Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/d9a4f2e6-6578-3925-930d-f5154e79deb1.roa
File:                     d9a4f2e6-6578-3925-930d-f5154e79deb1.roa (raw, json)
Hash identifier:          bQsCwwzLb6eeLwkfn8T9RVDhyyGzk1LxUnbobjaRtDw=
Subject key identifier:   53:6E:7D:8A:93:58:F1:EE:6E:AA:30:85:E1:61:ED:71:41:42:CE:D8
Certificate issuer:       /CN=e62ce32a-582e-49d1-9c4a-bd8cab83f7eb
Certificate serial:       010D0C9F43285849DC8FB2D24D8C91B9AEBD1860
Authority key identifier: 5F:F0:4F:56:FF:C7:E3:22:3F:23:7A:CD:F3:42:AE:3E:64:E3:FB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/d9a4f2e6-6578-3925-930d-f5154e79deb1.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     3801
IP address blocks:        2607:c00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b2:d2:4d:8c:91:b9:ae:bd:18:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62ce32a-582e-49d1-9c4a-bd8cab83f7eb
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=17372683-4aac-40c5-a928-bd302200ef1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:13:5b:51:ec:2c:00:dc:07:81:09:b9:37:
                    d8:18:dd:5b:de:4d:09:63:97:d8:78:96:01:a8:6c:
                    d5:5f:4e:7f:1b:9d:9f:e3:6c:67:b8:c7:05:34:d5:
                    cc:e3:a6:0b:57:10:04:57:99:5b:9e:ce:e0:5f:ca:
                    ec:a6:e1:1e:0c:63:01:e5:a5:84:35:1b:2c:a9:8c:
                    88:49:52:9e:ea:20:52:ed:b7:a5:4a:09:2c:bb:60:
                    bc:17:91:b0:1c:56:5e:72:01:00:6a:31:b2:f5:25:
                    63:b6:8d:e9:be:af:01:3e:d6:35:11:5c:3c:f3:32:
                    4b:fa:1a:fa:c3:10:5a:0b:86:7f:93:5e:c9:2d:fc:
                    4e:30:4b:01:ca:af:d8:4c:f9:eb:9f:4f:69:91:86:
                    01:0a:78:49:ef:cc:50:d8:f5:1a:6d:ea:3f:a8:ff:
                    f1:2a:d1:8d:32:90:29:50:f2:dc:c1:2d:77:ff:f0:
                    61:bb:b6:27:11:32:22:c3:15:9f:9b:e9:4b:23:0c:
                    e5:b6:49:a3:38:9b:ae:2c:24:88:5b:36:f6:86:0d:
                    4a:63:3b:15:6f:bb:da:8b:a4:86:bf:aa:01:12:81:
                    61:82:24:01:e8:4a:64:85:8e:6d:7d:d3:9c:c7:0e:
                    bd:2d:cb:90:2d:6f:b6:1c:6c:e2:84:2b:0d:8d:b3:
                    d1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6E:7D:8A:93:58:F1:EE:6E:AA:30:85:E1:61:ED:71:41:42:CE:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/d9a4f2e6-6578-3925-930d-f5154e79deb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.crl

            X509v3 Authority Key Identifier:
                keyid:5F:F0:4F:56:FF:C7:E3:22:3F:23:7A:CD:F3:42:AE:3E:64:E3:FB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e62ce32a-582e-49d1-9c4a-bd8cab83f7eb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:46:91:a0:dd:83:af:dc:80:98:52:a6:cc:94:62:a9:62:c4:
         bd:ca:77:ae:c1:36:d7:7e:e4:f8:24:40:b5:0f:0b:b2:6e:51:
         85:b0:4e:67:b9:66:a0:11:e5:a7:3b:db:5d:75:89:f5:4f:b6:
         0a:2a:be:00:b9:2a:de:42:12:32:d6:8a:0b:5c:18:f2:dd:8e:
         d5:f9:ef:4c:57:1f:ee:f2:34:4f:2f:6a:e5:72:22:38:90:04:
         7c:50:6e:dc:f7:05:ab:0a:1e:34:86:20:ad:21:49:eb:0c:3a:
         6a:38:9a:d4:d7:07:4e:03:69:ca:a4:28:06:d7:82:35:44:65:
         45:05:9e:db:4f:09:6b:3e:33:e0:d1:a0:d6:37:ce:7e:5b:e7:
         ea:8c:db:9f:bd:cd:c5:53:d5:47:80:5f:97:fa:c3:55:6f:8f:
         b2:38:60:4e:2d:46:bf:5a:7e:f8:16:87:ad:c7:7e:ba:a3:4f:
         4e:21:9d:90:b4:5d:89:59:6a:cd:ad:9d:27:f7:ae:0a:f8:39:
         63:a0:f7:79:d0:d6:8e:1c:f5:ef:9c:63:f0:a5:5e:38:f1:86:
         e6:ac:3e:f4:e0:88:9c:4f:23:61:e8:df:3b:c7:9d:62:73:dd:
         c4:df:e3:6c:8b:96:3c:02:cc:49:22:ca:6b:ee:b7:5a:fc:bd:
         04:87:31:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:05 2025 by rpki-client