Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/f795707f-42b9-3e1c-9651-5bb7df87b841.roa
File:                     f795707f-42b9-3e1c-9651-5bb7df87b841.roa (raw, json)
Hash identifier:          oe6VmhupYjiDf+jywbR35H45of9b4ASGA/CEq5JbCLQ=
Subject key identifier:   66:9A:A4:D0:5F:60:38:E7:1F:72:87:5F:BF:2B:51:63:8B:05:97:2A
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F43285849D594E880032B84E6AA35E8C0
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/f795707f-42b9-3e1c-9651-5bb7df87b841.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     32982
IP address blocks:        2607:f368:804::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e8:80:03:2b:84:e6:aa:35:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=24bc4a70-f374-47e7-bf21-e82327c2c6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4c:d8:2b:dd:10:79:26:31:3b:c2:19:70:08:
                    ab:06:c7:89:43:96:b1:93:9c:5f:e7:0f:11:f1:f1:
                    14:23:53:bd:90:f9:3d:41:79:83:67:fa:87:55:ee:
                    b3:fe:db:19:73:73:c9:c9:13:1c:76:61:31:74:51:
                    ea:02:98:c2:d0:bd:73:11:e5:8b:72:45:ed:03:2a:
                    61:11:05:8e:60:3d:e2:1e:1c:d4:1b:29:7b:c6:1d:
                    57:73:c3:93:e3:fa:ce:24:5a:11:47:ae:67:94:4c:
                    b5:cc:5a:f7:a1:97:12:f8:66:2a:d0:2a:7e:12:c2:
                    77:c2:d8:db:cd:7a:25:8a:3b:9f:a1:82:e5:fe:dc:
                    0d:87:8f:f5:14:44:0e:b5:3c:ea:dd:8e:0d:68:92:
                    75:04:6c:83:56:85:3a:35:86:83:20:d4:0f:c0:bc:
                    bf:ea:79:46:b2:c4:16:ab:79:65:3a:73:01:5b:cc:
                    58:b5:62:e8:a2:a3:a4:64:c4:90:55:45:15:99:0c:
                    ee:1c:83:d8:b5:b0:83:13:d9:c2:62:9c:ac:be:d0:
                    bd:2d:8c:9d:99:75:a3:48:eb:c9:d0:3a:c7:df:a3:
                    28:07:09:3c:b9:7e:7d:b6:66:0a:a5:2d:41:c1:a2:
                    2b:5f:7e:00:ef:18:13:db:5a:9c:80:dc:7f:fc:46:
                    98:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9A:A4:D0:5F:60:38:E7:1F:72:87:5F:BF:2B:51:63:8B:05:97:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/f795707f-42b9-3e1c-9651-5bb7df87b841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:804::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:8d:3c:ac:ec:26:c2:80:ce:26:8c:10:65:83:45:51:57:e3:
         53:b4:e4:ca:c2:be:b6:d2:3f:94:aa:44:2a:98:a3:8c:61:ef:
         c9:e7:f0:6c:f9:17:a7:f0:c0:0e:c6:64:96:b7:6f:44:85:8d:
         26:14:a8:b8:ed:86:c8:df:95:50:93:4c:45:a7:7c:b3:1d:ab:
         95:88:ff:36:b6:95:2e:27:4c:5f:ae:60:d9:0d:d3:4e:a8:f9:
         b8:45:9b:f7:f8:93:e1:ad:e4:f8:19:68:6a:48:a4:1d:f4:5c:
         96:91:e4:c6:ef:0a:54:d5:17:98:b3:b2:ac:ad:b6:84:29:da:
         79:2d:8c:06:47:c6:c7:7d:a3:ff:f5:72:d6:f5:d7:25:38:a6:
         9d:72:43:a1:b4:4c:b9:10:48:27:c6:e8:6d:e4:4e:d5:b3:d2:
         74:23:1f:1e:7a:7d:1b:61:61:bf:89:0c:14:24:d8:2b:ab:6b:
         57:7a:bb:b8:8d:61:41:c6:44:04:88:79:e9:e7:a9:34:e8:4b:
         65:f7:1f:90:d1:cd:66:12:81:a3:42:19:34:6d:0d:b0:27:4f:
         87:d1:85:a9:ca:cb:d7:f5:99:da:06:45:36:b8:28:a9:ce:0d:
         69:17:4f:21:7d:9d:3c:5f:cd:b1:20:be:6e:ba:c8:ea:d2:68:
         12:ca:39:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:28:08 2025 by rpki-client