Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/c657d9ae-6d6b-3cf4-b1d3-7d13c4771f7d.roa
File:                     c657d9ae-6d6b-3cf4-b1d3-7d13c4771f7d.roa (raw, json)
Hash identifier:          H0D7AoPjR8HUVqJEZE23kCusuk80dxz3IJDquKP/0es=
Subject key identifier:   C6:95:8C:26:CD:7E:BF:E8:10:7A:8C:FB:1F:A6:FA:E9:A9:F5:A3:38
Certificate issuer:       /CN=64cf176b-c737-492c-95a5-54695fc5bc2d
Certificate serial:       010D0C9F4328584A0C0572E68D481F2E0A630D00
Authority key identifier: 33:62:F0:BF:7D:FD:C9:04:AD:3A:12:76:E3:B0:8B:4B:15:79:4C:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/c657d9ae-6d6b-3cf4-b1d3-7d13c4771f7d.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     32181
IP address blocks:        2604:2700::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/64cf176b-c737-492c-95a5-54695fc5bc2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/64cf176b-c737-492c-95a5-54695fc5bc2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:72:e6:8d:48:1f:2e:0a:63:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64cf176b-c737-492c-95a5-54695fc5bc2d
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=61479d12-f006-48fb-9e07-0d36b233af0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:13:ff:f0:f7:64:76:4f:a0:b7:70:06:64:
                    39:b2:1a:9f:47:ee:2c:22:d9:67:cc:4e:8b:b4:7a:
                    d7:69:a4:11:ad:e2:9a:ee:62:75:7b:d3:dd:0e:c1:
                    03:ea:a3:ca:6a:91:ae:55:be:54:f6:0b:8c:8c:b4:
                    f3:57:cf:c6:b4:88:48:68:e6:73:ee:00:ee:f4:e1:
                    18:cb:dc:0f:2b:c2:36:c1:66:cb:89:56:09:34:b6:
                    fb:1f:f9:e5:56:05:08:79:24:5c:ff:92:45:be:a3:
                    0b:81:3b:e5:18:56:8f:fe:e6:63:de:fb:ae:9e:bc:
                    69:e9:a0:7e:2c:54:9b:93:66:e0:00:60:7c:fa:01:
                    cd:80:5b:83:9f:30:1b:2b:ac:6e:45:02:b0:41:02:
                    0b:b2:59:91:c5:d7:74:ec:87:36:bb:64:50:93:25:
                    d4:f4:07:f7:c5:14:a3:ee:97:f4:b2:12:11:d1:8e:
                    93:32:b5:e3:aa:0c:74:e7:43:00:c8:7e:42:c7:5c:
                    97:e8:9c:93:7b:30:82:69:31:bc:c8:09:37:e1:36:
                    bf:76:9b:16:73:af:5a:19:5f:b5:aa:36:f9:a7:05:
                    2b:c4:4f:99:3b:91:a3:e8:1c:c0:84:1a:5f:f2:32:
                    79:fc:94:4e:ae:37:24:77:39:11:28:93:00:9b:9c:
                    c4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:95:8C:26:CD:7E:BF:E8:10:7A:8C:FB:1F:A6:FA:E9:A9:F5:A3:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/c657d9ae-6d6b-3cf4-b1d3-7d13c4771f7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d/64cf176b-c737-492c-95a5-54695fc5bc2d.crl

            X509v3 Authority Key Identifier:
                keyid:33:62:F0:BF:7D:FD:C9:04:AD:3A:12:76:E3:B0:8B:4B:15:79:4C:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/64cf176b-c737-492c-95a5-54695fc5bc2d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2700::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:14:e4:98:a5:3f:0b:3f:72:11:ba:b7:c8:2a:b7:03:53:04:
         99:b7:a3:a5:a5:7a:cc:20:9c:b5:99:88:90:86:37:ae:80:40:
         81:67:90:e9:4c:11:b9:63:13:0d:3c:a9:f5:d2:97:d1:44:3b:
         f8:a9:bc:e2:58:73:69:10:f6:d6:b2:d9:83:9d:78:c7:ce:ab:
         b9:e4:25:86:22:94:96:98:f8:15:52:13:7b:8a:59:aa:cc:ca:
         73:fa:8b:94:a0:d8:79:c7:4c:a1:cf:7d:b8:db:fa:c4:ee:37:
         2e:af:32:e0:96:f2:73:39:ec:24:54:84:75:42:31:35:81:3e:
         51:0a:a0:e2:d5:62:76:67:e8:64:ad:fe:4c:04:1f:df:a9:8c:
         3f:6d:12:ad:06:0b:ab:0b:a6:9c:cc:8b:c9:0a:16:ba:6a:20:
         e6:21:d1:cc:16:ad:bf:f1:0a:7a:0d:5b:dd:37:3e:89:ed:72:
         7a:6b:6f:00:01:5f:ff:45:f6:1b:68:2c:b9:b0:8b:15:fb:92:
         45:90:50:61:d7:74:9a:15:9c:6f:02:e4:d7:90:b0:a0:1c:f4:
         02:88:a3:6a:9f:42:81:56:c1:b9:90:48:88:a4:b0:df:24:93:
         8b:26:ec:70:e4:ff:2e:72:9e:64:d9:fb:bf:bf:fe:e1:3e:20:
         63:41:62:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:54:24 2025 by rpki-client