Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/169bd61c-d77a-3a5d-aea1-eb8034fc7dc9.roa
File:                     169bd61c-d77a-3a5d-aea1-eb8034fc7dc9.roa (raw, json)
Hash identifier:          nD91MUByMz+38r9e9ozX9uSJy7euOmiyJb4xejGyy5o=
Subject key identifier:   00:86:E9:F1:86:29:AC:D4:16:50:FE:B8:15:03:4E:D2:2A:2A:C3:98
Certificate issuer:       /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
Certificate serial:       010D0C9F4328584A6C55CDB0B3089C39B5F08400
Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/169bd61c-d77a-3a5d-aea1-eb8034fc7dc9.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     7057
IP address blocks:        2600:dc00::/28 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:cd:b0:b3:08:9c:39:b5:f0:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=9ff3193a-58be-486c-a96d-680a3eba3492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:29:94:9f:a1:79:63:92:aa:0e:ed:f7:71:
                    9a:a4:9e:54:45:cc:40:78:2c:83:2c:79:1a:41:6f:
                    c4:bb:39:46:53:0a:29:47:11:71:61:55:ad:fe:91:
                    33:0f:77:e7:14:8b:46:74:39:3c:d9:c9:b4:a8:88:
                    2a:98:1b:30:96:05:69:9d:7b:f1:ba:5f:9d:1e:50:
                    85:4f:d9:cd:53:af:8b:95:84:8c:87:82:3e:1f:04:
                    83:da:9a:50:c0:9e:d6:1d:a3:1e:be:4b:1c:53:9a:
                    8f:47:2d:7d:35:ba:f9:f5:27:5f:10:be:41:7f:4f:
                    08:ff:c0:9b:cb:f2:68:b4:15:30:be:66:a8:6a:13:
                    d4:49:64:d6:54:e5:a4:5d:da:7e:f1:2b:4e:30:47:
                    28:ad:71:1a:5f:7d:55:1c:5f:23:8d:b4:c4:f1:e8:
                    11:4a:29:f1:bc:3f:97:27:4c:82:74:8c:af:22:e4:
                    19:d9:67:8b:dd:31:da:3a:6c:b8:65:7e:9f:09:48:
                    fc:ea:c4:00:08:0a:a5:b2:62:da:85:5d:71:74:80:
                    d9:6f:a7:86:4c:3c:a6:51:22:6c:7c:ad:25:00:ef:
                    aa:12:8f:71:3d:7f:7b:30:f7:c3:b9:07:44:8c:b7:
                    c1:d7:6a:fe:90:2f:3c:5e:69:31:bb:1e:89:6a:95:
                    86:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:86:E9:F1:86:29:AC:D4:16:50:FE:B8:15:03:4E:D2:2A:2A:C3:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/169bd61c-d77a-3a5d-aea1-eb8034fc7dc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl

            X509v3 Authority Key Identifier:
                keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:dc00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:63:17:23:93:c3:b6:ba:01:75:74:52:4d:69:10:9a:a6:6a:
         69:7b:0a:5b:f3:20:78:02:83:fe:c4:61:f5:7b:72:26:58:a9:
         0a:15:85:77:d9:76:f0:79:5e:26:11:c4:5f:c5:a7:27:35:fa:
         fc:7b:b1:02:e0:43:57:a2:14:f2:b6:03:ab:8e:54:9a:93:2a:
         59:ac:6d:46:33:e3:29:ec:cc:9e:c2:2d:79:41:b0:f6:45:2b:
         ac:5b:b3:0f:4e:22:7f:0d:43:8c:3c:15:b3:cb:1b:7e:62:37:
         1c:13:6a:e9:e3:54:21:63:e8:4b:5a:c5:9c:ec:64:ed:98:d2:
         17:cd:25:97:0b:b1:50:a3:5f:72:da:32:dd:a3:62:48:8f:de:
         d1:0a:80:ef:72:41:6e:ea:73:d9:46:3e:67:1d:b4:ba:9a:86:
         6a:a5:06:80:25:75:8b:c8:56:79:f1:5a:ad:bb:c5:3d:fb:31:
         81:70:e6:dc:cd:75:62:23:9a:8d:c6:69:89:45:14:38:92:a6:
         91:25:95:db:fb:9b:ed:3c:81:39:47:a5:76:2b:58:a9:30:70:
         8b:d4:98:1f:80:4a:0c:68:e2:fe:08:d5:fe:48:58:11:3e:30:
         8e:fd:6c:63:96:b5:36:e9:1b:ae:03:d4:ca:07:b5:69:45:76:
         71:cf:4c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 04:11:45 2025 by rpki-client