Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/1fc40bda-0880-3876-af33-e88706fee1ca.roa
File:                     1fc40bda-0880-3876-af33-e88706fee1ca.roa (raw, json)
Hash identifier:          MjRdKOnK8yyd1h4kRJxga22YEMpJD/ViR0HQhIlehi8=
Subject key identifier:   01:6F:8B:3C:B0:27:FC:A4:8C:E0:81:02:4A:28:18:8D:71:FC:A3:A2
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F4328584A3CE021A7FC0C81F74A6D9D00
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/1fc40bda-0880-3876-af33-e88706fee1ca.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     15169
IP address blocks:        2605:a7c0::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:21:a7:fc:0c:81:f7:4a:6d:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=a685abe9-5c69-43cc-8c0f-627c2ddf575c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:79:e4:a6:a5:6c:81:8d:c7:be:c3:1f:1b:60:
                    d1:7a:bd:e6:e9:ea:f2:7a:cd:e8:11:e7:ae:c4:42:
                    0c:e0:ae:d2:e1:fa:3a:89:1c:ec:de:48:12:37:fb:
                    53:4f:a1:0a:b3:83:48:d9:45:ff:d0:ae:50:2a:18:
                    68:7a:76:d1:1b:13:34:3b:11:57:39:9b:80:71:83:
                    c1:bc:79:0d:db:f1:b7:f3:e3:5a:65:aa:62:ca:24:
                    2f:66:79:58:61:7b:37:50:39:55:fb:82:18:6f:03:
                    4c:a7:f1:f1:de:15:5f:32:c7:63:31:95:96:e9:9c:
                    cc:c6:95:ea:c6:be:2e:ce:06:ea:af:60:86:2a:b7:
                    cf:38:41:a0:98:ee:e5:dc:0d:2e:3c:a7:ca:83:3c:
                    f3:a5:fe:c3:3f:b1:0a:52:d9:a9:92:95:7e:bb:18:
                    47:49:a3:60:58:f6:6e:2c:31:76:39:9d:e6:4a:64:
                    77:a5:52:d9:4d:3b:bc:4f:43:5a:d2:f7:c9:8f:51:
                    12:2f:e5:90:4a:eb:8b:14:5e:20:07:12:ab:53:e7:
                    db:26:58:d2:ce:d7:94:01:ad:47:6c:ae:c3:dc:8b:
                    40:06:75:32:0d:25:e4:24:e1:6e:18:5b:7b:b7:3c:
                    92:c1:8b:c2:3e:e1:e0:8c:01:3e:bf:c0:70:bf:30:
                    0e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6F:8B:3C:B0:27:FC:A4:8C:E0:81:02:4A:28:18:8D:71:FC:A3:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/1fc40bda-0880-3876-af33-e88706fee1ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a7c0::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:27:cc:89:6e:09:32:74:56:44:ef:93:11:2d:34:03:ad:ed:
         02:17:ff:da:3d:2a:f2:10:7e:6e:f0:78:b8:84:24:73:ee:54:
         b9:b8:72:df:43:23:08:29:c9:c7:25:66:d6:ae:89:d4:c2:d7:
         bc:13:46:3f:46:71:16:4a:3e:c2:0b:2d:b4:21:84:87:69:16:
         24:dc:e1:fb:eb:57:0a:35:36:75:ba:9f:d8:94:16:b7:27:3f:
         51:0d:10:e0:87:ba:c7:6c:92:95:3d:14:8b:04:d6:4f:f9:c8:
         fe:d5:b9:d9:a8:dd:8c:9d:8c:b7:f6:5b:89:5d:d6:65:4c:2b:
         60:3d:ef:9c:5e:b2:7e:d8:15:68:5a:e1:d1:71:2d:3e:c0:36:
         57:b0:69:02:e2:00:9b:0d:64:07:a1:38:06:c0:23:8d:b4:68:
         2a:9a:09:f1:00:5a:0f:c6:44:4f:e9:66:e3:d9:22:80:18:db:
         ea:e2:c4:56:68:fa:cd:6a:e8:95:ec:ec:3c:1d:4a:4c:76:9f:
         fb:00:0c:00:03:ad:79:18:c2:92:bb:78:7c:ef:95:91:a5:a1:
         95:03:85:2f:80:b3:81:7d:5e:77:88:de:46:cf:51:db:90:c0:
         f6:e9:fd:09:58:44:e8:ed:c2:b5:1d:92:f9:5e:44:8a:3a:ff:
         1f:99:69:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 19:21:06 2025 by rpki-client