Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/7e918df4-6110-3466-89a8-e6227f4de1be.roa
File:                     7e918df4-6110-3466-89a8-e6227f4de1be.roa (raw, json)
Hash identifier:          G9eb8OqJMp3tmatvRo1yEnUqt+8E3sYFkYY26Li4ff4=
Subject key identifier:   B0:D1:83:F9:D5:49:FA:3B:E5:A0:B6:EF:A0:CF:D8:A8:47:2A:E2:F0
Certificate issuer:       /CN=8f6f01b8-13ad-4c79-aa72-65cf0dedd899
Certificate serial:       010D0C9F4328584A169E71C5AAD11A30BC8A6A60
Authority key identifier: D1:83:CB:75:C4:8F:DD:CA:6A:BE:96:34:2E:C7:6C:51:0E:37:FE:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/7e918df4-6110-3466-89a8-e6227f4de1be.roa
Signing time:             Thu 05 Jun 2025 08:07:47 +0000
ROA not before:           Thu 05 Jun 2025 08:07:47 +0000
ROA not after:            Wed 03 Sep 2025 08:07:47 +0000
asID:                     53428
IP address blocks:        2607:e840:20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:16:9e:71:c5:aa:d1:1a:30:bc:8a:6a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6f01b8-13ad-4c79-aa72-65cf0dedd899
        Validity
            Not Before: Jun  5 08:07:47 2025 GMT
            Not After : Sep  3 08:07:47 2025 GMT
        Subject: CN=286651fe-3635-4ce7-9d50-80e90cc7af49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:94:a2:ec:8a:fc:49:53:e6:b5:ef:1b:19:f7:
                    03:92:8a:e2:38:52:35:7a:d8:bc:e5:dc:dc:60:1d:
                    83:2d:21:92:d5:8b:f4:a8:e4:d3:27:28:29:f5:f0:
                    4b:cf:0b:4c:56:23:2e:88:fb:b6:41:5f:73:2f:5c:
                    70:e1:a7:25:ac:d1:1b:72:e8:94:f1:0a:68:93:80:
                    73:83:e5:9b:d3:c4:1b:10:f4:88:f1:5c:5c:95:ef:
                    f5:46:db:b0:1a:7d:3f:19:bd:63:b5:04:17:18:ae:
                    88:a6:1f:fa:31:d3:85:86:f1:48:db:cc:9e:f6:c4:
                    50:3d:87:2c:c6:85:b8:d8:b6:15:bc:6c:c6:21:3e:
                    22:3f:16:dc:18:b8:1d:5d:2d:4d:d0:00:5c:0f:7a:
                    d0:55:2a:4e:9f:d6:4a:bc:5d:a5:23:ed:f3:1c:eb:
                    b5:bf:b1:a1:d0:61:a3:69:5f:5a:36:05:a6:35:b1:
                    44:cd:eb:5d:d1:d1:be:15:aa:13:04:32:81:89:f2:
                    62:fe:84:ef:b0:dd:be:69:54:72:14:a1:f2:18:79:
                    2d:6d:7e:92:f7:87:4f:32:fe:d4:92:a3:34:b7:35:
                    c8:1c:4f:d5:de:c3:39:6d:56:26:ba:e2:26:bd:ea:
                    fd:3d:9b:c4:9d:ab:ab:a9:ba:a6:4b:50:d9:2c:ef:
                    50:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D1:83:F9:D5:49:FA:3B:E5:A0:B6:EF:A0:CF:D8:A8:47:2A:E2:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/7e918df4-6110-3466-89a8-e6227f4de1be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.crl

            X509v3 Authority Key Identifier:
                keyid:D1:83:CB:75:C4:8F:DD:CA:6A:BE:96:34:2E:C7:6C:51:0E:37:FE:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e840:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:33:53:0e:5f:cc:ae:ac:89:ee:01:aa:f7:bf:09:46:89:6b:
         38:e1:fc:ba:11:8b:9b:db:27:c9:de:db:95:ba:c3:12:66:b4:
         d3:e4:27:10:c1:66:7d:25:3f:7b:81:94:c4:26:fd:ba:63:02:
         2d:00:ad:ff:8e:2f:1d:58:f4:87:58:10:73:fc:2d:3f:de:8b:
         4e:94:4c:29:14:f7:ef:c6:76:26:63:1c:6d:dd:39:3c:5d:ff:
         73:cb:f4:e5:4a:4a:a6:9a:52:05:38:01:a1:78:38:61:e1:3f:
         07:76:17:0c:29:e8:9d:36:9c:1f:c6:25:9e:6f:4e:84:45:8a:
         41:11:6d:d1:55:32:f4:23:3b:ce:c6:ad:2b:41:56:77:48:19:
         98:23:34:29:15:69:b9:fe:d0:22:2e:fa:95:35:6f:b5:a0:58:
         f4:2c:2a:a7:d3:d1:ee:84:ec:62:11:af:6a:ab:2a:7a:ca:13:
         04:24:ba:87:41:86:be:a1:d2:da:e0:63:c6:2f:0e:db:64:40:
         08:f2:55:b3:78:ee:97:4c:bb:3d:2e:7e:b5:63:21:89:69:5c:
         ad:8d:1b:4e:24:9c:2e:ac:b4:7f:60:db:f5:b9:26:c5:9d:d5:
         f4:8e:18:31:a7:41:20:19:0b:b4:a7:26:bd:9c:4b:cd:c6:5b:
         8c:51:24:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:46:38 2025 by rpki-client