Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/e7ce82fa-a1e6-3b25-bc32-8e6cd8da4457.roa
File:                     e7ce82fa-a1e6-3b25-bc32-8e6cd8da4457.roa (raw, json)
Hash identifier:          3jUeHrLPaCMNbBIcOfBbpEBU0K076JSiDZGW8VCFZMM=
Subject key identifier:   C2:AF:BF:F1:23:00:DA:5C:A3:DE:9E:25:2B:7A:7E:35:F6:D1:78:D9
Certificate issuer:       /CN=219560ff-1a32-4424-9e54-f95df54ecc84
Certificate serial:       010D0C9F4328584AA9C0DB5C66C2186AEFA58E00
Authority key identifier: B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/e7ce82fa-a1e6-3b25-bc32-8e6cd8da4457.roa
Signing time:             Mon 28 Jul 2025 01:00:51 +0000
ROA not before:           Mon 28 Jul 2025 01:00:51 +0000
ROA not after:            Sun 26 Oct 2025 01:00:51 +0000
asID:                     5739
IP address blocks:        2607:f5f0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a9:c0:db:5c:66:c2:18:6a:ef:a5:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219560ff-1a32-4424-9e54-f95df54ecc84
        Validity
            Not Before: Jul 28 01:00:51 2025 GMT
            Not After : Oct 26 01:00:51 2025 GMT
        Subject: CN=2f37933f-5bf9-44bd-b64f-d9b1ac693e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a4:6c:c3:c7:82:a6:67:e5:43:ea:41:c1:f0:
                    25:4d:57:e5:fb:51:dc:ea:54:8e:ad:6e:86:27:79:
                    8b:12:7d:b7:ad:ce:0e:19:70:43:ba:ef:c1:38:44:
                    91:e6:ff:65:1f:3a:53:6f:83:50:8f:82:76:45:f6:
                    45:89:31:39:0b:51:45:8e:42:de:85:c6:56:cf:7a:
                    7b:68:8d:7b:48:7b:fc:6a:12:ec:50:c1:e8:0f:62:
                    ac:b4:3f:88:4f:7f:46:a6:d1:e3:c6:17:49:99:02:
                    12:43:d1:89:0a:da:15:c5:66:64:90:2a:86:4b:d0:
                    19:f6:0f:d6:de:25:6d:af:be:f5:51:03:2e:f8:9c:
                    8f:bd:b9:c8:7a:7b:3b:e9:cb:26:e5:c1:0e:61:64:
                    30:cc:f6:0f:77:a5:da:d5:7b:e8:3a:51:e6:e4:da:
                    a6:13:7d:8b:e9:7e:d5:a9:6e:30:a4:85:ae:8b:4f:
                    a3:f5:7f:ba:16:fe:81:37:de:b7:dc:9d:d1:8e:0d:
                    75:33:73:7d:8b:f2:64:b6:8c:86:de:3a:ea:3d:59:
                    38:13:8a:27:f7:a4:39:66:08:c8:d6:32:30:8d:13:
                    df:86:b4:45:2a:24:6d:7d:1c:ee:de:c9:56:50:dd:
                    ab:cc:1c:19:13:9b:14:69:83:e6:4d:6d:bc:ba:7a:
                    a6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AF:BF:F1:23:00:DA:5C:A3:DE:9E:25:2B:7A:7E:35:F6:D1:78:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/e7ce82fa-a1e6-3b25-bc32-8e6cd8da4457.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl

            X509v3 Authority Key Identifier:
                keyid:B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5f0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:89:be:7a:2f:c1:1c:ee:0d:fe:26:7e:ac:71:db:c5:cf:c5:
         f0:1b:49:1d:25:ed:63:25:ab:94:ad:24:81:57:88:d4:98:f9:
         14:c5:9f:2f:07:aa:de:3e:1b:66:3e:af:32:dc:1a:1b:74:7b:
         18:0a:09:e6:47:16:ac:2c:fd:17:a2:6f:ba:ab:32:99:ff:e0:
         6f:3b:1c:7a:89:d8:74:c6:98:59:07:9e:87:b5:c7:50:78:4f:
         85:23:50:a5:c6:7f:0a:cf:4c:55:f4:d1:ba:ab:43:7e:5c:ab:
         2f:1b:dc:8d:00:fa:95:98:a8:5d:fd:34:fc:df:8c:7a:e5:1d:
         82:32:c1:e4:21:81:db:dd:97:2c:f0:32:0a:c2:f2:80:4d:0a:
         be:72:f9:ce:e2:8c:ea:11:f0:2d:80:2a:9a:74:32:2b:cc:66:
         1e:67:c6:65:f9:5a:2a:34:88:c1:14:86:0c:5a:88:ed:08:e8:
         c6:9c:81:d6:03:7b:38:c5:87:17:ac:a1:6e:cb:eb:e7:54:33:
         d8:a6:1f:0d:6b:a2:c7:71:d6:1a:f9:ac:cd:2d:ca:d9:38:ae:
         b8:09:66:21:61:ad:4e:f1:51:a4:26:10:36:9b:2a:7a:6c:fe:
         06:b8:99:da:09:69:ff:cf:75:20:5a:de:c9:76:84:e7:42:50:
         d8:d2:0e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:40 2025 by rpki-client