Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa
File:                     9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa (raw, json)
Hash identifier:          6rK0lt5+QuFYn/DpHNcCtHchb/M8UheWyWjTBpt9fUI=
Subject key identifier:   83:16:D8:17:9B:4C:EA:95:AA:C8:F4:72:2A:59:88:F6:7D:EF:DA:27
Certificate issuer:       /CN=0cf53e58-6557-450f-832c-9baa5c99cca4
Certificate serial:       010D0C9F43285849F17FBF12C1CEE70548118700
Authority key identifier: 9D:12:7B:B3:E3:C3:F4:64:BC:E1:32:60:ED:35:87:5D:E7:FA:47:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        2607:f250:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:bf:12:c1:ce:e7:05:48:11:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cf53e58-6557-450f-832c-9baa5c99cca4
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=83650d68-9fba-49b6-8873-c9237899a891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:89:8a:78:b0:86:19:b0:86:2c:a0:3c:1e:90:
                    86:56:4b:f9:85:77:bf:1a:b7:89:62:e8:04:ad:88:
                    e4:d6:26:4c:85:4c:b6:39:6c:0e:53:2a:b7:c2:c0:
                    c0:11:57:2a:b8:77:d4:46:cf:54:27:f7:7e:9c:4e:
                    3b:46:34:80:49:4e:4e:7d:61:06:d5:c6:7d:e5:f0:
                    e9:16:f4:87:d3:dd:08:7a:11:d3:de:14:21:55:ae:
                    11:3a:bc:5e:85:a8:b7:7e:18:f8:67:04:43:39:d1:
                    f9:d9:1f:a8:7b:d5:6c:fc:fe:f1:ce:bc:a6:83:2e:
                    0c:79:fb:76:5e:1e:33:f7:5d:fe:a8:b4:9c:6f:bd:
                    31:6d:d3:80:fa:f3:4b:5c:2f:f8:4e:f7:be:a6:e1:
                    4e:ee:64:17:61:64:c8:f9:08:79:43:b0:d4:1a:bb:
                    b8:23:5c:fd:7a:3e:57:a4:ee:08:ba:07:4a:99:8f:
                    6a:cb:0e:f3:56:92:8c:82:9f:bc:bd:09:f3:22:a5:
                    4d:49:29:a0:63:1f:72:e0:df:08:9c:aa:a8:34:b1:
                    fb:10:1c:84:d9:61:9e:a4:ff:71:d0:fd:c1:db:1f:
                    e5:7c:f6:9f:7e:c1:81:02:4c:46:0e:7d:6a:8f:49:
                    01:5c:61:e8:a2:72:34:94:d1:9a:e6:23:4a:eb:87:
                    05:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:16:D8:17:9B:4C:EA:95:AA:C8:F4:72:2A:59:88:F6:7D:EF:DA:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.crl

            X509v3 Authority Key Identifier:
                keyid:9D:12:7B:B3:E3:C3:F4:64:BC:E1:32:60:ED:35:87:5D:E7:FA:47:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f250:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:82:c5:1e:f8:66:43:23:f1:ce:91:f2:c2:0a:ac:32:64:bb:
         c9:9d:be:af:8d:43:84:61:95:f4:e0:57:89:ed:8d:0a:82:d6:
         67:6f:eb:57:92:14:04:0a:c2:b0:dc:be:cc:2c:79:fe:96:25:
         8e:19:9c:a7:2b:91:97:94:c8:9e:82:ea:1b:77:51:e1:74:27:
         b7:eb:5e:d8:f2:bc:08:8a:e7:3b:33:cc:88:91:cf:b8:e1:0c:
         ef:9f:0b:96:39:98:60:d4:c0:3d:76:26:1c:b7:3c:b3:7e:ae:
         b2:ef:05:75:6f:d7:b9:1c:8a:79:85:ff:f8:44:4f:d0:48:1e:
         51:26:6b:d3:a9:2c:3f:36:f1:e1:79:33:84:91:dc:3b:86:c3:
         07:8f:90:9b:51:89:74:90:7d:22:1b:c3:0f:61:37:39:51:08:
         51:c4:6a:69:b0:9c:69:ec:49:9b:45:48:ff:5b:e6:aa:37:3a:
         6b:95:30:dc:6a:37:58:13:e3:9a:77:b1:22:20:80:58:fd:d9:
         ee:dd:bf:f0:68:3f:f0:13:61:ec:02:77:f1:98:1a:b6:e7:5f:
         9b:a8:10:53:75:8f:20:f3:5b:8d:5a:ca:ba:ba:e5:45:aa:c8:
         de:9c:2d:f8:63:3a:02:ff:4a:f7:67:14:62:4f:a8:fb:d3:d8:
         23:d9:72:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:04:25 2025 by rpki-client