Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/f5885fc8-8d31-37ed-86d6-5bbfddb2dd03.roa
File:                     f5885fc8-8d31-37ed-86d6-5bbfddb2dd03.roa (raw, json)
Hash identifier:          HqNFxlBKpLXC4ELyZLx/iDPI93XBA8PIxXyh1lYFZxE=
Subject key identifier:   DA:B3:A7:68:A1:96:E7:B5:1E:42:78:24:A6:6E:BB:30:88:4B:74:F1
Certificate issuer:       /CN=e612cbeb-7456-41ce-9bf5-c9634fa1254c
Certificate serial:       010D0C9F43285849DF5A6014BF9432B901D54BC0
Authority key identifier: 07:DC:BE:66:27:FF:A0:9C:DF:F5:4B:EC:6A:CC:5A:F4:41:EB:AB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/f5885fc8-8d31-37ed-86d6-5bbfddb2dd03.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     27027
IP address blocks:        2607:8280::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/e612cbeb-7456-41ce-9bf5-c9634fa1254c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/e612cbeb-7456-41ce-9bf5-c9634fa1254c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:60:14:bf:94:32:b9:01:d5:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e612cbeb-7456-41ce-9bf5-c9634fa1254c
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=16ff62db-772f-4e31-9c68-333cbff2239a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8d:65:97:30:43:88:2b:51:d2:3b:b9:0a:bf:
                    7d:a6:52:ff:22:c9:6e:87:67:a8:64:53:f2:99:d5:
                    3f:a5:99:70:1e:b8:94:a7:ec:b8:cc:50:5a:de:86:
                    de:4e:ba:e7:ff:e1:54:b9:f5:54:95:b7:ca:71:49:
                    52:4a:43:32:18:d4:77:8d:84:29:6f:f4:ba:34:aa:
                    86:2c:a7:6d:c5:8b:bf:13:37:60:e8:0f:dc:93:e5:
                    80:52:88:5a:10:a9:c0:cd:cf:86:f8:41:07:e1:bb:
                    16:9c:9e:63:14:f6:bc:4d:e7:c1:91:b2:3e:7f:23:
                    9d:ab:a8:c7:1a:3b:94:c7:98:af:51:a5:24:e0:55:
                    6f:9a:0a:74:9d:95:9d:85:8d:39:ad:98:51:16:ca:
                    d4:41:03:b0:26:f4:c3:fb:d8:d0:98:9a:00:0b:ff:
                    94:94:9d:be:83:fb:5f:66:fe:9d:35:3f:3a:62:f8:
                    a0:a6:de:41:51:dd:fd:a8:79:8f:32:9c:fb:3a:87:
                    05:51:35:88:00:61:4a:57:37:ed:ec:ae:f2:99:57:
                    06:34:8d:b3:de:cb:f6:b5:c3:59:89:cf:46:fc:2a:
                    4d:9b:d9:50:b6:48:07:72:e1:67:20:26:28:2e:dd:
                    11:d7:35:ab:b7:5a:a0:9b:f6:bc:d7:3b:ec:e3:98:
                    54:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B3:A7:68:A1:96:E7:B5:1E:42:78:24:A6:6E:BB:30:88:4B:74:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/f5885fc8-8d31-37ed-86d6-5bbfddb2dd03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c/e612cbeb-7456-41ce-9bf5-c9634fa1254c.crl

            X509v3 Authority Key Identifier:
                keyid:07:DC:BE:66:27:FF:A0:9C:DF:F5:4B:EC:6A:CC:5A:F4:41:EB:AB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e612cbeb-7456-41ce-9bf5-c9634fa1254c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:93:0f:52:00:c0:b8:ec:e2:99:f7:2c:98:01:75:3a:47:74:
         34:77:1f:b0:3e:1c:ca:f7:e4:1d:d9:43:11:e7:f1:bc:86:6c:
         1e:d1:1b:5c:03:b0:cd:6e:c5:f9:2e:7f:51:50:e6:cc:47:f4:
         ba:d7:d6:d8:05:93:36:91:d7:cf:06:b9:29:ff:0b:a5:6b:42:
         3d:64:36:04:2f:b5:29:f3:d9:10:a5:c0:57:81:74:d7:39:17:
         9a:b8:58:e5:d3:c4:e2:21:ca:f6:04:da:0a:a1:c8:77:25:75:
         62:1d:5b:f7:65:a4:aa:bc:28:54:d6:e6:41:5c:34:5f:d9:88:
         de:75:01:50:18:6f:47:3a:a4:c6:f3:66:18:f0:9b:8b:4b:04:
         7e:53:78:a2:1c:82:84:6a:52:9a:c9:4b:cf:c4:a5:cd:28:d6:
         05:a6:1a:a8:ef:9a:b8:3b:f3:b7:85:c0:17:d0:95:63:dd:d6:
         f4:ca:70:d7:40:9c:50:6b:49:97:1f:01:0d:8f:6e:f2:de:31:
         14:af:db:f6:62:8f:ed:f8:50:ce:de:3e:67:b3:f7:be:54:6e:
         37:ef:7f:7e:76:9e:e5:b4:46:f6:9f:f3:d2:48:d0:c6:19:26:
         b5:44:9c:7e:7a:ca:ae:08:a2:95:4a:6f:5e:c0:95:23:8c:7e:
         d6:72:aa:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:37:38 2025 by rpki-client