Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/98168d22-916e-39cc-b0e8-dbcbb3b05dbe.roa
File:                     98168d22-916e-39cc-b0e8-dbcbb3b05dbe.roa (raw, json)
Hash identifier:          qHAM0kEyDTtE1xT6jNJPPu4tfMvl874x6ZBnxs7ERko=
Subject key identifier:   01:DC:EA:1C:CD:A5:88:84:C2:B2:7F:41:CE:61:4A:28:F8:08:68:F7
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F4328584919418F97DFDB954B2C50CE00
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/98168d22-916e-39cc-b0e8-dbcbb3b05dbe.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     27317
IP address blocks:        2607:9f40:69::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:8f:97:df:db:95:4b:2c:50:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=96057d0e-9c22-4893-9bf6-9c651d439431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:7f:75:cc:60:29:0f:0b:50:17:4d:66:92:
                    2f:81:34:38:ac:a3:dd:ed:c5:f8:ec:25:86:c3:38:
                    9e:51:1b:ad:95:b2:98:ad:d4:d5:9d:ef:57:1e:38:
                    97:7f:d3:75:5d:b5:99:3c:c0:f6:de:7a:83:86:e0:
                    57:fd:66:af:b0:4b:82:8a:91:11:fe:39:11:e8:a5:
                    9b:7b:72:ea:01:b3:28:4c:0c:f1:3a:64:24:b7:ca:
                    89:72:fb:b1:4b:cb:87:47:3e:5f:27:97:81:61:92:
                    5f:b5:b1:09:1e:4f:46:03:3e:b2:26:39:f5:83:dd:
                    0e:71:27:c1:82:16:86:87:b4:74:09:d5:70:22:c7:
                    4b:dc:c4:ff:63:42:09:31:88:ea:c2:c6:f9:61:19:
                    40:cb:c1:e2:2b:99:73:e3:9a:1b:c4:62:07:04:18:
                    2e:70:ca:0a:a1:72:c5:c3:47:ff:29:68:ec:40:d4:
                    f0:0b:58:92:4f:94:6f:53:4d:bf:3a:ba:95:ce:5e:
                    a4:41:a7:c9:cb:9f:20:31:f5:29:9d:aa:b9:40:08:
                    7c:0c:cd:73:4e:6f:07:77:9a:3d:02:7b:23:47:18:
                    f1:5c:d1:43:d9:5f:10:4c:82:09:99:b1:9e:6e:f7:
                    98:50:21:f8:bd:d2:58:87:43:49:04:aa:62:66:9e:
                    b2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DC:EA:1C:CD:A5:88:84:C2:B2:7F:41:CE:61:4A:28:F8:08:68:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/98168d22-916e-39cc-b0e8-dbcbb3b05dbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f40:69::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:7d:5a:1d:5d:1e:8e:47:76:12:e6:98:cf:92:3d:bb:26:d6:
         0c:b2:c7:fd:ad:e6:bb:95:d9:d4:a1:2c:68:5a:f1:c5:2f:93:
         9c:a4:22:f3:15:b5:bf:10:7a:1e:d5:bb:c6:18:2c:a1:02:68:
         b5:56:9a:2f:7f:01:2b:2f:7a:35:6b:74:6b:30:03:4a:8f:04:
         21:39:e6:27:d0:a3:f1:8e:fe:6d:14:b7:82:d6:d5:81:78:bc:
         99:87:37:db:e9:a8:31:a2:2b:18:db:5f:e7:50:89:c3:64:32:
         5b:b7:b6:aa:e5:f5:85:d6:3b:48:cf:d7:a7:bd:8e:b9:2f:c3:
         e1:e0:11:a0:f5:8e:0f:b6:61:17:6c:d8:20:46:06:8b:64:1b:
         8c:1e:bf:fc:96:83:3d:6c:bc:b6:79:94:5a:62:4c:27:72:0e:
         a4:8b:b6:99:fe:6d:b5:93:6a:2a:6b:82:89:7d:b6:3a:2e:f4:
         d4:1d:3f:98:be:cb:a7:45:e3:f1:79:db:e4:87:b6:7c:94:d9:
         51:21:46:fd:37:bf:bb:e1:22:be:e1:f2:a3:f7:24:76:d6:40:
         cc:ea:a8:7e:cc:43:3f:a9:ca:81:29:d5:3e:0e:84:66:b5:fc:
         c1:06:8b:77:a9:2c:21:03:8c:13:24:07:3a:30:24:bb:2c:24:
         c7:25:51:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:30 2025 by rpki-client