Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/97092b7d-d414-39ab-83de-0316c81e6aa8.roa
File:                     97092b7d-d414-39ab-83de-0316c81e6aa8.roa (raw, json)
Hash identifier:          Mt91U7mY7NscHLYlgiOOW1Kmbf8bj63jikXYxPEg7XM=
Subject key identifier:   07:9C:BA:09:13:AF:A2:79:04:58:25:DF:AE:AA:01:6C:FF:7E:46:1F
Certificate issuer:       /CN=27f24f9e-ef46-4828-9575-be547ae0263d
Certificate serial:       010D0C9F4328584A288907131ABD41171A314250
Authority key identifier: 5C:D9:FB:4D:9B:51:64:06:A6:D0:AB:BE:A0:03:92:1D:13:83:FD:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/97092b7d-d414-39ab-83de-0316c81e6aa8.roa
Signing time:             Wed 11 Jun 2025 18:09:11 +0000
ROA not before:           Wed 11 Jun 2025 18:09:11 +0000
ROA not after:            Tue 09 Sep 2025 18:09:11 +0000
asID:                     46475
IP address blocks:        2606:aec0:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/27f24f9e-ef46-4828-9575-be547ae0263d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/27f24f9e-ef46-4828-9575-be547ae0263d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:28:89:07:13:1a:bd:41:17:1a:31:42:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f24f9e-ef46-4828-9575-be547ae0263d
        Validity
            Not Before: Jun 11 18:09:11 2025 GMT
            Not After : Sep  9 18:09:11 2025 GMT
        Subject: CN=407e542d-f9c3-43c7-bb13-41d887d2b99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:fd:8c:86:b9:d5:ff:f0:a7:2d:58:d5:cd:
                    25:b6:10:81:01:da:48:a3:69:d9:e8:68:55:9e:f4:
                    52:cf:f7:72:b9:42:bb:b4:48:c7:6a:8c:3e:12:f5:
                    d6:77:87:a3:39:3b:e9:ac:1b:e6:13:45:0d:28:3a:
                    43:09:3b:ba:d5:a0:6c:80:c2:be:40:60:29:40:cb:
                    41:8a:e2:65:8b:93:a6:a9:32:cc:87:8a:1f:17:4c:
                    02:dd:1f:f0:7e:47:71:10:1a:e9:a0:d5:0a:d0:05:
                    24:ff:82:e8:b2:6f:e3:64:c2:bc:43:da:b1:4b:21:
                    81:a6:4e:ea:a5:7d:d7:81:ec:d9:f2:2e:94:3d:3d:
                    a8:75:1c:5e:76:9d:da:8d:62:23:1b:ef:83:49:09:
                    7a:74:56:29:7a:40:3c:65:9f:5e:56:83:ec:81:37:
                    d0:cb:3b:a7:a8:41:41:c4:9a:50:b0:a8:7c:1f:1d:
                    a5:04:67:d9:d4:66:89:4a:fe:dc:66:ff:e8:46:10:
                    5b:da:ae:3b:26:12:f2:fa:22:63:6f:84:3d:87:ed:
                    ae:80:bf:fc:05:7a:76:89:a4:bc:94:13:60:a0:67:
                    26:ce:11:21:22:de:f5:96:af:a8:1a:a4:7a:33:08:
                    12:fe:22:92:2a:13:7f:99:29:ac:e4:73:de:44:4a:
                    8e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9C:BA:09:13:AF:A2:79:04:58:25:DF:AE:AA:01:6C:FF:7E:46:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/97092b7d-d414-39ab-83de-0316c81e6aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/27f24f9e-ef46-4828-9575-be547ae0263d.crl

            X509v3 Authority Key Identifier:
                keyid:5C:D9:FB:4D:9B:51:64:06:A6:D0:AB:BE:A0:03:92:1D:13:83:FD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:aec0:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:06:d3:db:28:5e:3a:ed:3a:e2:87:ff:42:f4:b9:8f:b8:3d:
         7c:e3:e2:5a:1e:c4:c6:01:f9:b1:fb:75:f8:5a:22:ea:08:e0:
         6c:b1:c1:cb:09:2d:1e:0c:72:79:17:f1:dc:26:73:7b:90:7f:
         20:d8:2e:5e:5c:9e:89:0c:0c:ce:d1:f9:22:86:19:49:42:c2:
         99:fb:0e:f8:d7:e2:02:d7:70:22:ac:5e:4e:f2:d5:43:9d:f8:
         8d:0b:e0:97:67:30:91:89:1d:2f:a9:37:cd:ff:d1:a4:b4:be:
         af:0c:89:14:27:54:98:10:fd:92:b6:d0:6d:f0:4d:10:f9:a6:
         e8:a2:b3:04:f4:de:47:18:2b:cb:8b:d6:30:a7:1b:11:29:28:
         6f:4c:2b:86:c6:52:48:b6:ba:91:ad:c6:ad:c4:71:97:4c:88:
         64:c9:4c:2f:68:ec:aa:be:cd:6b:75:50:ee:9d:46:12:ed:81:
         84:3d:8d:55:57:7b:1c:5c:96:16:49:5e:8a:f4:3d:47:09:44:
         0f:5d:95:97:06:7c:19:81:88:19:e4:31:48:e4:71:3b:bf:cb:
         6d:32:57:5f:0e:fd:bc:a6:6e:9f:21:f7:f7:81:88:db:d8:b8:
         06:5f:03:e1:f3:37:17:6a:61:8e:28:25:d0:dc:40:39:01:60:
         b1:2e:70:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:37:19 2025 by rpki-client