Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/2c0a15c6-fc43-369f-8434-b2046445ad33.roa
File:                     2c0a15c6-fc43-369f-8434-b2046445ad33.roa (raw, json)
Hash identifier:          wye7lVIHQeRJmNGCLLGhss6gFBJE5Lf9I3/Us8HQfiM=
Subject key identifier:   1B:29:57:01:DE:61:A4:04:C8:48:DA:19:D9:4D:14:D1:2E:0C:6A:9A
Certificate issuer:       /CN=c23acc72-dfd4-42de-ae0b-b8b0fd597ee7
Certificate serial:       010D0C9F4328584A6C55D30B1DB5B0196D52A600
Authority key identifier: 4D:FF:96:52:7E:44:83:36:D6:48:C3:A8:EF:3A:95:FA:14:6A:A4:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/2c0a15c6-fc43-369f-8434-b2046445ad33.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     398933
IP address blocks:        2607:540::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:d3:0b:1d:b5:b0:19:6d:52:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23acc72-dfd4-42de-ae0b-b8b0fd597ee7
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=d3bdadb6-eeca-49bf-ac4b-f7c3dfc06743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:60:a3:26:00:a2:42:4b:c2:17:f7:b2:9a:54:
                    55:87:66:74:03:b3:74:0c:0d:fc:ae:2b:cf:6d:c7:
                    36:e1:7e:0e:61:bf:4e:8a:6b:d9:20:e2:a1:f8:09:
                    2b:65:fe:87:2e:f7:c6:e2:12:79:2a:85:eb:e9:90:
                    19:68:5c:93:ec:30:8e:58:16:25:38:63:41:22:ff:
                    4b:fd:5b:92:9d:71:b7:82:1e:84:77:04:2c:84:d7:
                    0a:ff:85:aa:f4:5a:e8:8e:98:c5:46:dd:72:2a:8a:
                    7e:d8:60:e4:46:d0:20:f5:59:a1:f8:0e:e5:64:95:
                    c6:d9:11:41:e7:3b:8e:7a:ef:38:19:a4:6e:04:81:
                    4f:ec:b5:4b:b3:f9:2a:e2:d5:1a:05:01:fa:9b:67:
                    a6:e1:e6:76:ec:c5:81:b8:10:65:3a:20:ac:31:fe:
                    0f:be:9c:8d:9c:29:80:b3:37:7a:c9:8b:c8:15:be:
                    28:6d:bc:83:92:d7:5e:a6:f1:38:ab:cb:19:9e:6a:
                    ab:14:47:39:45:25:88:66:9a:88:35:02:2b:37:19:
                    76:13:94:24:da:45:34:59:78:78:c7:01:d2:e3:5b:
                    5e:1c:6e:f5:c5:12:6f:55:59:b9:e6:19:34:63:03:
                    3c:c7:fc:b4:f9:ed:84:6e:c1:c8:e4:75:44:ba:0c:
                    d2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:29:57:01:DE:61:A4:04:C8:48:DA:19:D9:4D:14:D1:2E:0C:6A:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/2c0a15c6-fc43-369f-8434-b2046445ad33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.crl

            X509v3 Authority Key Identifier:
                keyid:4D:FF:96:52:7E:44:83:36:D6:48:C3:A8:EF:3A:95:FA:14:6A:A4:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c23acc72-dfd4-42de-ae0b-b8b0fd597ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:4e:21:2f:81:ab:e3:b9:e2:d3:20:ab:6b:37:4a:48:94:ac:
         f6:59:97:67:b0:9d:5c:12:d3:8b:cd:46:9b:a0:32:99:a8:f3:
         65:15:69:1c:c5:b8:16:4f:97:3e:ab:4b:0b:7e:8b:54:6f:7c:
         a7:d1:40:e7:fa:23:54:a9:fb:da:ff:e7:7b:e6:8e:1a:b3:e0:
         3c:3e:d4:ab:d0:c2:f0:a1:bc:3a:23:f5:18:19:39:6c:7d:3d:
         33:71:7c:47:f7:eb:34:4c:19:07:a7:25:da:09:ed:7a:1f:5a:
         38:de:d4:0f:cb:50:be:75:db:7e:59:65:53:e6:95:ec:c4:e9:
         87:61:ab:7c:13:f5:cd:2d:f9:81:1f:59:0b:90:43:dc:44:6b:
         c5:b6:fb:7a:32:85:c4:65:48:60:76:3f:67:76:8a:bc:7b:c4:
         93:47:f2:7d:ea:ff:21:cd:99:17:0f:26:26:01:ba:9e:20:5b:
         19:4c:af:db:bb:e9:b2:33:c9:05:2e:d8:81:a5:03:65:3d:f6:
         31:65:d9:95:66:6b:cd:60:ac:98:88:8c:a0:3e:a0:ae:41:10:
         15:cd:f9:bb:00:2f:68:3d:03:9a:21:91:3b:e8:38:25:6f:a5:
         04:c4:c5:a0:4e:7f:36:7a:ee:2f:9e:37:70:fa:84:13:d7:6e:
         08:47:57:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 10:01:21 2025 by rpki-client