Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/da9b985a-da06-318b-9677-1bef9fb560c2.roa
File:                     da9b985a-da06-318b-9677-1bef9fb560c2.roa (raw, json)
Hash identifier:          nUOScHdjUJq9xcnp68kYdSNol3lMOjGhLsILK/LxCho=
Subject key identifier:   04:4A:0B:FD:5D:D3:FD:05:C4:4C:0C:BF:61:8F:FC:B7:16:A4:1B:F8
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584A0F5D148C0CB01636CFCD9360
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/da9b985a-da06-318b-9677-1bef9fb560c2.roa
Signing time:             Mon 02 Jun 2025 17:45:26 +0000
ROA not before:           Mon 02 Jun 2025 17:45:26 +0000
ROA not after:            Sun 31 Aug 2025 17:45:26 +0000
asID:                     271
IP address blocks:        2607:f8f0:450::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0f:5d:14:8c:0c:b0:16:36:cf:cd:93:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Jun  2 17:45:26 2025 GMT
            Not After : Aug 31 17:45:26 2025 GMT
        Subject: CN=d028a2e2-982b-4c4e-9957-74d719e5ae33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:17:20:69:aa:88:6d:dc:f2:59:50:ea:7f:
                    52:fe:b4:9d:f5:66:99:83:3f:88:81:5e:b5:75:16:
                    af:b1:e2:65:52:ad:1d:b0:99:e9:7e:70:d6:74:80:
                    9b:fb:ff:9e:4a:35:1a:0d:a7:28:b4:99:b7:ba:2a:
                    2c:5a:74:d5:c6:f5:a9:d1:d5:7d:2f:6a:45:a4:db:
                    e0:d4:75:6a:91:41:6a:a8:df:b6:9f:b8:10:f8:0a:
                    3e:77:55:da:23:78:f0:9b:bd:2e:f2:a4:02:e2:c6:
                    30:7e:50:8a:22:b0:a6:8c:32:5c:9c:f5:06:00:51:
                    06:6b:78:d3:57:3b:e2:d8:49:68:c3:e4:73:3f:24:
                    03:58:a4:a6:f0:aa:49:da:e7:59:71:40:a7:db:7f:
                    14:a8:f6:74:36:2e:64:02:8a:04:00:34:ed:c8:51:
                    4d:41:f9:75:58:95:a7:c5:e9:bd:55:ba:97:53:fa:
                    55:e2:6a:8e:76:6b:94:f7:86:66:a6:14:38:d9:95:
                    2a:51:a0:a6:e7:d7:82:54:7a:46:0c:17:3a:02:98:
                    2c:48:75:7e:42:91:f0:3a:9a:13:57:f4:85:62:14:
                    57:f7:1e:10:9f:d4:c1:cf:f3:32:ab:76:0a:7d:69:
                    4a:63:b7:85:e8:e0:88:81:9d:2d:83:f5:86:f0:95:
                    aa:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4A:0B:FD:5D:D3:FD:05:C4:4C:0C:BF:61:8F:FC:B7:16:A4:1B:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/da9b985a-da06-318b-9677-1bef9fb560c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:450::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:91:89:e4:e2:86:90:42:db:7c:e5:5e:dd:5a:91:03:d1:a1:
         b3:86:14:59:db:91:96:b5:4e:cf:1a:61:6d:ea:7f:1f:85:b0:
         10:64:bf:fb:48:c5:27:b4:8d:c5:c3:ad:99:35:ec:ef:52:dc:
         e4:30:1a:04:49:fb:6a:f1:0c:2b:e9:1c:de:5f:ed:dd:58:eb:
         78:5a:c2:e0:0d:e0:75:84:12:c6:0e:9a:07:50:3d:76:c5:c9:
         7c:c7:25:eb:0d:bc:49:ab:f7:4f:71:d5:03:ed:36:e4:2d:39:
         62:17:8d:99:eb:7e:30:a5:d6:20:cd:8d:3a:55:d5:6f:06:8b:
         d1:d2:a2:62:11:83:6b:7c:78:a5:32:d5:72:39:74:af:ac:fc:
         0a:0d:ae:0d:7d:0f:d1:f2:81:24:82:1f:d4:c6:85:fa:0f:d7:
         6f:f2:70:73:6f:ae:5f:57:50:f8:84:0d:b7:60:79:92:19:7e:
         f7:d4:c2:b3:3c:50:70:ba:40:9f:c9:24:59:48:fe:23:3b:29:
         79:00:fe:e8:86:9a:a0:5c:cd:02:04:98:e1:30:65:70:40:4f:
         bb:cc:64:93:da:50:a9:0e:3c:eb:dc:d9:a8:64:4b:9d:8d:77:
         7e:1c:94:b9:bd:f3:ce:ba:e8:6d:32:3f:52:4a:ec:e1:ae:1e:
         c6:f2:c8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:23:20 2025 by rpki-client