Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/aaada97c-cc8b-302a-9d92-5981ece3a4e6.roa
File:                     aaada97c-cc8b-302a-9d92-5981ece3a4e6.roa (raw, json)
Hash identifier:          b2u11TmGIGbXXp9zF2mo72n/7Dwguu+ti4UnM8tj3b4=
Subject key identifier:   EB:1C:9C:C3:88:74:75:AE:15:54:D0:57:1C:BB:BF:D6:1F:E8:88:02
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F43285849F87A93D2E24EDD2E6C1FCB80
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/aaada97c-cc8b-302a-9d92-5981ece3a4e6.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     27317
IP address blocks:        2607:9f40:35::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:93:d2:e2:4e:dd:2e:6c:1f:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=fed8eaec-4852-4c0f-a4f4-911dae0bbda4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e1:04:74:d9:07:83:fe:f1:6b:70:8f:0a:f8:
                    c0:89:0c:eb:1d:f9:08:0f:cf:c2:a2:9c:1d:ba:91:
                    88:69:5f:d6:ae:74:a8:82:6b:d1:61:3e:23:37:78:
                    d7:9b:03:d8:0b:cc:71:fe:0d:65:92:2b:cf:3a:b3:
                    a2:28:68:7c:88:53:66:8d:b5:77:14:27:c1:0a:b1:
                    55:3a:d0:19:e4:f4:d3:65:89:4e:4f:e9:e6:8f:da:
                    16:3f:42:ac:04:c5:1b:a3:eb:45:0d:51:4b:b4:cd:
                    3c:c7:dc:82:3c:2e:7b:33:7f:aa:4b:53:f1:d1:aa:
                    22:34:64:51:35:a3:44:ea:68:ea:e2:8a:08:7f:71:
                    95:d2:69:74:0d:8a:3f:55:f9:19:4e:97:33:20:d8:
                    43:20:12:a3:bb:b6:58:89:52:18:28:8d:51:c7:5c:
                    ab:cf:b2:e2:6d:d4:91:74:6a:e1:0d:46:4e:32:89:
                    35:83:b8:c2:90:b5:de:da:76:23:80:bc:ff:be:99:
                    27:46:aa:cd:79:e5:da:3d:25:43:42:39:02:2d:32:
                    a3:08:6b:3e:42:8a:4a:b9:80:7d:83:6c:72:21:b8:
                    3c:29:33:36:70:13:03:36:e8:90:35:3f:f3:05:92:
                    20:8e:74:ce:52:71:5f:39:c7:29:8f:b4:ec:c0:48:
                    e2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1C:9C:C3:88:74:75:AE:15:54:D0:57:1C:BB:BF:D6:1F:E8:88:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/aaada97c-cc8b-302a-9d92-5981ece3a4e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f40:35::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:27:d4:66:9f:37:d2:64:d2:da:48:31:cb:df:57:4c:51:d8:
         a3:37:b6:74:8f:6e:75:11:e0:4c:7a:35:a5:3a:63:45:d8:b4:
         2f:0d:0f:2a:93:b8:d8:3e:97:23:b3:72:b0:2d:be:82:c5:80:
         e0:07:38:a7:82:b1:ac:24:b6:b6:80:a8:d2:00:7e:10:4c:80:
         fa:5d:93:35:e7:d7:8d:12:e1:c9:69:2c:37:6f:20:08:a7:45:
         98:f2:91:3a:6a:4f:97:25:1f:5a:3f:2e:77:44:0a:df:de:62:
         43:3b:59:0c:9b:1b:5b:53:03:1b:3b:f6:ef:86:3e:1b:30:80:
         98:14:4e:d5:74:7d:06:f3:b1:8e:18:d3:74:5f:0a:1d:da:9f:
         9f:a8:fe:55:a3:6c:94:de:ba:7e:aa:1d:29:6c:87:cb:cd:b1:
         72:f0:87:b3:04:b9:44:dc:c6:4b:94:cd:ca:37:a0:2a:1a:a9:
         d7:0b:36:37:ba:24:78:9b:d9:df:ed:0a:79:ff:15:a5:e0:40:
         98:70:fb:f4:06:7a:3c:1b:35:26:8b:68:b7:d1:ca:e0:e6:09:
         d2:80:82:4c:66:d1:5e:ad:33:11:2c:1a:56:74:7e:97:7f:2d:
         7d:23:8f:f4:2c:de:dd:7b:5f:fe:11:22:16:ff:00:46:d3:ba:
         e7:39:67:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:07:38 2025 by rpki-client