Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/6ab82317-4d00-30ba-b63f-09013f5288a0.roa
File:                     6ab82317-4d00-30ba-b63f-09013f5288a0.roa (raw, json)
Hash identifier:          V5m41xgRDizUzhGDlewU82fdQ42BfDLHCJO3ARbcdmU=
Subject key identifier:   D6:58:15:9E:B0:B1:2B:6D:D5:41:19:0E:97:2F:1E:43:5B:2A:59:08
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F43285849780F03434152383825C9A780
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/6ab82317-4d00-30ba-b63f-09013f5288a0.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     26506
IP address blocks:        2607:f4e8:ac1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:03:43:41:52:38:38:25:c9:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=b7e523ae-7c58-4bdf-b59b-930c450e8865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:08:0c:a7:dc:6d:75:8c:8b:cb:65:23:ba:96:
                    6c:87:d1:1d:b8:87:8f:5d:a3:75:fd:78:6b:c7:64:
                    f3:6a:62:b2:7c:8e:52:9e:35:14:78:bb:70:c2:70:
                    51:b2:ae:7f:15:e0:6b:8c:4a:dd:2c:26:bf:cf:cc:
                    0c:3d:c3:6b:10:a9:55:10:ff:74:e5:f3:19:21:5a:
                    1e:6a:a9:b1:ce:d5:53:80:3e:e6:bd:1d:03:c0:26:
                    ee:4c:89:ec:50:e6:1a:16:89:50:f8:6b:3b:92:c5:
                    a4:43:c0:d4:42:a3:02:59:ee:8d:c1:3f:3a:6c:fe:
                    50:39:34:68:08:95:0f:4d:10:82:48:8e:41:4c:ee:
                    98:68:52:d3:2c:a6:bf:68:c1:85:96:93:7e:79:0a:
                    7e:b4:0e:fe:69:01:2a:84:e7:d2:b8:77:e8:a9:0d:
                    bf:33:ee:b5:de:4a:84:40:c6:bb:80:5f:3a:15:ec:
                    ca:b4:b9:0b:ce:9f:5f:fd:bb:da:ee:0c:d0:7e:33:
                    83:d2:8f:1c:8d:49:b3:4e:3f:c0:15:04:92:0b:7b:
                    f1:6d:7a:a8:b7:57:5f:4f:75:57:be:20:71:f1:17:
                    cf:ee:56:07:65:62:0b:a2:36:54:20:77:c3:53:d9:
                    5a:9b:8f:5b:ed:e2:c1:bb:8f:49:72:30:1d:c3:b7:
                    b6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:58:15:9E:B0:B1:2B:6D:D5:41:19:0E:97:2F:1E:43:5B:2A:59:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/6ab82317-4d00-30ba-b63f-09013f5288a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4e8:ac1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:93:dd:84:a1:c0:9f:71:62:c9:77:fd:a4:3a:36:72:d6:1a:
         d9:5c:d3:7b:9c:0e:cf:b2:d7:a4:43:9f:aa:99:91:89:d2:af:
         99:a7:37:20:4b:74:51:03:4e:93:c4:cb:20:13:52:8c:82:bd:
         25:d5:69:81:6e:7b:32:1b:16:d6:5b:ee:aa:8a:90:b5:c7:2a:
         c7:38:d4:ce:be:73:8f:e5:95:41:48:3d:5b:91:6a:8d:b4:5b:
         0d:e7:0f:41:2c:9b:23:17:fe:44:a3:c9:1a:e0:01:18:28:1f:
         55:de:5e:68:74:28:e7:8c:16:42:f2:29:88:0c:54:e3:b5:23:
         58:21:f1:fc:60:27:1a:8e:a3:cb:db:26:c4:5c:21:99:26:9f:
         34:c5:2d:9d:60:c4:75:62:9b:f4:96:7c:6d:e1:0a:8c:88:ac:
         15:ca:08:29:cf:6c:74:ff:4a:b2:b5:2c:57:20:ca:ea:c2:0c:
         c7:20:69:26:9a:b6:b1:5a:c1:83:68:35:fe:08:fb:e8:02:21:
         1f:97:22:4b:5c:6a:18:0c:0d:80:9c:6a:2b:02:eb:a1:8b:ad:
         d6:65:dd:a2:93:a2:d1:e4:29:35:e4:45:e7:61:f0:7a:32:1a:
         6e:f5:99:d0:37:9a:a6:5c:d5:08:d0:ef:df:63:54:33:df:2e:
         0d:fe:25:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:56:35 2025 by rpki-client