Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/720df317-fc7f-3ff4-8859-a7cb516815f2.roa
File:                     720df317-fc7f-3ff4-8859-a7cb516815f2.roa (raw, json)
Hash identifier:          B69Ytb62Dad5+8vQ8WsX450jAiww3sATXjweHAmbOKQ=
Subject key identifier:   F3:B7:52:B4:8F:4B:E9:14:4E:BB:60:F5:DF:F7:C7:3C:2D:DF:47:2B
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F43285849E2253B079003FF2D23E92280
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/720df317-fc7f-3ff4-8859-a7cb516815f2.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     16462
IP address blocks:        2607:f8f0:c10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:3b:07:90:03:ff:2d:23:e9:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=99a55358-5377-4e01-b6c3-41daaaa02e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:a4:31:a2:c0:a5:83:26:64:a5:05:42:d2:
                    af:32:e7:a2:75:62:3e:9d:31:94:79:c9:90:d0:a9:
                    58:54:81:31:26:bd:4d:f4:8f:b2:5f:f0:d1:28:46:
                    c1:f4:21:e6:bd:89:ff:e5:ed:c6:e7:a5:0a:35:26:
                    35:2c:8f:a5:33:c3:bd:f8:c8:f3:6f:72:e2:71:32:
                    bb:84:05:65:44:0d:2c:b1:67:32:61:76:89:b6:6f:
                    34:98:c8:ee:f9:c4:b8:44:bb:1d:54:72:8e:ab:5c:
                    18:a1:7f:eb:8a:89:be:74:f7:5a:59:88:e2:15:1a:
                    96:7e:35:78:ce:98:ba:34:f0:da:ff:0b:ef:3c:78:
                    ba:02:e7:41:3b:09:d2:1e:ce:32:f8:4e:b3:8c:7d:
                    3d:82:d3:71:a7:78:80:fa:24:8c:07:a2:b5:d9:66:
                    fd:0d:68:81:8d:4e:3c:5c:9c:75:31:79:af:8a:cc:
                    a3:2b:25:7e:b8:8e:25:4e:ae:8d:9e:d8:3e:dd:57:
                    c3:3c:44:54:47:29:2a:0d:80:f7:82:1e:4e:7a:d7:
                    28:44:85:87:4c:d9:6c:e8:3f:54:f4:79:83:08:83:
                    cb:4a:5a:fa:9c:f6:72:13:30:3e:58:a3:81:dc:b5:
                    ae:22:5d:d7:0d:8d:61:2d:e3:77:66:d7:e2:d9:87:
                    3a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B7:52:B4:8F:4B:E9:14:4E:BB:60:F5:DF:F7:C7:3C:2D:DF:47:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/720df317-fc7f-3ff4-8859-a7cb516815f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:c10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d7:c7:12:cc:75:94:3a:a7:01:af:95:c5:80:4d:8b:77:30:
         d1:1d:84:f1:2d:1e:3f:82:84:dd:bb:0f:cc:6b:80:5e:55:1a:
         35:72:f7:85:c8:ae:96:ca:f5:a2:ff:42:a2:dd:e0:bf:e7:d8:
         1c:56:dc:db:a0:18:1b:c1:fd:29:a9:4f:cc:a3:d2:a4:c7:fa:
         9b:55:32:5e:03:30:6b:38:36:5d:e8:28:58:6f:00:3a:3b:24:
         8d:21:30:1c:31:83:8c:ed:dd:57:2f:4e:0e:e9:db:3d:ea:d1:
         9c:b2:7b:c5:63:34:6d:a3:ea:b9:60:10:2d:1b:43:39:a4:f3:
         dc:72:22:4e:3a:83:22:58:69:c7:80:e4:0e:7e:ac:e2:4b:1b:
         b5:fb:09:ca:22:ee:c8:23:9a:a6:e9:0a:86:40:38:47:b5:6d:
         f8:51:9a:75:7a:53:54:1b:b5:74:ea:d7:c2:aa:5b:b3:ef:2f:
         8d:a2:d2:c8:5a:33:25:79:61:49:a1:9e:a5:a7:e2:3a:b4:18:
         5f:9e:fe:25:b8:e2:90:e0:ca:1e:dd:fe:d0:e0:80:59:50:69:
         15:1d:9c:2a:88:52:67:b1:e0:b8:80:22:1a:77:08:83:8d:81:
         b6:7b:78:75:0e:42:41:b4:6a:b6:be:ec:f8:96:09:74:d9:9f:
         55:2c:1a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:23:41 2025 by rpki-client