Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/1c44b8ac-82d9-318e-a2ce-168baf901b8e.roa
File:                     1c44b8ac-82d9-318e-a2ce-168baf901b8e.roa (raw, json)
Hash identifier:          gxjiS9/7JgEFJkMC2FT+Y1f3GRWcasF8rvf9Gnu1ufg=
Subject key identifier:   F9:DA:00:C4:9D:2B:2C:84:5E:03:DA:6F:44:D4:C4:8B:76:89:F6:0E
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584A0F958402DE7D2EBBA1043300
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/1c44b8ac-82d9-318e-a2ce-168baf901b8e.roa
Signing time:             Mon 02 Jun 2025 19:39:09 +0000
ROA not before:           Mon 02 Jun 2025 19:39:09 +0000
ROA not after:            Sun 31 Aug 2025 19:39:09 +0000
asID:                     271
IP address blocks:        2607:f8f0:1600::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0f:95:84:02:de:7d:2e:bb:a1:04:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Jun  2 19:39:09 2025 GMT
            Not After : Aug 31 19:39:09 2025 GMT
        Subject: CN=6c8739a0-7c50-4db0-85a3-fc10ba29bda3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b7:fb:bb:5c:a5:fe:fc:f9:ef:34:31:aa:4c:
                    64:bc:3c:14:9c:e0:12:ff:be:b1:4b:7c:b7:01:b2:
                    e8:ed:5c:ea:2f:2c:36:2d:ea:4f:f4:db:29:c0:cd:
                    b4:d0:08:cf:99:24:76:7f:8b:5d:77:12:3e:ca:5c:
                    64:9a:09:8f:80:dd:89:25:66:92:79:50:dc:89:2b:
                    33:ae:36:ff:8a:98:79:07:b5:ff:a2:8a:9f:b4:0c:
                    7b:19:81:16:4d:7d:77:f7:56:3b:60:e8:bd:ba:c6:
                    ce:f9:df:dc:a7:55:91:2c:b2:bf:7e:72:6a:e4:4f:
                    23:a4:e1:43:8b:51:db:56:5b:09:35:c0:1d:ee:25:
                    2e:e1:d7:12:18:63:82:f8:aa:ff:a7:36:de:3d:40:
                    36:1e:f8:14:58:b4:54:52:b5:59:df:1f:9d:0b:43:
                    fb:61:6e:84:6a:3b:58:77:0a:00:05:18:12:1f:38:
                    b7:b6:c0:52:69:94:64:7d:83:6e:90:3e:00:a7:57:
                    28:75:db:b1:63:e4:0b:2a:60:97:8b:ee:5a:a2:68:
                    b7:f3:3d:59:85:6b:69:0d:6d:41:b0:58:2b:56:d8:
                    d1:fa:f5:a5:f2:23:00:e3:6c:93:b8:f3:16:29:b0:
                    58:91:f0:2e:55:88:2b:d8:b6:c6:7e:07:c1:3a:b0:
                    fb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DA:00:C4:9D:2B:2C:84:5E:03:DA:6F:44:D4:C4:8B:76:89:F6:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/1c44b8ac-82d9-318e-a2ce-168baf901b8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:1600::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:29:0a:6f:64:6d:f6:9e:37:fb:17:de:01:45:54:dc:e8:fb:
         34:48:c1:6a:ba:2f:c8:b0:bc:0d:6f:20:fc:95:bd:7f:4a:4b:
         c4:d8:be:96:83:2c:f7:6d:b9:80:85:42:c5:89:c1:96:44:39:
         0b:e8:56:7c:62:a6:cf:8d:cb:91:c3:09:89:13:00:eb:cf:e2:
         7e:7f:ad:96:42:38:32:66:c9:f2:80:e1:0a:35:db:9c:38:29:
         bf:a7:31:9a:24:8c:94:45:7b:77:03:ed:45:08:1a:c2:59:ca:
         7a:22:55:dc:c1:4e:6b:74:cc:62:dc:90:fb:9d:27:0e:be:63:
         44:ec:53:7e:ef:cd:99:22:cf:30:f5:3c:25:f2:f6:69:67:8d:
         82:16:7b:0b:bf:45:2b:2c:35:05:35:da:f0:58:59:60:84:30:
         2c:1e:71:46:13:03:0f:d8:81:57:03:86:84:4d:1e:05:f1:0f:
         e8:cf:7e:eb:5b:7b:6b:5d:07:ca:a2:12:86:e3:7e:aa:98:d8:
         2d:4a:50:cd:15:ed:7e:02:3f:52:d2:19:e7:95:32:31:5c:80:
         ba:13:02:6c:c9:68:bb:50:a3:7c:6c:10:85:42:b5:57:a2:6c:
         e6:26:e1:31:c3:16:79:8d:11:d3:f4:b9:3d:34:2e:9b:03:62:
         35:fe:37:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:22:56 2025 by rpki-client