Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/255c5618-6afd-3842-8da1-db637de34c26.roa
File:                     255c5618-6afd-3842-8da1-db637de34c26.roa (raw, json)
Hash identifier:          9YQGBMxXTZ97Ffa9XSEU289xIhWokM/30SMQZjIcozA=
Subject key identifier:   0F:60:72:6F:45:B8:AC:23:52:80:7F:1A:66:11:38:8C:70:65:CE:58
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F43285848530AF4F4E2C26752940C6880
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/255c5618-6afd-3842-8da1-db637de34c26.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     27317
IP address blocks:        2607:9f40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:f4:f4:e2:c2:67:52:94:0c:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=58096518-96a8-4099-bfac-ad61c4825b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8a:5c:46:18:e3:a0:1e:b5:c8:55:18:b4:91:
                    b3:c8:fa:cc:dc:cc:47:af:7f:3d:f2:c9:a2:7e:4d:
                    c1:e1:44:c5:2b:13:11:4f:21:35:48:f2:dc:ac:5c:
                    e5:59:4e:fe:b2:32:df:88:2b:26:09:be:51:eb:ba:
                    db:a2:d9:1a:0d:7c:0c:9c:e7:1d:5a:a1:7f:3c:a9:
                    b0:32:5a:c1:7a:fc:90:5b:39:d5:8c:21:c1:d2:f5:
                    27:ba:9c:a7:0f:22:61:dd:49:13:2d:17:a7:36:50:
                    3d:97:97:99:e0:80:a5:8e:4c:1b:94:04:ec:ae:72:
                    45:a4:29:4b:b3:19:1d:1a:20:26:9c:97:86:0d:dc:
                    b5:29:2c:ba:8a:2d:e9:36:ab:b0:90:5a:eb:96:eb:
                    2b:fd:7d:5b:14:ea:a7:6e:ab:c4:93:93:87:db:5a:
                    aa:1a:a7:cd:a3:b0:13:f3:59:74:e7:e3:90:7f:13:
                    cc:25:95:00:86:bc:05:4e:3a:43:4c:e0:bc:04:3b:
                    f3:e5:8f:3d:34:d5:79:eb:4e:fe:71:6a:c4:9b:5d:
                    64:50:a6:ea:58:7f:74:54:76:6c:f8:98:da:0b:fc:
                    89:3d:f4:1c:47:f7:20:58:de:f8:33:9e:5c:88:d4:
                    6f:7d:a5:fb:a5:26:54:f6:d5:37:b2:22:e5:8a:d3:
                    b2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:60:72:6F:45:B8:AC:23:52:80:7F:1A:66:11:38:8C:70:65:CE:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/255c5618-6afd-3842-8da1-db637de34c26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e9:fe:bc:7b:80:ea:19:83:8b:dd:1b:ee:43:0a:63:44:17:f1:
         f8:2f:47:24:16:04:70:7a:04:c3:92:0c:25:dc:62:af:d5:bb:
         04:2c:de:4d:be:92:f6:5a:1c:1a:cf:e9:56:4f:53:e6:df:30:
         93:24:fa:fb:35:68:a3:b8:2a:20:a5:cc:9d:43:6a:19:0e:64:
         8b:03:4e:81:05:4b:38:ab:ca:01:6f:2b:ac:85:6d:53:09:25:
         42:32:cf:25:72:70:f1:e8:7b:da:d9:e3:95:0b:22:2f:0f:55:
         b6:a3:70:a2:7e:24:79:9c:2c:cc:27:69:66:98:b1:85:9a:1c:
         91:51:25:60:b0:e6:63:68:83:0b:35:d4:a0:75:d0:d0:bc:0c:
         35:b1:21:7a:9c:9c:bb:d6:67:2a:03:fd:7f:be:60:d9:d3:e3:
         37:29:9a:d0:2c:b7:95:01:74:20:6d:9d:26:48:31:73:eb:11:
         02:a4:a8:e0:5d:1f:b5:40:a8:dc:c0:de:fb:b2:ec:f7:b6:83:
         c4:d7:bc:a3:ed:14:03:9f:b4:1c:b9:53:b9:73:db:24:f1:d5:
         7c:27:4d:be:67:9b:26:0f:a4:67:7f:6a:54:87:44:a8:13:d8:
         ea:cb:8c:1b:bd:24:ca:47:4b:c0:68:df:86:78:75:24:e0:0b:
         38:28:1e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:08 2025 by rpki-client