Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/4ddee37c-6a1c-3187-ac12-5a3b453129cd.roa
File:                     4ddee37c-6a1c-3187-ac12-5a3b453129cd.roa (raw, json)
Hash identifier:          CNoncgObsKnK+AG6aZGjuvK7fi4FX0/NIFdtA6wsnRM=
Subject key identifier:   98:4E:61:AA:65:16:DB:D6:D8:12:C1:7E:BE:D2:EF:5D:B8:BD:BD:E1
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F43285849EEB50000229FEA77CE4E0116
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/4ddee37c-6a1c-3187-ac12-5a3b453129cd.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     271
IP address blocks:        2607:f8f0:e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b5:00:00:22:9f:ea:77:ce:4e:01:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=b13ee9e7-b0d0-4766-b38b-08395abcb0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:d8:d3:5f:ef:c7:91:3c:f7:68:f2:af:f0:
                    2d:28:c2:66:f8:1c:06:9d:25:62:91:10:16:40:52:
                    eb:2e:5e:9c:b8:b0:e3:f4:e3:e4:8f:5f:9b:88:d8:
                    05:ca:a7:65:aa:13:8f:50:50:e5:6f:a6:6f:4e:4d:
                    57:71:d4:fc:d4:99:f1:9c:1a:35:a7:60:c5:70:33:
                    92:2b:ec:aa:e5:c9:72:77:b6:51:a6:93:9f:a6:75:
                    17:10:b0:d8:c5:da:8a:cf:cc:29:ab:0d:c5:8a:c8:
                    2a:55:1d:af:d4:6b:2d:4d:ee:41:c9:61:c8:f5:56:
                    84:81:19:06:90:88:72:ea:4c:dc:cf:7f:86:21:24:
                    6d:de:50:d1:9d:43:99:26:51:f6:8d:65:39:41:99:
                    69:b1:c4:04:b6:06:66:e8:6d:88:a1:56:9c:9a:48:
                    3c:58:17:d3:cb:6f:db:76:c9:25:a6:48:41:f1:a5:
                    14:e8:cd:00:43:23:33:99:fd:a3:d6:57:68:13:b4:
                    75:bc:16:40:e2:23:52:40:a2:cc:a1:76:d8:d4:fa:
                    82:25:a8:a1:e1:e8:09:b1:d4:a5:57:14:e3:18:9f:
                    03:d1:34:f1:66:48:3c:3e:f2:d8:6d:99:5e:f2:1f:
                    a0:19:28:21:dd:ed:28:9c:81:e9:ca:21:d2:31:9c:
                    70:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4E:61:AA:65:16:DB:D6:D8:12:C1:7E:BE:D2:EF:5D:B8:BD:BD:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/4ddee37c-6a1c-3187-ac12-5a3b453129cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:e00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:61:46:f9:0e:5d:f3:3d:5c:94:ce:83:89:51:bd:e7:f8:ec:
         5e:9e:e8:5d:4f:d2:1b:1b:21:d8:4c:b7:c6:54:3a:1d:29:6e:
         16:1d:ce:8d:76:77:fe:d0:cb:cb:5b:14:0c:6a:a0:ed:9b:42:
         71:8a:e0:1f:8f:60:b4:38:b3:91:41:16:66:07:1d:76:bd:e0:
         5e:05:b3:7f:7c:a8:fb:85:da:a0:e5:7e:3e:62:55:f5:1d:d2:
         91:64:d0:45:89:50:e4:b9:06:53:7e:73:fc:d9:03:6c:e5:f2:
         a3:fc:78:40:8d:8a:fc:8d:de:44:65:4f:d8:5d:71:92:8f:4a:
         47:48:78:ab:fb:9b:32:2c:65:0d:1a:b1:90:33:9c:ee:e3:a9:
         ad:a3:d0:41:26:11:c3:c5:fe:b3:4d:35:e1:a1:76:37:57:ba:
         95:79:cb:7f:71:97:35:e1:f5:9b:0f:72:d4:74:25:16:9f:e7:
         8f:34:be:a3:1a:b8:15:10:58:3f:78:54:d4:f4:e0:24:68:14:
         69:b9:fe:27:5f:6e:86:36:21:0e:8e:b3:db:18:e7:24:2a:b1:
         5b:20:e5:57:a7:64:be:38:73:8c:b8:2e:f2:92:fb:21:bf:3f:
         8e:58:03:de:85:15:f7:10:e3:3f:99:22:04:65:52:62:10:b5:
         e0:0b:3d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:22:18 2025 by rpki-client