Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/76f20a08-edc1-360f-b8e4-c62f8ebb677d.roa
File:                     76f20a08-edc1-360f-b8e4-c62f8ebb677d.roa (raw, json)
Hash identifier:          fUztBUUq3jKbDKvkeut8WwUcg1Qey8tYEHrHN/VL48Q=
Subject key identifier:   43:3C:B0:8E:38:C6:53:23:65:12:2F:88:8C:ED:08:65:B9:0D:F8:03
Certificate issuer:       /CN=d414bd1e-af01-4ff2-92ae-ece02a34cdb9
Certificate serial:       010D0C9F4328584A268ABD016F029D70E4D0D200
Authority key identifier: 16:0E:3F:D9:3C:76:D6:B7:2E:B4:AF:CB:5F:C8:99:38:12:AC:7A:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/76f20a08-edc1-360f-b8e4-c62f8ebb677d.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     26141
IP address blocks:        2607:a2c0::/32 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:bd:01:6f:02:9d:70:e4:d0:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d414bd1e-af01-4ff2-92ae-ece02a34cdb9
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=9a3e3efd-cc38-44db-81a4-1d914272cc83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0c:67:46:07:00:e1:cd:1f:e3:2c:c2:3d:46:
                    f5:20:4f:c0:88:0f:6a:35:9e:7f:56:93:42:6c:ac:
                    3f:53:c4:85:03:48:3a:e4:80:fc:c1:36:d9:88:2f:
                    52:d6:58:49:6b:07:1b:83:6e:11:43:61:3d:02:89:
                    ed:8b:74:c3:9d:0a:6f:9b:e4:c8:43:a9:79:18:7a:
                    0b:ea:4b:7d:ca:1c:04:11:b7:98:0c:d3:0b:9c:6f:
                    78:7f:64:7d:c0:60:38:f3:73:ca:70:f1:03:72:95:
                    87:fd:76:ae:cd:be:7a:3c:9d:86:7a:7f:98:36:be:
                    6c:4f:2d:e5:2b:fe:e6:ea:27:e4:ab:fd:2a:d8:9e:
                    8e:f2:29:5c:99:85:21:3d:97:72:c2:3d:62:8b:c0:
                    72:aa:1c:e5:b0:4f:cc:f0:12:5a:66:cb:40:76:8e:
                    a4:e4:94:9f:54:c0:9f:4c:be:be:70:ab:67:61:a9:
                    ce:31:a5:9c:91:78:7f:2e:0c:c2:5a:1c:38:e2:17:
                    43:9a:06:1e:fd:97:b7:90:57:2f:9d:21:20:72:3c:
                    1e:4a:97:80:b9:92:1b:0a:8b:ac:1c:c9:02:bb:53:
                    98:86:08:d1:8c:c5:46:44:f7:32:5e:48:66:3e:07:
                    d4:80:0a:4e:3b:cb:ef:e4:42:11:55:21:18:45:30:
                    38:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3C:B0:8E:38:C6:53:23:65:12:2F:88:8C:ED:08:65:B9:0D:F8:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/76f20a08-edc1-360f-b8e4-c62f8ebb677d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.crl

            X509v3 Authority Key Identifier:
                keyid:16:0E:3F:D9:3C:76:D6:B7:2E:B4:AF:CB:5F:C8:99:38:12:AC:7A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:d4:17:0f:9e:6b:c6:60:27:3c:90:21:37:7c:90:9d:64:bb:
         45:fc:08:65:19:c7:ad:b6:1d:81:7a:0b:01:cb:e9:a7:d3:25:
         80:5d:3e:5c:11:65:f8:5c:7d:0d:e6:23:33:f7:73:b4:f8:23:
         14:d4:62:00:84:53:3b:51:a1:d0:d8:78:a6:72:a5:c5:a3:15:
         23:43:f8:7f:61:84:35:75:f1:01:1d:b9:ab:37:fa:31:a4:f4:
         54:f9:7c:06:19:39:f9:68:67:00:33:5f:ab:9d:c2:5a:99:2e:
         77:7f:c7:9e:28:7e:58:c1:97:c5:58:7b:08:25:ba:61:07:90:
         b5:3c:22:fc:2e:2e:4c:86:c1:db:bd:a9:3c:55:78:89:80:89:
         92:0a:c9:31:87:07:1b:7c:6b:01:0c:4b:75:6b:94:c8:42:da:
         d7:6c:d1:20:c3:23:41:2a:ad:e1:e3:8f:d7:ff:a4:6c:1c:ea:
         1a:a1:15:11:4f:89:9e:4e:15:1c:a2:45:59:d0:13:fc:31:39:
         a7:61:77:05:b6:26:7a:b4:53:e9:7e:0f:61:4b:44:d3:e5:05:
         cd:1d:e8:bd:75:51:d9:e8:d9:b4:fb:c4:f9:51:8b:fc:e4:e0:
         9d:5e:b0:b6:48:b0:23:0b:db:3c:85:e9:34:0a:4b:a3:0d:13:
         39:10:d3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:20:40 2025 by rpki-client