Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/ab5e783c-b98d-3a2d-9a26-cf43bb06b01c.roa
File:                     ab5e783c-b98d-3a2d-9a26-cf43bb06b01c.roa (raw, json)
Hash identifier:          i3Wh0RDJpW78umozLV54fcYoAltLCoyaWNy4Gn7JljE=
Subject key identifier:   7B:C7:44:AE:B2:43:7A:60:99:4E:20:6F:6B:6A:E6:8F:8B:7D:58:52
Certificate issuer:       /CN=9fee4199-1b61-4b01-b005-17ea1cb9a644
Certificate serial:       010D0C9F4328584A8410DD43A0837D165DC2A500
Authority key identifier: 13:79:23:FD:4F:74:3F:9C:89:E3:F1:DA:16:3C:EE:75:C4:BD:B6:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/ab5e783c-b98d-3a2d-9a26-cf43bb06b01c.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     14464
IP address blocks:        2607:d00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:dd:43:a0:83:7d:16:5d:c2:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fee4199-1b61-4b01-b005-17ea1cb9a644
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=522405a8-839a-4256-b73e-96660f891fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:90:83:66:f5:c4:90:c9:cc:48:87:62:ab:
                    03:cc:95:af:a4:4e:52:be:4e:05:f8:65:00:b3:9b:
                    8b:96:25:dd:62:1a:4f:e7:11:31:1a:6b:de:9e:d2:
                    ed:78:bc:d3:3d:2b:16:f3:c7:66:ea:50:d8:1b:a9:
                    3a:06:3c:72:3f:b9:77:43:74:bf:1f:59:93:74:32:
                    9f:b6:d6:b8:38:f9:c4:9b:c9:c7:fe:74:5c:a3:9c:
                    1e:a4:fe:5b:56:9b:de:a0:b3:02:ca:d1:6b:cb:5a:
                    9a:7e:26:6d:3f:7a:5b:79:19:5f:ac:de:fc:3f:57:
                    57:1f:52:a4:55:b9:d3:f2:7e:82:57:db:03:08:a2:
                    be:d5:b5:87:ff:26:1c:20:4e:fc:73:03:b6:68:99:
                    ce:74:de:63:13:23:02:79:d3:51:ce:31:52:65:59:
                    3e:9a:f0:1d:4c:8b:5c:95:84:8f:fb:c2:2b:0f:77:
                    bf:45:5d:3c:e8:dd:ff:8f:0c:a6:8d:f8:48:1b:ff:
                    9c:33:a6:ff:a0:45:73:f1:d1:92:59:6b:d5:02:5d:
                    7d:9d:51:89:fa:f8:4e:95:52:13:45:33:75:2e:05:
                    f4:85:14:8b:c5:50:cf:18:f0:10:61:06:48:85:68:
                    b9:71:24:d2:82:99:fb:5d:6c:6a:ab:01:59:94:29:
                    b6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C7:44:AE:B2:43:7A:60:99:4E:20:6F:6B:6A:E6:8F:8B:7D:58:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/ab5e783c-b98d-3a2d-9a26-cf43bb06b01c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.crl

            X509v3 Authority Key Identifier:
                keyid:13:79:23:FD:4F:74:3F:9C:89:E3:F1:DA:16:3C:EE:75:C4:BD:B6:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:50:78:5b:80:f7:66:38:e4:3f:28:5d:27:37:6b:51:e4:ca:
         f2:ea:28:26:0f:c7:c3:72:b1:78:28:fc:1e:11:b5:24:dd:84:
         a5:b3:32:5b:7f:a0:92:9c:32:db:71:ac:3d:2b:4d:19:dc:38:
         8d:95:0b:98:7e:39:95:1d:1d:de:f7:8d:b9:a9:d4:ef:12:79:
         6f:da:95:bf:5e:dc:5e:4e:f5:c5:0e:94:f8:93:b9:bc:44:7f:
         47:aa:4d:25:a6:ff:ba:db:a8:98:36:56:d0:1d:90:cc:3d:2b:
         0d:f3:43:00:51:d0:77:42:63:7c:00:21:e9:01:d0:b1:6c:19:
         be:db:43:6e:81:b6:43:78:2c:41:9e:6a:3a:d1:3a:af:81:da:
         c9:7a:58:d6:e4:f7:ad:37:58:b0:7e:0e:14:41:a1:74:f8:b2:
         e9:5a:ba:b9:1e:4b:e6:02:9e:ff:e8:1c:8b:fc:bf:a7:78:8f:
         82:e0:b4:bc:b6:df:c1:38:9b:3f:0f:23:6f:55:29:b6:2f:56:
         97:b0:98:ad:5e:8c:ae:8a:5c:c9:c2:85:b8:37:ac:e2:a1:8f:
         bb:62:ab:f1:6a:e1:6d:3a:c3:38:bb:16:0f:b7:c4:5c:2b:5b:
         2b:66:91:28:e8:c5:ca:e1:90:da:ff:17:68:e6:7c:99:5d:35:
         a8:a0:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:51:14 2025 by rpki-client