Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/c2470a94-38a7-371b-81ba-0b3bb349cbdf.roa
File:                     c2470a94-38a7-371b-81ba-0b3bb349cbdf.roa (raw, json)
Hash identifier:          DVuCW/SPYF7vTd937I+WkpA1wXPStlliL/N2jr16InY=
Subject key identifier:   E5:D4:65:E9:0F:F9:38:5F:A6:5F:DE:6F:62:5D:CB:8C:8F:E0:D4:98
Certificate issuer:       /CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
Certificate serial:       010D0C9F4328584A0D6A7FEAF6A733AEB814A3C0
Authority key identifier: FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/c2470a94-38a7-371b-81ba-0b3bb349cbdf.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        2607:8d40:f20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:7f:ea:f6:a7:33:ae:b8:14:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=a5b8a9d7-6472-4713-95e1-cf5fc71f5276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3c:12:0e:a8:74:1f:b6:eb:84:7d:c5:9d:70:
                    5d:43:d7:f0:09:a3:c8:d6:1c:7c:16:e1:f3:a5:30:
                    bc:af:05:a6:82:00:4e:00:58:91:b9:4e:bc:13:fa:
                    2d:e7:31:c0:17:c6:ee:fc:df:29:74:94:b1:19:62:
                    5c:b3:3b:43:48:1a:51:ee:33:5a:30:d4:3d:2a:f8:
                    bb:e8:ec:26:79:6c:a5:32:ef:2c:8d:e3:02:bd:3b:
                    7e:04:c0:fa:90:c4:be:9d:26:ce:46:2f:a4:66:e2:
                    57:e7:23:f9:b6:4d:9b:6f:61:6d:41:20:69:ca:35:
                    60:41:91:52:76:27:c5:3c:c4:9f:18:4f:c4:bd:6f:
                    b9:df:16:b4:a9:b2:f5:d6:d8:d2:b3:9a:6d:9a:45:
                    c0:20:28:ae:aa:b2:7f:32:22:bb:16:66:3e:a7:7a:
                    49:11:ee:88:fc:2f:ea:06:90:2f:f9:c8:3b:b3:7e:
                    38:3d:a3:d7:2f:a8:2e:62:95:6a:e9:47:34:7a:28:
                    fa:4a:bf:98:ec:70:9b:7a:4a:53:d2:54:39:b1:c0:
                    c3:40:9b:47:fb:59:24:46:b1:9a:05:a1:73:da:9a:
                    79:df:c7:a8:f7:d3:9d:eb:29:11:b1:f9:1c:23:f0:
                    83:eb:6c:50:28:95:35:4e:ee:c9:00:a9:a2:04:44:
                    79:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D4:65:E9:0F:F9:38:5F:A6:5F:DE:6F:62:5D:CB:8C:8F:E0:D4:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/c2470a94-38a7-371b-81ba-0b3bb349cbdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl

            X509v3 Authority Key Identifier:
                keyid:FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8d40:f20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:6b:53:52:fc:4c:12:6a:1c:a5:a5:69:dd:80:66:4f:29:6f:
         0a:80:03:22:6a:9c:a9:29:97:18:60:1f:ee:fd:ad:48:9e:c0:
         fd:0e:f5:6f:a9:1f:83:5a:88:83:9f:94:81:f3:75:58:61:89:
         4e:b1:ed:c9:2b:fd:56:ef:8b:3c:37:3f:9c:a6:a8:71:62:14:
         42:d6:61:d8:0f:fb:ec:58:88:79:96:45:33:6e:dd:26:8e:66:
         08:88:84:9c:fd:2f:44:9b:7f:0c:66:2b:70:68:30:3b:9e:5b:
         47:c7:08:53:7d:a1:5e:7d:f4:87:c7:fb:bc:85:0a:b5:ee:a5:
         cb:d0:90:c1:1d:66:5d:6d:4f:1b:c7:d7:eb:40:cc:63:a4:05:
         ee:76:99:bc:b6:9a:c0:47:b1:cb:64:1d:ab:07:52:d2:ce:e9:
         f5:54:00:3f:45:eb:f4:a2:43:1e:c5:1d:a6:85:5b:57:57:12:
         68:17:59:a6:0e:f3:af:66:5b:5b:00:d0:62:2e:16:6d:c6:f0:
         94:44:4b:4d:9c:db:06:d7:e3:c9:d6:65:af:81:05:98:58:6d:
         7c:f3:40:9c:3e:6c:7c:b0:2a:6c:0f:d1:71:08:b1:c8:a7:1b:
         db:4b:fb:1c:2f:81:c7:6b:8a:66:33:c2:9a:d4:7e:78:a0:dd:
         d5:ef:7b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:45:46 2025 by rpki-client