Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/331c6c6e-98dd-3608-aec1-5daf85578cc8.roa
File:                     331c6c6e-98dd-3608-aec1-5daf85578cc8.roa (raw, json)
Hash identifier:          wWyyUyna1tRJ94kjuEX1VgJ8uEteIADmFcYN+cykKYI=
Subject key identifier:   8B:D5:20:30:A3:DA:67:EE:F9:41:68:9A:09:C6:01:3D:F6:F3:63:AD
Certificate issuer:       /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Certificate serial:       010D0C9F4328584A86DB776A1B904D4313D17F80
Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/331c6c6e-98dd-3608-aec1-5daf85578cc8.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        2607:6bc0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:77:6a:1b:90:4d:43:13:d1:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=3fda98ea-d16e-4cd8-9ae8-3c01f02f2fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a9:85:bd:6b:0a:51:b8:bd:65:6d:cb:f2:30:
                    4e:09:0a:19:29:9d:92:60:d1:6b:61:cd:ef:f2:99:
                    dd:c0:37:f9:e2:6b:c9:4c:19:2a:84:85:80:a9:0c:
                    1d:85:06:c4:d4:63:d7:f2:c4:fa:c0:b7:11:d2:f5:
                    bc:0c:91:0d:90:0a:d2:57:e1:09:6e:64:f9:06:b6:
                    c5:04:44:cc:c0:33:fd:a6:3e:0a:6a:7e:e0:21:87:
                    bd:ab:e0:89:7c:88:24:16:d7:a2:ba:c5:c0:d6:7d:
                    7f:52:9e:8e:9b:c7:db:26:81:cc:00:59:6e:ca:9d:
                    57:8e:09:8e:5d:a8:7e:ba:cf:5a:90:ca:3c:47:b7:
                    7e:fc:e0:36:e3:55:ef:5d:3a:2c:87:2c:32:26:51:
                    40:93:ea:1d:a8:0c:58:7a:af:b3:1e:ff:c2:5d:82:
                    4f:13:66:e7:9b:a2:5e:7f:f7:30:33:71:57:ec:6d:
                    0c:8d:e3:90:f6:e3:97:b4:34:64:bb:68:1d:ac:9e:
                    d3:24:0a:4b:37:db:34:77:78:74:08:f5:e9:81:3e:
                    21:d4:0e:ad:06:76:7f:d4:90:4c:b6:0c:7b:b6:08:
                    b0:76:7a:e4:f1:73:59:f7:b2:c6:d8:b1:15:79:05:
                    c1:bf:ee:0d:28:c0:07:46:33:8f:0f:f7:59:2c:9c:
                    35:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D5:20:30:A3:DA:67:EE:F9:41:68:9A:09:C6:01:3D:F6:F3:63:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/331c6c6e-98dd-3608-aec1-5daf85578cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl

            X509v3 Authority Key Identifier:
                keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ee:f0:11:de:57:21:f4:39:24:11:a2:0a:b4:c9:f5:ac:0f:
         7b:57:92:8d:03:43:6a:af:ee:10:b7:68:37:b8:bc:0e:87:12:
         16:c0:2e:99:ad:7d:4a:dd:43:c8:51:d5:d7:9d:4a:4c:17:cc:
         d6:18:fd:28:33:9d:a0:12:2b:79:a9:cc:d2:39:5c:25:63:db:
         6c:c0:ff:3a:14:92:cf:79:77:4b:8d:b0:bd:09:55:f1:fe:ba:
         d6:c3:51:b9:89:36:a7:69:83:a1:5c:b9:f5:e5:b2:41:b8:67:
         5f:34:a9:fd:96:a9:72:b2:b7:a7:9a:16:4d:6d:44:34:24:37:
         fa:81:1d:6f:65:2e:1c:90:bf:26:36:39:7b:71:0f:85:8e:63:
         58:94:8d:23:2d:51:7f:82:33:48:ff:5e:cb:6a:df:3e:db:d4:
         15:0c:57:4d:a1:2b:b5:4d:8b:b4:d1:1e:56:c7:e1:15:df:91:
         a6:16:ae:cd:81:9a:f9:c6:87:49:8d:e3:1d:d0:7d:99:a1:fb:
         be:6a:e6:71:8c:86:c2:36:0d:53:8b:36:12:d3:ff:a8:9b:7d:
         ad:ba:45:c4:e6:74:43:bb:c2:c5:3a:5f:8e:74:e7:12:ae:44:
         8a:b3:3b:e0:fd:b8:98:ee:a0:15:2b:9f:6e:ab:07:b1:a8:b6:
         84:15:23:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:20:41 2025 by rpki-client