Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/6c63f7d6-c61c-398d-ac6f-26fac065ca96.roa
File:                     6c63f7d6-c61c-398d-ac6f-26fac065ca96.roa (raw, json)
Hash identifier:          Q3V2br9w8hzR6t0gy4Bn3u4xDw4YF7AGaZkSp5XhCUA=
Subject key identifier:   A1:6F:53:CC:97:D0:13:90:77:06:63:3A:AD:88:B7:17:FD:8A:CC:15
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F4328584921840D4F32671BC128FCDD80
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/6c63f7d6-c61c-398d-ac6f-26fac065ca96.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2607:28c0:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:0d:4f:32:67:1b:c1:28:fc:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=9f733e14-cf72-4ca2-ba01-adbf6fecd8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:2e:a0:cf:1a:47:7e:bc:6b:b3:da:f8:68:
                    06:28:ab:9d:3e:72:0d:83:c5:f3:26:43:fa:5d:32:
                    3e:37:a2:4b:d2:3b:3b:12:f6:3a:db:1e:8a:fc:73:
                    35:26:40:11:ed:f8:30:78:4a:85:f3:69:c4:6c:19:
                    5b:7d:d8:71:c4:ae:d6:ee:06:b6:e4:0c:10:c6:3b:
                    b2:59:a2:99:50:ab:1b:a4:c8:39:3d:ca:d1:b9:70:
                    fe:8b:41:09:5f:52:7f:5d:99:06:74:97:3a:16:e1:
                    7b:10:0a:97:57:10:14:02:6a:79:47:91:fd:1e:0a:
                    dd:1a:e8:c1:10:ce:92:26:16:4c:a5:25:dc:86:93:
                    c3:9d:66:9f:e1:e9:b6:8a:93:4a:8a:bb:47:76:d0:
                    ab:b4:95:31:5e:5e:23:5f:24:33:19:59:37:c2:6b:
                    4d:e3:79:c1:6f:a7:8d:9a:47:43:26:06:97:90:14:
                    91:ca:fc:e1:e8:81:bb:64:11:a1:ed:d3:b2:47:86:
                    f7:03:cc:6f:7a:7d:3f:81:d4:94:e7:c3:95:82:84:
                    4d:f4:87:cc:6d:4b:53:a3:4d:d8:7e:8c:88:42:e0:
                    12:82:14:52:21:65:c5:a3:39:b2:4b:df:55:79:4e:
                    3d:55:44:6d:ef:c2:19:cd:b0:8a:26:37:3f:5a:d7:
                    60:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6F:53:CC:97:D0:13:90:77:06:63:3A:AD:88:B7:17:FD:8A:CC:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/6c63f7d6-c61c-398d-ac6f-26fac065ca96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:28c0:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:b5:e6:d2:64:8f:64:0c:11:47:80:97:14:83:6c:03:ce:42:
         30:cf:5f:6a:d2:90:87:ef:41:f4:97:c6:55:4d:ce:18:58:2e:
         c2:92:d4:32:be:3c:cb:d4:86:cc:8a:38:d6:ae:11:a2:e8:40:
         bd:2e:df:02:63:8f:28:4e:f2:fe:f9:51:28:87:68:5a:20:30:
         cc:6a:48:9b:44:9a:a6:f1:5f:1c:e0:be:ac:79:7d:08:57:a1:
         3e:9b:58:aa:63:89:96:b9:a6:ee:84:ed:9b:55:1f:2f:e4:75:
         ff:90:07:0e:ca:ea:14:ad:39:3f:70:fe:86:87:fe:38:b7:a4:
         3c:e7:00:5f:dc:f4:28:71:39:9b:7f:7f:bf:52:de:63:3d:fd:
         56:e2:75:ab:29:b6:0e:ac:7f:14:e7:3d:a2:d5:76:5c:00:45:
         b7:ae:76:18:c5:04:f7:7f:e2:e6:1b:0a:67:f0:d4:a5:da:91:
         f1:4e:67:47:f2:9f:86:ab:8c:8c:b1:9c:bb:3c:76:ab:cc:25:
         7a:07:e6:34:30:23:45:86:f1:7b:52:11:bf:e0:59:df:d4:e8:
         d0:78:ff:e4:a9:f9:a2:b7:99:44:78:43:6e:0d:b8:90:bb:59:
         2f:74:ce:37:1c:9b:53:f1:bf:ab:38:bb:e8:76:5f:0c:32:7d:
         d9:db:62:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:30:19 2025 by rpki-client