Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/2f6c7b5c-927e-35e4-97d7-0b378c680f16.roa
File:                     2f6c7b5c-927e-35e4-97d7-0b378c680f16.roa (raw, json)
Hash identifier:          Qm26FgkNJtTrccrSw3K7pjnSwe7weHzAuMPNhg7bfTM=
Subject key identifier:   B5:48:6F:1B:AF:13:E9:23:71:61:42:53:FA:1B:0F:C2:C3:DC:B3:79
Certificate issuer:       /CN=ee74c799-7d4c-4df3-b711-296c34338ef5
Certificate serial:       010D0C9F4328584A78E5F4BFFA0F13F341E1FD00
Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/2f6c7b5c-927e-35e4-97d7-0b378c680f16.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     53264
IP address blocks:        2607:ff50::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e5:f4:bf:fa:0f:13:f3:41:e1:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=75a9439f-6fb6-4b78-8571-d93ab66e3a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fc:16:03:1a:dc:f6:03:ea:a6:2f:0d:a7:c0:
                    7b:4e:c8:d0:cc:1c:6d:60:82:a9:a2:21:2e:bc:fd:
                    d7:5f:a9:0c:4a:85:c2:5e:e7:ec:a3:95:54:03:8b:
                    e0:c4:eb:f6:6e:bd:41:b0:cb:94:b7:b0:1f:ab:c7:
                    36:ed:e3:2a:81:03:51:ec:a1:9e:15:57:a4:c8:bf:
                    6a:9f:b1:50:6b:0b:31:74:47:b3:8d:3d:7d:47:87:
                    b7:33:df:9d:39:7e:62:15:bf:64:5a:f5:04:26:7e:
                    e3:e1:9c:9e:40:76:b3:f2:2c:ad:b7:8a:cb:46:be:
                    d3:2b:9e:0c:5e:d4:6e:1e:81:6f:f7:0f:84:28:14:
                    1f:97:62:dc:00:eb:24:3e:d1:16:92:66:cd:02:9e:
                    34:6a:7e:19:e1:f5:64:1b:bd:a3:68:70:fe:ee:04:
                    58:3b:f2:cf:e6:4f:fb:eb:10:a2:ea:14:e3:9a:cd:
                    be:ba:3a:fc:f9:ff:27:65:3c:27:f9:33:64:39:52:
                    08:8a:7d:a9:5d:75:c9:19:58:6e:cb:6a:9d:4f:73:
                    5a:05:b1:6e:19:10:ff:65:f0:8f:48:71:3c:bb:be:
                    b4:ba:de:b0:8f:20:48:2f:e2:7e:bd:a9:35:88:f5:
                    8a:f2:dc:03:a9:f0:db:59:47:50:c7:6a:62:48:d4:
                    75:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:48:6F:1B:AF:13:E9:23:71:61:42:53:FA:1B:0F:C2:C3:DC:B3:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/2f6c7b5c-927e-35e4-97d7-0b378c680f16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl

            X509v3 Authority Key Identifier:
                keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ff50::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:34:82:ff:d2:73:27:30:98:41:24:11:13:27:64:d2:1a:c0:
         be:bb:f3:2c:86:9d:60:73:85:0a:8a:6e:f9:dc:d1:07:02:28:
         5e:cc:84:dc:ab:a9:e0:ff:f2:c3:53:99:bb:8b:2d:3e:b1:76:
         23:cd:20:93:14:f5:de:d2:0f:28:ec:1b:14:fe:6a:99:09:bd:
         35:fc:b4:ef:12:fa:a8:42:d3:6d:26:ea:74:fb:7e:4f:3a:1a:
         29:bb:16:04:f0:cb:4e:2a:32:3d:e6:ce:6d:18:ca:65:9a:1e:
         43:45:89:b6:65:66:42:33:ac:b1:04:94:d0:4a:ad:9a:6d:f4:
         c9:64:89:5e:b5:a1:2d:de:f9:ea:2a:31:91:e7:31:c7:33:f0:
         22:58:f3:4b:3c:08:6f:26:1c:63:c2:2d:df:c8:23:10:6e:1e:
         8f:76:f0:00:8f:f6:b6:3e:d8:bb:ea:a6:6b:27:1b:64:c3:4b:
         0d:4e:e2:f9:01:b0:68:66:9d:2f:38:5c:a0:ad:68:1e:e2:68:
         4e:bc:2b:2f:43:ee:a1:10:b7:1d:f5:96:ec:82:33:9d:0e:44:
         2e:d1:52:23:8c:f6:a8:8a:3d:fd:3c:ca:0c:db:90:be:fd:f0:
         3d:14:60:ed:58:a1:6e:45:c4:bc:4e:a2:f1:ef:76:2d:b0:de:
         7a:c6:c9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:59:10 2025 by rpki-client