Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb/988aced6-b287-30c3-a924-fbe4e2213e00.roa
File:                     988aced6-b287-30c3-a924-fbe4e2213e00.roa (raw, json)
Hash identifier:          OGoaom7KT/RJFaNp4tDg/OV+aESu7JSrnprlUAx7LEo=
Subject key identifier:   B0:1B:C2:19:5E:BE:8E:A7:14:69:7E:72:FF:DF:3B:34:CF:77:A7:32
Certificate issuer:       /CN=15da31d5-c163-4e2b-9bca-7534cb8229eb
Certificate serial:       010D0C9F43285849D85F9E3D035E32974E4070C0
Authority key identifier: 84:75:A9:CF:B4:CC:E9:E6:73:AA:9E:8F:45:CE:A7:F7:C1:C4:13:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb/988aced6-b287-30c3-a924-fbe4e2213e00.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     26227
IP address blocks:        2620:120:9000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb/15da31d5-c163-4e2b-9bca-7534cb8229eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb/15da31d5-c163-4e2b-9bca-7534cb8229eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:9e:3d:03:5e:32:97:4e:40:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15da31d5-c163-4e2b-9bca-7534cb8229eb
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=53b1aafa-2de8-4831-87ed-8157a86f0465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:27:7a:e2:11:ac:54:1c:12:bd:f6:00:79:2f:
                    81:69:40:79:d4:3a:13:de:dc:41:08:34:33:e7:0b:
                    f2:15:dd:2d:20:b5:7d:f5:c7:16:7c:d5:8c:3a:91:
                    d5:bc:df:7a:62:ab:79:78:f6:d0:0d:bc:b8:c5:2f:
                    88:70:71:71:26:35:92:ff:cd:48:d5:1a:fe:7c:26:
                    88:ec:99:1a:e2:13:72:e9:2e:52:79:43:8d:31:ef:
                    d7:9d:10:14:98:d7:b9:fd:44:8e:fb:47:57:cd:14:
                    00:39:fb:e2:50:2e:1f:0d:79:27:38:ff:e8:d2:84:
                    1a:37:1d:c0:e0:e0:48:23:b0:27:52:c8:32:f6:0c:
                    48:9f:85:53:06:0a:02:fa:2e:49:c7:57:83:10:cf:
                    89:b0:4b:17:23:1c:3b:e8:ef:65:88:92:0d:ac:df:
                    70:31:20:6c:9b:af:cc:32:f9:00:ef:e6:8d:bd:57:
                    18:bc:dd:d2:b5:b0:f5:0c:8d:f2:61:dc:a5:b1:b0:
                    80:e2:49:89:54:a6:34:6e:f3:af:98:e2:fe:1d:3c:
                    3e:17:00:92:f4:36:42:cc:bd:b4:bf:08:60:27:f1:
                    31:f1:b2:35:49:1b:03:9a:6a:f2:2d:28:06:96:ef:
                    66:be:c8:1f:39:92:a8:bc:4c:d1:4c:50:9e:a2:01:
                    db:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1B:C2:19:5E:BE:8E:A7:14:69:7E:72:FF:DF:3B:34:CF:77:A7:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb/988aced6-b287-30c3-a924-fbe4e2213e00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb/15da31d5-c163-4e2b-9bca-7534cb8229eb.crl

            X509v3 Authority Key Identifier:
                keyid:84:75:A9:CF:B4:CC:E9:E6:73:AA:9E:8F:45:CE:A7:F7:C1:C4:13:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15da31d5-c163-4e2b-9bca-7534cb8229eb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:120:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:8d:a6:4d:cd:b4:fd:b6:47:63:9c:1b:c1:1b:ff:04:d1:9a:
         32:54:60:5f:01:b7:b0:e8:8c:b5:d6:de:dd:91:9f:ba:e4:87:
         ce:33:c8:65:bc:75:91:e0:b8:24:e3:85:d2:ef:eb:ca:51:7f:
         24:43:76:c1:f0:81:4e:64:94:fd:8f:4c:b4:0f:4f:3c:a1:02:
         55:c9:bf:54:e2:24:dc:dd:49:64:0a:a8:27:9e:43:fb:d8:1b:
         e1:3e:5f:bd:a8:84:a5:1a:9c:ef:04:b0:49:dc:20:b7:15:f4:
         e9:9a:8c:8a:1f:93:ae:20:2d:87:ab:8b:9d:92:a8:dc:01:82:
         b4:17:ab:e9:62:fa:29:cd:30:a9:bf:9c:65:bd:50:91:67:ea:
         ff:20:9d:71:44:28:be:89:86:46:90:f4:ca:c2:79:b1:cb:c6:
         96:6b:ba:b7:9f:08:c1:d9:ca:3e:f7:99:fe:49:40:08:e9:b1:
         71:8c:2a:bd:b9:93:c9:76:1b:27:da:bf:3e:5e:b2:3e:e4:2f:
         71:f7:0b:56:65:36:a5:8e:4c:10:b2:74:b2:ed:99:5c:b5:59:
         d4:00:22:6a:4a:ba:f0:8e:d4:2b:71:f8:60:ff:5e:12:34:11:
         3a:35:1d:d7:67:2a:b8:37:37:3c:09:75:12:22:cc:17:a9:f4:
         d6:16:51:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:52 2025 by rpki-client