Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2557f414-741b-30b3-ba65-5ff6e7738368.roa
File:                     2557f414-741b-30b3-ba65-5ff6e7738368.roa (raw, json)
Hash identifier:          R9ED3XRLGgKylHjkCaeu6eES7uHpM0YOsBtJqDuUXe0=
Subject key identifier:   E7:52:D6:93:27:AC:44:77:21:1C:79:2B:32:7D:03:68:06:F8:46:59
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584AB4EB7811E7FC7256CA7E6800
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2557f414-741b-30b3-ba65-5ff6e7738368.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     8560
IP address blocks:        2607:f1c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:78:11:e7:fc:72:56:ca:7e:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=9b744699-06c4-49fb-ac46-047fbafbb2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:04:32:30:8c:f4:9d:40:35:d5:ef:2b:29:
                    2c:cc:fe:37:26:be:07:2e:92:e6:a9:aa:06:09:4e:
                    50:01:b7:9e:c1:74:ce:4e:ee:c2:58:5d:d5:3a:62:
                    5d:66:5f:12:18:d5:94:7a:8f:48:7d:84:74:8b:e7:
                    26:90:9e:66:4e:e9:3f:ab:61:7a:80:b1:05:cd:f9:
                    34:89:e3:26:1b:05:d6:b7:52:df:64:78:2c:94:4a:
                    a7:b6:90:32:6b:89:ea:14:2d:b7:48:68:b5:81:a0:
                    f7:7d:96:2a:89:9d:95:9d:46:dc:1f:e0:95:36:94:
                    49:2e:61:81:08:3f:6b:2f:93:a5:24:54:cf:3e:18:
                    a0:56:c2:c1:49:4b:43:a2:16:14:60:18:22:ba:b8:
                    41:2e:d3:c3:d4:43:d4:a9:47:b7:76:e1:00:3b:ca:
                    c2:7a:59:3c:6b:0f:49:35:83:4b:ee:ec:83:95:1d:
                    2a:b9:84:7b:b2:83:92:25:d5:f7:43:90:2e:8b:c3:
                    ea:2e:55:40:f5:bb:2b:38:6c:70:99:81:1d:65:fa:
                    66:62:2e:2e:77:12:dd:e3:99:7f:ad:64:03:63:39:
                    6c:09:7b:18:be:c1:b1:59:bc:73:46:80:87:7b:a1:
                    6a:62:b2:0d:04:98:e9:a5:7c:c6:92:71:b2:f7:fa:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:52:D6:93:27:AC:44:77:21:1C:79:2B:32:7D:03:68:06:F8:46:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2557f414-741b-30b3-ba65-5ff6e7738368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f1c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:a8:a7:2f:86:4f:e7:85:e5:bd:fa:b6:24:02:fe:a2:4c:5d:
         b7:3d:1c:64:86:b5:41:64:3a:3c:95:6e:82:70:8c:79:3b:fe:
         51:e6:d2:aa:66:89:cd:7a:e5:67:22:63:71:3d:a9:27:35:1e:
         16:81:1f:44:97:5c:83:cd:b5:cc:6a:29:11:e5:1c:ba:eb:01:
         c9:61:a5:9e:04:c4:aa:dc:c0:eb:45:fd:be:63:16:66:07:17:
         28:e8:22:a4:3d:6e:40:63:4f:10:05:d6:79:e1:7f:53:41:e0:
         35:86:d1:60:0c:c1:f8:ac:29:65:da:a8:c3:17:64:4e:72:6e:
         cd:76:92:f2:38:1b:27:1b:29:ee:c2:ad:68:4e:ae:83:9b:07:
         4e:b2:f2:f3:b7:cf:a9:5d:67:6a:29:ed:6c:88:14:5f:c4:c2:
         4a:bf:0a:7d:c6:55:c9:58:d0:c1:5c:80:b2:a0:b1:2c:e9:29:
         e3:b0:57:e6:b5:59:fb:35:3c:d4:75:17:6e:cc:cc:0a:71:8a:
         d9:69:1c:4b:39:37:e8:16:af:59:85:30:99:a6:69:b4:3e:d5:
         15:fc:62:c7:d8:40:46:b6:4b:09:bb:e9:6e:85:5b:52:74:f7:
         fd:1e:4f:9c:27:f2:2a:5f:7f:44:62:c1:c2:78:e6:ed:6a:81:
         34:57:75:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:14:33 2025 by rpki-client