Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/59a5be5e-265d-3a86-995d-2d74371e9b02.roa
File:                     59a5be5e-265d-3a86-995d-2d74371e9b02.roa (raw, json)
Hash identifier:          vujgj4OGtWLXPncyU/kx8BgJJKvMF8XlJfz5rploahg=
Subject key identifier:   C6:02:E6:4A:C8:4C:47:BE:01:F2:B3:AF:1F:01:C2:7A:2C:68:9D:10
Certificate issuer:       /CN=206b65c6-b880-42a7-b728-a37b15fc236d
Certificate serial:       010D0C9F43285849CE9A431E2163B8922B2DFBC0
Authority key identifier: 29:55:7C:0C:EE:8D:18:B1:3F:85:BC:85:D7:23:36:87:E3:1F:33:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/59a5be5e-265d-3a86-995d-2d74371e9b02.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     6360
IP address blocks:        2607:f278::/32 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/206b65c6-b880-42a7-b728-a37b15fc236d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/206b65c6-b880-42a7-b728-a37b15fc236d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:43:1e:21:63:b8:92:2b:2d:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206b65c6-b880-42a7-b728-a37b15fc236d
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=e9cbed56-aa68-4b73-aa0e-7794b31287bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fd:64:93:96:0d:98:b0:53:b4:0e:8f:4c:4e:
                    15:f4:cf:ec:0b:b0:3a:c1:39:c1:b0:cb:df:2d:51:
                    85:ca:e6:11:e2:4a:66:bd:b2:8b:1d:43:d4:27:7e:
                    f6:4c:f5:e2:15:bc:28:64:2c:bd:60:6b:fa:3e:38:
                    23:38:40:0d:dd:94:4d:ea:7c:16:a0:0d:74:84:97:
                    2b:04:bd:5b:3e:92:58:9b:74:5a:10:d8:6d:7f:f1:
                    fe:b4:8c:ee:fc:de:7e:c9:ce:4c:35:db:e4:10:b1:
                    9f:fe:e8:0b:f9:15:ca:e6:61:f6:a5:bc:dc:63:8b:
                    4a:d5:c8:18:8e:19:8f:1f:4d:bb:75:56:85:2f:1a:
                    13:04:71:54:08:a6:b0:e7:86:3a:5e:ab:45:0b:bd:
                    9f:de:9f:06:d7:42:ff:b3:01:7b:46:7a:67:91:2c:
                    1f:61:48:4b:f0:87:30:33:23:f2:7a:fa:10:c8:8b:
                    4b:7a:0b:2e:77:95:e6:fe:70:90:bd:61:7c:d4:11:
                    35:22:48:9e:fc:81:c8:c7:80:c9:9a:1a:03:66:3b:
                    ed:32:f3:9c:ab:fe:b6:33:2b:48:e3:d9:de:ce:4b:
                    42:b4:d8:14:df:9a:51:7c:fd:7e:3a:68:b3:4f:0d:
                    69:e2:96:90:3a:5a:63:56:89:08:de:86:20:bc:c1:
                    bc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:02:E6:4A:C8:4C:47:BE:01:F2:B3:AF:1F:01:C2:7A:2C:68:9D:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/59a5be5e-265d-3a86-995d-2d74371e9b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/206b65c6-b880-42a7-b728-a37b15fc236d.crl

            X509v3 Authority Key Identifier:
                keyid:29:55:7C:0C:EE:8D:18:B1:3F:85:BC:85:D7:23:36:87:E3:1F:33:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f278::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:03:c1:23:b1:42:d9:7b:0d:c8:9f:64:69:03:83:ba:90:78:
         90:15:2b:17:ca:e5:c7:61:16:b1:20:36:0e:24:b4:2b:ed:22:
         64:52:83:aa:58:16:ea:48:3e:9b:ba:9d:55:fd:ae:04:66:d1:
         dd:7f:36:0f:77:6b:f0:16:9b:04:80:bd:45:32:35:a8:81:2b:
         db:80:b7:ba:0b:4e:a8:ba:1a:94:c0:70:e1:c0:a0:2e:6c:39:
         4b:6e:82:34:1c:3b:1c:ee:cf:5a:ea:17:09:4d:0f:00:31:4b:
         0d:5a:69:4a:32:ae:dd:6f:ad:c6:ae:19:c8:67:2d:7b:fc:61:
         70:fa:cb:b3:ff:b1:a7:6a:6d:59:89:da:eb:18:27:1b:a7:0b:
         de:9e:a5:0d:4a:8a:cb:de:c3:dc:57:c4:4a:31:1a:e4:c4:e4:
         fb:d6:08:f5:3b:6d:a9:b2:55:1f:ac:ed:c2:1a:95:70:04:d9:
         35:c6:c1:c5:cf:ae:54:7a:5b:3f:02:64:cc:2f:ea:07:ed:ff:
         a9:73:33:6e:23:a7:fa:82:04:45:98:89:0d:bc:84:45:2e:c6:
         76:10:2a:12:60:e3:fa:92:5e:36:d6:a9:f6:9c:83:98:58:f7:
         90:f8:6d:62:8d:d2:53:3c:9c:1b:38:8e:a8:52:9d:8e:ca:d3:
         8e:9d:6d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:37:13 2025 by rpki-client