Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/27b18fe8-7c72-374b-b454-5e9f4b2fba4e.roa
File:                     27b18fe8-7c72-374b-b454-5e9f4b2fba4e.roa (raw, json)
Hash identifier:          sHSKt7oTFCPlOaz1ON1w3c3dnWEftCsJlKwyMME8DWY=
Subject key identifier:   0B:CB:BF:FA:EB:02:3B:23:08:3F:18:31:D3:63:57:AD:99:2F:87:B6
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F4328584908815A3BBB636648DD62C500
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/27b18fe8-7c72-374b-b454-5e9f4b2fba4e.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2605:a7c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:5a:3b:bb:63:66:48:dd:62:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=b2e78b6e-18ef-42a7-9851-ff39c8e6ed3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:06:0c:12:c2:52:6a:78:2b:f5:26:4c:06:
                    00:0d:ea:17:3a:85:56:bd:c0:e4:7a:0e:ad:1d:ea:
                    ec:76:8e:88:bb:2b:0d:52:4f:88:b4:fe:9b:bc:6f:
                    fe:1f:0e:92:ab:e7:c6:b5:e3:63:0a:5e:12:48:e8:
                    8b:3f:82:e1:c2:46:fd:6e:82:06:db:8c:a0:07:f3:
                    ba:c3:2d:ff:1a:43:c5:12:aa:94:8e:bd:69:5e:5e:
                    d6:0f:77:ff:ea:e9:27:d9:4f:de:85:6e:9a:23:4d:
                    cc:ef:12:3f:8e:3f:53:2e:2d:74:56:78:74:48:aa:
                    2a:fd:40:c7:92:e9:6c:50:9e:2e:01:e0:54:41:e4:
                    bb:d1:0d:91:67:01:e8:a6:53:53:4f:cf:c2:b8:4b:
                    b0:be:b8:8d:8b:9b:f5:a9:d1:18:2c:91:f9:dd:85:
                    ff:1d:df:90:ce:5b:80:53:2d:f4:e9:4b:67:62:3c:
                    b1:02:59:fb:77:b9:f0:4d:aa:cf:ed:3c:0d:e3:8b:
                    79:77:40:bd:a4:60:13:54:a4:a2:d9:b8:3d:9f:3a:
                    be:ab:b3:36:28:3d:23:02:69:42:04:38:8d:43:2f:
                    41:ab:12:da:c0:fb:02:33:23:32:34:fd:04:fa:c7:
                    0e:24:46:8d:a1:26:30:76:84:81:f3:79:c4:99:ed:
                    38:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CB:BF:FA:EB:02:3B:23:08:3F:18:31:D3:63:57:AD:99:2F:87:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/27b18fe8-7c72-374b-b454-5e9f4b2fba4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:9c:90:98:a8:fd:84:d0:e6:61:0c:8f:c2:d6:21:41:d9:d2:
         e9:cb:77:e1:5f:bd:03:64:7d:a5:c3:ef:fe:68:0d:07:ee:30:
         8b:85:b6:50:18:dc:fc:d1:cb:a5:0c:02:de:01:75:4b:47:80:
         48:71:d1:db:ed:20:7a:79:93:c3:06:ff:ae:67:8a:c5:e9:f3:
         94:e7:48:b2:98:7a:96:93:46:b9:ef:27:a9:c2:fc:80:4f:75:
         57:e3:39:2f:7c:24:8c:38:0a:47:57:ab:50:eb:03:d1:af:1b:
         fe:11:31:f7:38:8b:74:db:80:ea:0e:21:38:e2:35:a1:6a:24:
         18:ee:46:bc:7f:04:9e:ef:67:54:e9:49:05:7c:dc:6d:3c:60:
         e1:12:ae:09:53:3e:38:01:31:b3:01:1b:0e:3c:80:34:d9:6a:
         07:51:06:61:7e:50:1b:e3:26:73:f9:9b:c8:28:01:2a:a0:9e:
         43:7c:e4:a6:3d:dc:80:dd:7b:a1:17:ac:23:35:25:a2:2e:57:
         66:e2:c5:7d:ed:85:5b:2a:30:37:02:05:65:6f:a6:56:8d:f5:
         ea:ce:1b:d6:a8:b0:1b:ba:f7:1f:e5:cb:fc:5e:d6:39:79:84:
         0c:d5:27:54:27:81:bf:2b:24:21:c4:a2:b1:4a:37:30:d1:b4:
         18:11:82:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:57 2025 by rpki-client