Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c2fef04a-a7e7-3822-8f22-138ce491274f.roa
File:                     c2fef04a-a7e7-3822-8f22-138ce491274f.roa (raw, json)
Hash identifier:          aiElJdxPYfCh6ZGcNUCs2ZhPqglLCiwO1noc9BlK02s=
Subject key identifier:   FF:5C:14:B9:DF:D1:8C:3C:88:0B:39:BB:7A:F7:EA:59:7C:BB:EF:C3
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285849D594EFFBCA961D89FB5A4A60
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c2fef04a-a7e7-3822-8f22-138ce491274f.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     27411
IP address blocks:        2607:f5b5:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:ef:fb:ca:96:1d:89:fb:5a:4a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=a575f57d-8bd3-49fa-99c4-9232b02125fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:93:38:ab:d4:51:af:61:d1:27:18:d4:9e:
                    7b:1c:ae:b3:6c:f1:ae:e9:9a:0b:48:47:d2:d8:6b:
                    e0:30:1c:b9:f0:79:57:a4:26:a9:4b:2b:2d:e3:e6:
                    74:ad:74:7d:9c:40:a4:1b:80:60:de:f3:22:ac:5f:
                    14:87:58:ce:da:b5:80:1b:3c:04:18:ed:30:83:c4:
                    65:e4:b8:99:52:49:20:d9:08:8b:0d:df:8f:a7:f8:
                    22:d6:d2:98:42:05:c3:05:31:27:c1:5a:d2:1a:96:
                    78:d8:4e:f4:62:5d:f9:b9:db:08:84:97:f7:12:05:
                    97:03:a1:95:92:5e:93:73:ac:1e:54:2e:15:7e:95:
                    d2:aa:fb:ab:38:28:aa:4e:d6:46:4a:95:7d:4e:c9:
                    56:ff:7f:7b:48:e6:69:6a:0c:4e:96:38:8a:81:23:
                    bb:71:92:43:58:6a:2a:81:af:c7:0b:b3:71:d7:88:
                    90:c4:71:c4:a9:1b:f3:1c:c8:8c:4e:c7:ec:1f:8e:
                    5c:5b:fb:0b:9b:78:69:6f:c0:67:99:ac:07:1d:ef:
                    ee:f5:1b:44:ba:54:c4:5f:c6:17:e0:59:0a:e7:1f:
                    21:96:80:9a:2a:68:1a:a7:73:ab:ea:c2:b8:99:48:
                    35:e0:ec:b5:c1:cc:c8:89:d1:ad:ff:b7:73:c2:35:
                    c3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5C:14:B9:DF:D1:8C:3C:88:0B:39:BB:7A:F7:EA:59:7C:BB:EF:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c2fef04a-a7e7-3822-8f22-138ce491274f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:c7:f9:5a:17:f6:41:a6:91:da:92:a4:9d:68:b3:d1:4e:70:
         79:6f:e2:99:46:51:b5:7f:fe:c1:6d:94:e5:50:d5:34:ba:7a:
         a1:f5:42:1a:a5:25:01:e0:f6:89:88:ae:21:dc:0b:48:6d:dd:
         e0:9e:ef:89:b4:4a:e0:db:18:cb:a4:38:c2:83:9d:b5:6e:8f:
         f7:ce:13:1b:af:c3:43:28:e4:99:3d:ac:80:36:24:22:46:c2:
         f9:a2:85:f9:8f:d6:4f:f2:96:50:f8:6c:8c:f1:2c:d7:ac:c0:
         00:08:8b:5c:40:50:0a:49:1e:ec:b8:89:66:16:1d:27:39:6d:
         10:65:b0:53:29:66:71:04:9f:86:80:e6:d6:b2:61:11:2a:3f:
         f3:13:b9:94:ae:9f:57:02:cc:58:ed:9c:25:b3:a4:45:2c:98:
         35:81:89:8b:1a:56:1b:d2:68:55:ec:9a:9c:e8:f2:5a:59:47:
         c5:4a:5f:7f:52:fb:bc:a1:b6:31:55:d8:5d:f2:ff:94:ad:ec:
         bb:86:af:ac:87:d5:5e:67:b7:38:c6:1c:9a:3c:2e:40:2d:6b:
         86:06:b0:70:0f:14:40:a8:94:fd:ac:22:a0:75:d8:7e:23:fb:
         9f:d4:30:3b:83:02:43:19:1e:f8:fd:de:de:bb:df:07:f2:2e:
         f4:1c:55:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:22:28 2025 by rpki-client