Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/df71ebf9-f641-3f00-b880-4b494a56937e.roa
File:                     df71ebf9-f641-3f00-b880-4b494a56937e.roa (raw, json)
Hash identifier:          bms0MNlFRA1+Ko8OhTpqB1WHnBHEbkqyO/RRXOy14no=
Subject key identifier:   C4:BF:58:A9:22:BC:FB:D8:2B:0C:5A:69:E8:E6:FB:BE:52:05:0E:E3
Certificate issuer:       /CN=84071564-b087-4d9c-88d0-6fa5a30617a3
Certificate serial:       010D0C9F432858494E2EA7C13EEE3775B7706BC0
Authority key identifier: 83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/df71ebf9-f641-3f00-b880-4b494a56937e.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     16717
IP address blocks:        2607:d580::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:a7:c1:3e:ee:37:75:b7:70:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84071564-b087-4d9c-88d0-6fa5a30617a3
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=a15ec9de-514d-46d2-ac04-dcc8974eba96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:95:0a:a8:3d:36:28:d0:45:a3:09:f7:54:
                    60:f0:1d:49:ed:7b:1d:62:6c:c4:c3:1f:eb:25:2a:
                    a0:32:b3:85:f2:46:91:30:ca:b6:d5:67:bb:18:9c:
                    71:de:1d:0e:ec:8b:6f:01:68:8b:26:a4:92:08:c2:
                    20:01:ff:1c:86:b8:9f:3d:31:85:d1:fd:8b:b5:d9:
                    34:04:29:84:44:ef:88:3f:5c:87:ca:2e:a5:5d:9e:
                    4d:b9:5d:92:fe:4d:79:a5:2f:ff:57:2e:35:7f:80:
                    eb:06:63:a6:13:7c:43:bc:49:a2:8b:93:ab:e2:ee:
                    74:e9:93:45:c3:e5:7f:b2:fa:5c:ff:d5:e4:aa:30:
                    45:20:f0:81:7e:73:33:e9:b9:0e:d1:7d:00:be:3e:
                    ce:4e:f4:d1:b1:7c:55:22:91:c7:86:6c:d3:6c:c0:
                    3c:cb:05:1f:7d:94:46:2d:6a:98:90:b4:8b:14:45:
                    85:65:a1:34:0d:59:ba:2a:c7:e3:d5:c1:19:1f:2e:
                    70:b6:3c:90:a9:25:61:5e:e2:cc:78:07:93:6c:b9:
                    f2:17:5e:7c:d3:d9:6a:db:68:8b:af:6c:a1:28:45:
                    ca:1f:88:5a:99:31:1d:2e:74:3a:48:77:c6:89:75:
                    87:5e:fa:54:c4:f9:96:71:c0:ed:65:05:bd:f0:80:
                    87:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BF:58:A9:22:BC:FB:D8:2B:0C:5A:69:E8:E6:FB:BE:52:05:0E:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/df71ebf9-f641-3f00-b880-4b494a56937e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl

            X509v3 Authority Key Identifier:
                keyid:83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:30:fa:38:13:40:8a:89:c1:de:3d:54:f3:df:7e:a7:bd:0e:
         02:90:02:54:d4:2c:eb:16:7a:2c:9f:19:15:c2:96:5a:67:63:
         b9:6c:86:ae:5b:e7:50:fc:0b:a1:ae:10:5a:5a:f9:e4:55:47:
         3a:fa:20:29:59:3a:7b:9a:33:d7:51:39:7a:6c:6b:e3:94:5f:
         6d:16:c9:e0:27:8d:f3:d1:ba:17:64:79:1c:70:e4:16:b3:93:
         fd:27:e2:73:cb:78:46:7a:ff:0f:d1:ff:5d:27:e4:41:a9:19:
         3b:54:68:7c:b6:ea:10:ad:24:56:ce:7e:43:2d:84:b0:0d:1b:
         ba:f0:e6:50:82:6f:85:d6:67:1f:64:36:13:d8:bc:f5:af:fe:
         c5:dd:aa:0c:78:17:a3:11:81:88:3b:67:d9:d4:65:64:01:7d:
         d9:0e:ba:82:4d:63:c5:9f:1f:c0:e8:e2:7a:61:cc:38:13:e0:
         4d:bb:df:83:3a:53:01:0d:32:bf:12:4e:b7:59:bd:cd:cd:6c:
         8a:54:3e:50:7e:10:f2:eb:80:d4:74:ae:50:b7:c0:0a:1b:f7:
         92:8d:d5:58:4c:da:ef:a3:77:3f:86:9f:70:9a:c9:1f:92:0c:
         9b:19:8c:29:4d:57:b3:55:a7:4f:45:10:d4:5a:5a:88:f0:d2:
         8e:f0:17:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:13:32 2025 by rpki-client