Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/77841c21-928b-38e6-89e5-32f33b0a5b71.roa
File:                     77841c21-928b-38e6-89e5-32f33b0a5b71.roa (raw, json)
Hash identifier:          FYJX1aBq3Ro+T5HH3LR0NyCYfYCshwP+btjZ3/QUons=
Subject key identifier:   6D:34:71:A1:A9:1A:0E:14:3B:94:0E:D9:57:4C:FF:33:EF:6F:93:FC
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584900216202B7E63AE4130E8580
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/77841c21-928b-38e6-89e5-32f33b0a5b71.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        2607:a640::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:62:02:b7:e6:3a:e4:13:0e:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=a4ed5b75-92da-4dfe-8689-d538f0d043f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:05:8e:e3:06:27:87:de:60:bc:50:e9:50:ec:
                    71:41:ac:83:94:cc:e6:db:fd:77:d9:1a:bc:64:1e:
                    c1:1c:f5:6b:98:20:62:2c:b9:db:d0:12:db:83:fe:
                    a1:35:14:aa:7c:10:74:c2:0a:f6:2b:71:22:ac:18:
                    a2:60:1e:04:c4:36:f2:a4:43:d6:a0:75:2b:77:1c:
                    f7:4f:db:7b:f3:a4:07:f9:84:84:bb:72:25:b5:6f:
                    c0:45:b1:f9:67:d3:d6:40:bd:88:ba:33:96:db:cb:
                    33:8a:92:08:d0:ce:3e:14:9e:42:58:a2:a1:3a:5a:
                    e7:13:d0:f6:b7:b1:b3:6c:0a:e8:f5:54:bf:08:69:
                    54:de:c9:a8:1e:1c:0d:38:de:a3:4b:8a:43:eb:f0:
                    0b:ab:fc:b3:12:56:fb:99:95:3a:9e:b4:64:21:7e:
                    63:c6:af:d3:f1:08:a9:6b:d2:9e:0d:4d:c4:a5:9c:
                    41:6c:bc:6c:20:17:5a:30:81:5b:f1:80:94:ab:ca:
                    8a:c4:4f:68:7f:b9:0e:11:51:5e:1d:70:c4:eb:91:
                    0a:eb:ab:4f:65:29:39:0b:2c:28:13:fd:0e:d7:3d:
                    50:56:83:be:05:12:a9:4c:1a:c9:82:a3:42:a0:5e:
                    0f:2a:c3:72:8e:91:be:c2:b5:4a:20:ce:79:d5:62:
                    eb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:34:71:A1:A9:1A:0E:14:3B:94:0E:D9:57:4C:FF:33:EF:6F:93:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/77841c21-928b-38e6-89e5-32f33b0a5b71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:27:2f:32:d4:06:f1:1b:e9:9d:3f:d7:76:e4:12:e1:ad:bc:
         47:98:12:a6:d2:a5:9f:0f:50:2c:5f:7e:08:4b:ef:9b:8b:e4:
         ef:80:05:d0:21:8c:c3:03:04:e3:37:47:36:a7:c9:77:b2:ad:
         b6:c8:51:c0:d3:55:aa:0c:0b:3a:6c:c2:03:92:5e:f6:dd:86:
         b7:fe:48:15:3e:ef:41:a3:5e:f3:94:9b:de:bc:07:ab:b6:d0:
         a6:21:26:96:6c:3b:43:1c:6e:7d:59:d8:cf:74:77:7f:72:9b:
         f2:a5:39:9a:c7:65:d7:6b:a5:df:59:9a:c6:bb:8e:6c:07:6c:
         3b:1b:57:f1:03:a5:07:86:b0:8d:ef:1c:0d:04:b1:ac:be:53:
         7a:ce:55:ff:7f:d1:12:f0:c6:16:9c:ee:7d:20:07:67:cb:8b:
         b4:6a:28:d3:29:dd:c6:a8:3c:3f:86:43:88:c1:d6:47:95:b5:
         02:e1:e3:7e:3e:00:8b:a8:02:cb:6c:bb:4b:4e:a9:f7:7c:fd:
         e1:86:7c:cb:5d:f4:e5:39:b2:e8:e4:c8:a4:cb:e4:b3:46:1b:
         15:6e:37:da:24:da:cc:b3:09:b6:94:2a:23:75:5d:ca:7e:5f:
         c6:4b:ff:bc:c1:c2:b6:ff:7a:b8:c8:9b:66:bc:43:5d:d5:e0:
         3a:3b:99:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:27:02 2025 by rpki-client