f4:8f:c0:46:
                    9d:d6:b2:f0:6c:39:91:2b:61:7a:fb:24:43:be:0b:
                    a7:9c:a9:b1:c6:5e:af:ee:83:16:b3:41:35:27:ea:
                    de:bd:5a:56:1c:3d:9d:ef:3a:be:e0:b7:a2:e9:b8:
                    14:06:0e:dc:17:1d:76:9d:07:10:f9:a0:dc:e1:a3:
                    a9:39:09:1f:d1:a7:19:28:f4:cb:e3:a6:4e:7e:77:
                    7b:6c:01:79:7e:60:c6:a3:9a:20:d7:60:b5:95:76:
                    38:f9:a9:1e:9b:30:8b:45:67:1b:2b:dd:47:c7:b7:
                    95:f5:f1:b5:21:47:06:0e:2e:f9:53:d8:85:8f:8e:
                    db:eb:3d:b6:0e:7c:12:c7:01:fa:d8:b9:07:7a:0b:
                    d2:79:3a:33:d7:f0:42:41:9e:20:95:99:29:90:23:
                    71:aa:a1:5f:da:71:eb:f6:4a:db:ae:c6:ee:a5:8b:
                    47:41:32:18:9b:e9:bd:5e:5a:62:17:36:a2:0b:ff:
                    56:c3:95:65:1b:23:b8:cc:d4:fd:b4:22:dd:9a:1a:
                    fc:e5:85:7e:d7:60:b5:cf:57:1d:4f:83:0c:d0:3f:
                    88:3d:8f:f5:68:58:e9:e7:d9:ae:75:38:f1:a1:98:
                    56:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:58:5B:B2:95:F0:11:9D:5A:C4:F7:4C:C1:DA:B8:3E:49:E7:3A:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/5d25e087-be39-300b-9ac3-0f9a2a629082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec/567ba016-7d2d-4729-a696-45a28ff7f6ec.crl

            X509v3 Authority Key Identifier:
                keyid:D6:6E:19:18:0A:CA:D3:59:B1:E7:67:53:04:B4:DE:32:DA:8A:07:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/567ba016-7d2d-4729-a696-45a28ff7f6ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:97c0:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:97:e4:2b:8e:bf:c1:e0:f6:9c:2d:d2:a9:14:d8:00:a3:0b:
         00:1b:41:d9:81:a0:03:6f:a7:96:04:61:59:fc:5d:67:e1:52:
         95:c1:bf:c9:35:96:1c:28:1c:06:69:37:04:db:11:74:a7:f0:
         f8:1c:26:4b:c3:e8:fd:2b:62:73:3e:b0:46:8f:20:2f:68:70:
         74:79:fb:3c:9a:bc:12:2d:2c:a8:c7:e5:27:0b:1e:09:86:81:
         b9:8b:f2:7f:8c:3f:52:68:40:07:83:ec:ab:5d:f9:f8:e9:ec:
         71:82:52:37:cf:37:87:21:c7:e4:73:08:52:79:a5:b9:e5:e3:
         02:88:b8:a7:7f:56:66:ac:ca:a5:0e:66:c6:ce:d8:ba:e5:aa:
         55:54:dc:33:df:7a:2c:4a:93:ee:36:45:5c:67:a1:60:a6:98:
         2a:3c:0b:16:2d:eb:c7:d7:7e:85:6d:0b:4f:c2:fb:38:18:cf:
         3f:f2:8a:2d:b6:f8:fc:f5:dd:36:e4:37:dd:dc:e9:3a:6e:fe:
         42:d7:05:78:d7:cc:28:83:66:71:80:60:26:5d:ec:4e:8e:1b:
         d4:85:cc:fa:37:3e:d0:33:e5:27:e2:03:83:d7:6c:35:0b:a2:
         61:a2:78:62:94:d0:dc:16:37:f1:9b:23:88:b3:f3:72:e2:6f:
         7b:21:d4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 14:23:01 2025 by rpki-client