Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cca7c208-87e9-304b-98f3-6066755b4272.roa
File:                     cca7c208-87e9-304b-98f3-6066755b4272.roa (raw, json)
Hash identifier:          EAsn8rbDNTCJeQYqadAZpH9+N3OGa5LD9Z+cR78LKuY=
Subject key identifier:   8F:4C:64:70:97:CF:DC:C0:EF:5D:39:E0:E9:5D:FE:CB:91:13:D8:D5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F7227A9F104587A6C7880
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cca7c208-87e9-304b-98f3-6066755b4272.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2607:f098::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:72:27:a9:f1:04:58:7a:6c:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=2b3df0c1-337d-4e9f-8595-d66864b69288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:91:51:11:d5:39:e6:4b:3e:e7:fc:1b:24:
                    f9:1e:df:d0:d1:71:26:9c:2e:fd:15:23:8b:18:27:
                    33:6d:a7:a4:0e:b9:53:b3:92:85:f3:45:f3:57:4e:
                    70:b9:b5:22:0a:62:47:b6:de:02:ec:64:bf:5e:ae:
                    9b:66:fa:b3:63:dd:88:30:5a:40:50:23:b3:fd:bb:
                    d4:54:9c:0e:e7:b3:49:3d:c8:05:2c:fd:3b:7f:bd:
                    e2:1a:10:16:bf:fc:ab:b9:24:60:5b:45:98:8e:40:
                    2a:bb:7f:34:92:31:a8:ad:a9:ef:4b:08:2f:84:60:
                    26:ae:b5:44:02:5a:2c:72:87:24:47:bf:16:a7:69:
                    24:31:4f:53:e5:15:de:6e:9b:e4:eb:90:8c:a0:9b:
                    e9:58:5b:e3:fe:54:a3:8c:cf:fb:1b:a4:41:9d:22:
                    d3:20:81:44:fd:46:fd:dc:28:fe:7b:d5:7b:12:f8:
                    89:fc:e1:7c:2c:8a:ca:f4:5e:61:49:d6:36:90:49:
                    cd:84:6d:b2:7e:53:1d:8a:19:7f:48:35:2c:e3:46:
                    90:bc:da:72:b9:04:11:82:9a:e1:23:b2:7c:5e:95:
                    cb:4b:4f:16:35:5c:43:73:0e:25:3a:20:08:65:91:
                    84:e7:04:cc:dc:fd:c6:38:ff:5b:7e:9e:d2:0c:d3:
                    c4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4C:64:70:97:CF:DC:C0:EF:5D:39:E0:E9:5D:FE:CB:91:13:D8:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cca7c208-87e9-304b-98f3-6066755b4272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:34:3a:0e:de:ad:4f:ff:1c:d8:bc:30:d0:75:ee:92:1d:ef:
         22:97:17:30:92:6d:68:9c:4b:4d:e1:ba:de:69:5a:74:8a:65:
         78:5d:57:3d:36:d4:15:ea:be:51:51:11:57:10:e1:ca:4b:2c:
         b6:63:6d:db:d7:bc:5c:6d:61:fa:fe:6a:09:98:62:87:64:e3:
         23:94:ea:f8:f7:e0:b3:ca:c2:14:90:b4:e4:fc:22:78:50:17:
         a8:87:82:68:ea:9b:a9:81:64:91:1b:75:fb:3c:e7:d9:36:0b:
         6a:a3:56:11:7a:fa:f4:45:8f:c0:f6:58:17:a4:de:b2:36:15:
         c5:d2:8e:4d:7a:9f:ee:84:fb:6e:1c:89:9b:0e:b9:5c:8a:5b:
         c4:62:dc:e5:0f:9d:bf:3a:70:a9:77:4f:f4:1a:38:0e:c8:fa:
         7f:1a:9e:0b:3c:08:39:2c:d3:05:97:e6:8c:28:5f:bf:c0:aa:
         5b:54:8a:ad:14:7c:e1:14:92:34:c3:6b:e5:f3:b8:2c:fb:c5:
         28:99:25:9a:4d:6d:5b:92:a4:02:51:35:2c:53:a4:61:e9:15:
         76:e6:e4:eb:ae:2c:e8:f1:ba:16:17:ae:9a:43:d4:34:a3:62:
         6d:fc:8f:3d:25:6c:44:1e:81:e8:a4:99:32:69:9d:29:ae:1b:
         4b:2e:79:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:33:44 2025 by rpki-client