Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/e71a8b62-913b-37c9-9ded-e076aa80125c.roa
File:                     e71a8b62-913b-37c9-9ded-e076aa80125c.roa (raw, json)
Hash identifier:          KUo2rX8ZtftBaWE8Zg57tlnt+4BQ+SsZONoLfO0T9ro=
Subject key identifier:   6E:AB:BE:28:C9:F3:4B:F2:B5:88:BE:46:72:68:0F:22:A1:BF:E5:6F
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F4328584919419002B18F31D80296A780
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/e71a8b62-913b-37c9-9ded-e076aa80125c.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     27317
IP address blocks:        2607:9f40:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:90:02:b1:8f:31:d8:02:96:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=09531762-3364-49a7-8473-c0a659ee4c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:4d:48:d4:23:b9:fe:33:4a:6b:2a:7d:ed:
                    42:36:06:0d:5a:38:cd:07:7c:b8:4d:96:37:43:1f:
                    bb:5e:73:5d:0a:c0:3d:10:0c:34:d7:0a:35:85:cc:
                    db:0e:b1:ba:31:50:a2:75:14:8c:12:1a:9b:bb:2d:
                    06:89:72:c3:d0:2d:4a:fb:f8:c7:66:83:a7:f4:11:
                    d9:d5:da:ff:95:91:cb:03:9c:ed:bd:65:10:f1:64:
                    7a:33:9c:0d:4c:4b:ff:33:9b:5f:1c:b4:86:50:3f:
                    39:0d:fb:a5:e9:96:32:8e:1f:ad:48:37:ee:05:35:
                    0c:ef:65:dc:bc:10:e8:6d:60:98:75:cc:26:9a:c5:
                    10:bb:b4:45:b7:f1:75:2b:48:64:0e:60:fb:40:59:
                    76:66:be:f6:9b:02:2e:b6:4a:52:32:5e:78:34:8d:
                    da:c0:c8:a2:b3:0e:47:7c:25:7d:b5:9f:ad:3e:db:
                    bb:1e:ee:67:78:1f:77:45:3c:d6:b4:72:3c:05:f8:
                    5a:c9:90:46:af:cc:09:3d:11:5a:e0:8a:c8:b3:b3:
                    13:1e:03:69:37:cc:d6:9b:02:c8:bb:e8:f1:3c:c1:
                    1d:d1:80:2f:0d:cd:1f:eb:38:5d:d1:70:08:12:51:
                    96:34:2d:32:6a:bb:1e:b2:59:d7:bc:0f:21:57:3e:
                    20:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AB:BE:28:C9:F3:4B:F2:B5:88:BE:46:72:68:0F:22:A1:BF:E5:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/e71a8b62-913b-37c9-9ded-e076aa80125c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f40:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:66:2c:5e:e9:c8:33:53:ce:90:a1:0a:03:71:6d:15:91:de:
         45:f4:19:d9:6c:f5:39:9d:3a:2f:7e:4e:36:71:b7:49:b2:f1:
         21:3a:71:79:3e:23:6c:de:6d:77:f4:07:59:3f:a9:4b:c5:23:
         06:86:c8:e6:3c:08:bc:cf:3c:ab:86:fa:17:19:85:d3:71:5e:
         51:17:7b:39:ba:46:35:10:18:83:8f:20:51:1a:9c:4d:c4:78:
         2d:cc:4a:53:01:3d:2f:9a:e5:a5:57:a3:cc:24:5b:94:41:57:
         98:a4:c1:33:10:be:8e:de:fa:49:41:9d:ad:36:67:d8:f5:9e:
         52:4e:1c:19:91:c4:57:c9:d2:0d:0d:12:c8:11:23:11:01:4a:
         11:3a:b6:1c:bc:75:fa:3c:4e:86:75:63:16:75:3d:1e:a8:38:
         02:7f:df:00:bc:38:15:7a:a5:bc:c5:28:e1:9f:02:6a:a1:88:
         64:6b:49:0e:1b:94:d9:80:da:34:00:f5:51:62:30:db:ae:7d:
         e8:57:0d:ec:70:a8:b9:61:77:01:98:4a:b4:98:88:c9:20:a5:
         eb:63:b9:da:3e:bc:96:f2:2e:18:36:50:d3:c2:52:b5:f5:57:
         53:4f:47:f3:5c:59:60:e2:08:66:98:6c:ce:97:76:01:d9:e6:
         72:5c:a8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:10:54 2025 by rpki-client