Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e/56081283-8713-31c0-974c-912c99eaf5e3.roa
File:                     56081283-8713-31c0-974c-912c99eaf5e3.roa (raw, json)
Hash identifier:          h0ZZ9+3ksToLkZezhaMSbNYNO8j8U9SK35PbbId+WdQ=
Subject key identifier:   66:1D:56:98:85:AB:A3:68:EE:7E:74:3D:53:EE:4F:6D:49:8F:08:27
Certificate issuer:       /CN=ee734db0-353b-4ddd-a33f-8fa55d49a69e
Certificate serial:       010D0C9F4328584AA42B79E5F4F11FB174939F40
Authority key identifier: 7A:95:C1:FB:A2:78:79:93:B6:7F:4F:04:2C:DF:D3:FD:51:A3:7E:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e/56081283-8713-31c0-974c-912c99eaf5e3.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     397168
IP address blocks:        2607:c280::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e/ee734db0-353b-4ddd-a33f-8fa55d49a69e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e/ee734db0-353b-4ddd-a33f-8fa55d49a69e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:79:e5:f4:f1:1f:b1:74:93:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee734db0-353b-4ddd-a33f-8fa55d49a69e
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=75d8de97-28bd-4bc3-82c5-81f94b351e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:35:98:f9:44:da:b7:61:44:68:b6:20:de:55:
                    a2:c2:21:fd:49:2f:ae:f7:67:9b:bb:12:10:d3:39:
                    8b:5a:74:30:29:60:c9:56:51:57:08:95:87:f8:ab:
                    f5:76:a5:2d:e8:d2:49:71:88:8d:31:8a:04:95:a7:
                    03:44:af:91:c8:e5:88:49:b4:88:8d:30:28:46:80:
                    6c:76:3c:cc:76:1b:d7:9e:0a:77:1b:f6:76:f1:54:
                    66:d7:76:4f:f1:1d:af:61:75:84:10:2f:06:ae:12:
                    35:55:58:8d:74:17:7e:89:19:3d:82:5b:b8:09:43:
                    2a:12:e4:e1:b0:85:01:59:b4:0d:cd:99:91:3c:17:
                    d1:4e:c3:e7:3d:95:1f:84:cb:87:ec:0d:40:6b:51:
                    fb:76:d6:4e:c7:5a:bc:cc:65:89:fe:a7:bb:48:3a:
                    2e:af:69:ee:bb:ac:25:7a:10:b5:5c:d3:4c:7a:a6:
                    56:3e:1d:aa:13:d4:f4:1e:18:64:5e:81:65:9f:2a:
                    bc:5f:ec:5d:c5:95:e3:72:b1:94:7e:e5:59:af:f2:
                    9c:73:19:9f:88:ad:26:b2:27:82:14:e0:3c:29:1f:
                    ea:5b:9e:05:4b:22:38:83:1f:43:29:39:2c:e1:85:
                    d0:2e:4b:4c:30:01:74:0a:7f:6e:18:76:78:fb:b7:
                    50:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1D:56:98:85:AB:A3:68:EE:7E:74:3D:53:EE:4F:6D:49:8F:08:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e/56081283-8713-31c0-974c-912c99eaf5e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e/ee734db0-353b-4ddd-a33f-8fa55d49a69e.crl

            X509v3 Authority Key Identifier:
                keyid:7A:95:C1:FB:A2:78:79:93:B6:7F:4F:04:2C:DF:D3:FD:51:A3:7E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee734db0-353b-4ddd-a33f-8fa55d49a69e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:e5:fc:66:2a:5e:c2:3d:8b:a2:c1:b2:83:5e:31:62:53:69:
         52:ab:cf:f3:9d:1d:11:e3:aa:1e:ef:57:4d:93:17:81:71:8d:
         7d:a4:81:b5:66:dc:94:12:ea:cb:a2:0a:9f:41:ca:b4:37:d2:
         88:2e:2a:74:99:97:78:71:93:24:dd:b7:8a:bb:81:17:b1:05:
         8c:fa:69:56:54:6d:5d:6f:2f:9d:08:2c:17:6f:f3:3b:5e:aa:
         3f:6b:87:e6:0a:d4:cb:d8:fd:8c:d0:28:f1:2a:98:1e:f2:78:
         80:1a:2f:e9:c4:8e:55:47:96:99:96:b3:de:fc:5f:73:62:be:
         ba:3a:ec:c3:fa:84:46:c0:33:82:70:7d:89:d3:ba:1b:b7:50:
         cd:39:85:db:cd:01:4b:10:34:b8:90:59:22:d1:7b:df:8f:43:
         fa:0c:b0:14:c0:57:68:d6:b9:a2:5b:b5:51:c4:1f:df:eb:de:
         dd:f1:c9:f5:e8:3f:9c:d4:a1:3a:c2:9f:0f:38:b6:2f:d4:2e:
         df:7b:7d:b6:86:9b:86:56:dd:2c:52:d5:84:7e:dc:9e:4b:b4:
         b5:62:88:f0:83:64:fe:db:8a:0e:1d:77:e0:00:a4:75:b8:9f:
         46:d4:70:ce:56:75:8e:3f:2e:b6:cb:6c:97:64:a2:1c:37:16:
         37:ac:aa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:53:43 2025 by rpki-client