Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fe7ed629-3e5e-37f2-87c4-31837b77e42a.roa
File:                     fe7ed629-3e5e-37f2-87c4-31837b77e42a.roa (raw, json)
Hash identifier:          G+o4kwep7kHhQ9ZRCAUGcnF4/IB4ALxPKzUoytN0E+A=
Subject key identifier:   6E:A3:BB:7F:07:F5:D2:E6:E8:A0:B0:1C:04:C4:1D:3F:5A:E8:FC:CE
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584A225ACA1E928FAC76F610AE80
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fe7ed629-3e5e-37f2-87c4-31837b77e42a.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     54994
IP address blocks:        2607:3f40:ff1f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:ca:1e:92:8f:ac:76:f6:10:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=e42465ee-475d-47d1-9fad-ff6a2f06f796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:38:ca:93:12:e6:83:ce:8c:e2:9c:a6:aa:ea:
                    30:53:fb:6e:0f:c6:0c:a3:ed:00:3e:95:4b:93:ba:
                    05:54:6c:4f:2b:00:65:d5:67:5a:dd:84:d5:0a:2e:
                    3c:0f:1f:2d:38:a1:c7:c2:da:71:15:4a:93:7d:e3:
                    9d:56:89:a5:e0:f0:e5:39:37:49:18:2c:c2:cd:b2:
                    72:ca:32:88:50:dd:f1:8d:23:f5:ca:59:e8:06:0d:
                    ad:53:a7:f8:76:f9:19:19:4b:03:58:c3:4d:df:44:
                    21:b1:98:9d:b8:f6:6a:2d:d4:72:a6:8a:61:8e:1c:
                    60:cf:6a:1c:d3:60:cb:79:b1:0a:81:40:f6:e0:8e:
                    9d:da:c4:ba:8b:7c:d5:73:dc:62:56:07:9b:ae:14:
                    7e:c3:c8:2c:7d:fc:17:f1:92:b7:a3:f4:6f:83:e2:
                    cb:40:59:13:5e:de:4a:20:ea:a5:5d:f6:4c:c1:46:
                    96:d8:bf:4a:09:83:bd:fa:9e:54:d4:27:49:87:97:
                    6a:17:19:e6:41:17:70:c0:1c:9a:2a:53:a8:fa:69:
                    e7:a2:2b:5c:3f:ce:b0:98:54:93:c5:64:f9:22:44:
                    b2:9b:2c:33:37:69:3c:13:51:a8:ed:aa:76:47:cd:
                    2e:de:db:20:fb:ea:da:0f:3b:b9:9d:93:db:76:b5:
                    8f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A3:BB:7F:07:F5:D2:E6:E8:A0:B0:1C:04:C4:1D:3F:5A:E8:FC:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/fe7ed629-3e5e-37f2-87c4-31837b77e42a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3f40:ff1f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:f6:63:f2:f6:78:8a:dd:57:92:50:fc:5c:e8:62:e2:5d:35:
         52:2d:a3:9f:5b:0c:5d:60:67:52:51:73:96:55:92:a1:92:89:
         f6:2a:7e:b2:95:70:1f:95:cd:f2:c3:f8:67:57:04:51:3d:51:
         6e:1f:29:17:81:bd:cf:48:cb:d6:3f:54:55:df:6e:bb:d4:e3:
         88:8c:55:30:fb:3f:7a:4e:93:35:15:3e:62:70:a7:9e:70:a0:
         c3:53:cc:7e:a0:0b:64:79:a1:c3:cb:61:0d:3f:79:b7:f9:1f:
         1c:52:d6:7e:7d:8e:f3:61:ed:80:a6:ed:65:dd:c0:5a:a7:0f:
         98:c7:c2:3c:4f:b7:b8:1d:49:48:98:fe:56:85:35:a0:4b:12:
         ca:74:9e:28:ff:c5:f9:b2:83:f9:88:3a:d4:8f:29:81:3f:87:
         53:0a:6b:ef:83:82:c0:50:90:6c:8c:17:a5:1b:1f:75:99:af:
         54:d7:9f:1e:c6:2b:40:4a:56:a0:c7:3e:51:03:67:5d:c4:cb:
         86:29:5a:f5:97:17:6a:38:25:91:19:04:15:02:f3:74:5c:50:
         72:61:89:c3:30:a0:63:67:4e:2e:9c:d6:35:7d:91:55:69:ce:
         33:aa:21:98:24:0a:46:60:12:36:68:91:1d:f0:3d:41:57:c1:
         a8:fe:10:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:56:07 2025 by rpki-client