Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa
File:                     5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa (raw, json)
Hash identifier:          EKHE/oWn4gTTcEeW0ZUrlluR9skYbEBOlANK+2rRdPQ=
Subject key identifier:   8E:4C:DF:1A:1F:05:A4:86:ED:E6:D4:FE:F6:C9:21:25:69:79:22:2B
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584A146555AFD7CD72EEAB6F1D78
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     33208
IP address blocks:        2607:9a80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:55:af:d7:cd:72:ee:ab:6f:1d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=6801de07-0475-4a99-b434-1c9cbc809f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:84:69:40:d1:11:41:31:a4:96:eb:52:de:63:
                    fa:de:b4:8f:0a:4f:36:30:e1:9d:b2:ac:b1:fe:a6:
                    b1:0c:07:4b:cf:20:16:59:85:11:68:5c:01:a0:94:
                    44:cf:ff:4c:e4:92:7d:81:66:1e:36:51:28:16:1f:
                    83:e5:fe:a4:e7:45:d4:36:76:c5:d4:68:fb:e3:5b:
                    8b:19:4d:b4:ce:ff:1a:d6:87:49:1d:5f:68:d7:a9:
                    52:58:b6:36:98:3a:67:80:61:2a:7b:7b:f0:5e:5a:
                    c1:7f:15:b9:61:a0:48:57:d7:1c:2f:ea:ad:91:0f:
                    b9:26:61:1b:c6:20:b0:a2:3f:22:61:cf:b7:57:d3:
                    2b:4e:9b:ec:fe:15:a6:a7:c2:65:ef:fc:4f:00:bb:
                    87:6d:87:70:dc:24:98:3d:dc:17:a4:39:dc:21:80:
                    51:f1:dc:73:57:e4:90:bd:ce:06:f9:fc:2b:0a:c0:
                    f2:08:1e:2a:d5:d2:3a:dc:ea:90:dd:36:a5:10:bf:
                    d4:32:7d:79:cc:6c:9a:93:46:02:ca:e5:5d:31:1a:
                    67:71:34:54:2b:f8:0a:6d:ec:d9:ff:0f:ee:06:32:
                    27:d6:24:03:b6:98:95:43:6b:85:ee:0a:60:a5:c4:
                    fa:57:17:54:ef:6b:1d:de:11:8c:4f:ce:2b:5c:55:
                    07:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4C:DF:1A:1F:05:A4:86:ED:E6:D4:FE:F6:C9:21:25:69:79:22:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:1b:12:2d:d7:69:7f:fa:d8:20:59:3c:54:a9:18:77:1b:55:
         83:42:e8:fd:7a:64:74:85:4a:b7:c2:ed:dc:9e:b8:36:d6:81:
         9c:60:4b:2a:84:74:f0:f0:d0:ea:58:b3:5c:15:4a:9c:64:9a:
         bc:63:c0:ef:14:fd:ff:fc:40:ef:9c:06:a4:41:b6:17:f1:3b:
         fc:b4:e7:13:da:ff:19:ef:72:e1:d6:67:25:5b:60:c5:6c:f5:
         59:4b:f6:31:32:d3:a2:ba:6c:26:6d:73:dd:2d:08:ba:9e:d5:
         da:1f:69:d0:1b:76:67:ea:a1:c3:34:99:1b:eb:e8:25:aa:b6:
         d0:04:7b:86:61:cf:10:ba:91:b3:95:d2:da:73:21:dd:80:b7:
         89:98:16:37:d6:82:78:37:c7:88:ff:5c:20:bb:9f:d8:cd:db:
         2f:fc:31:cc:e2:0f:4e:4e:6d:6d:d2:22:60:62:c5:7a:0c:1e:
         61:f0:20:c1:aa:02:d3:f3:3d:a7:aa:3a:49:0d:94:0c:b2:29:
         69:59:bb:19:03:c6:fc:81:5d:5c:03:4b:ef:3b:c3:51:0d:68:
         d1:1b:0a:ca:97:03:20:04:b4:b6:ff:d1:94:19:b4:a1:47:24:
         05:84:8a:e0:ce:34:5b:a9:f8:24:be:23:16:a7:8c:5e:9d:76:
         61:e1:3e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:22:14 2025 by rpki-client