Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/15be8826-5265-3b8a-84c5-09e69fbcbd61.roa
File:                     15be8826-5265-3b8a-84c5-09e69fbcbd61.roa (raw, json)
Hash identifier:          nYamwiEyiLHiPvyRqimMpsBjyKJUep6YWvspvVQcAxc=
Subject key identifier:   86:84:61:F8:E4:8B:E9:D8:9B:DC:6C:C8:1F:70:23:C7:61:9D:CD:28
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F43285849E2251B92A24B2C59EC381CC0
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/15be8826-5265-3b8a-84c5-09e69fbcbd61.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     10929
IP address blocks:        2605:9000::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:1b:92:a2:4b:2c:59:ec:38:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=fa39a685-8111-448d-94d4-4e7245ac1375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a0:d0:ec:d9:2c:c2:ce:ca:d7:7b:62:27:e3:
                    2f:5f:17:d8:59:fd:79:69:a6:05:18:e7:17:db:a7:
                    2b:23:03:f0:15:a0:b8:2b:99:bd:96:cb:dc:f3:f9:
                    45:5e:0f:1c:8b:0b:76:dc:79:4d:53:a5:7a:d0:39:
                    b8:18:20:23:e9:ff:09:51:a0:b8:42:6e:7c:79:28:
                    27:b0:48:6c:7b:77:b3:30:8e:da:5c:4e:4f:af:c0:
                    92:84:b2:fb:4b:10:60:3f:1f:d0:83:8a:43:93:fd:
                    42:e7:01:ac:12:bf:dc:2f:29:2f:8d:32:98:0b:a1:
                    ef:c4:4c:d0:6e:f0:c0:43:17:ad:06:97:8c:f0:4e:
                    06:64:f7:41:75:8e:e1:99:12:27:3e:25:52:28:55:
                    bc:73:07:16:26:1a:5a:41:2f:88:2b:60:34:be:43:
                    c5:f8:c9:d9:b8:08:20:1d:df:9b:62:e1:af:aa:13:
                    b6:f0:b5:99:0a:a3:7f:e7:c7:e0:38:54:4e:84:62:
                    f9:d0:03:e9:11:25:04:e4:63:02:2f:a8:d3:0d:24:
                    49:0f:5d:f3:5d:8f:bf:57:8d:0f:ab:dc:bd:8a:1d:
                    a3:9e:62:83:c0:da:8a:b8:b3:46:51:a5:0a:81:1a:
                    51:40:40:c6:3f:36:06:ae:f4:6e:06:ac:3d:f4:8d:
                    35:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:84:61:F8:E4:8B:E9:D8:9B:DC:6C:C8:1F:70:23:C7:61:9D:CD:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/15be8826-5265-3b8a-84c5-09e69fbcbd61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:40:f3:72:a9:64:15:f7:1d:3d:79:37:a9:14:4c:62:d5:ce:
         f0:05:96:cd:47:50:19:bf:67:56:42:32:da:61:2e:d5:b7:9e:
         04:d8:97:cf:a4:ee:c3:a6:9a:44:03:db:69:6c:35:b1:74:8d:
         cd:e8:1f:2d:80:09:6c:c4:f7:bb:6c:6a:d2:f3:0f:6d:c1:5a:
         cb:36:b5:90:ad:b5:5e:5e:29:1c:3f:bc:91:17:1c:90:d4:12:
         36:b8:26:2e:84:b4:1a:2b:24:00:e4:3f:a1:51:6a:68:ed:15:
         62:48:0c:58:ce:24:9e:c3:96:7e:02:94:cd:67:b2:a9:9c:f7:
         cb:a0:eb:57:ad:f3:da:03:66:4c:ec:39:09:b2:cf:6b:25:69:
         26:0a:31:14:ff:f0:53:81:c9:1e:a4:e3:d9:58:b1:32:ee:0d:
         17:73:69:e1:34:6a:87:ed:19:a2:99:49:06:ea:9a:0c:70:eb:
         4a:6c:45:49:e2:49:5c:6a:14:eb:e4:ed:27:09:a0:b9:70:cb:
         ca:ab:36:e3:95:a2:b9:e2:19:af:56:fe:db:47:1d:38:b7:f6:
         70:d6:94:dd:32:b9:c4:47:05:d5:b3:f4:22:c9:23:0b:0d:ea:
         83:1d:f1:a1:e2:86:98:ed:68:80:f6:e8:8c:8d:4a:9c:74:d6:
         ae:7c:76:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:59:32 2025 by rpki-client