Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/93f780c0-9c8e-3aa6-80f1-c7d227eeb84a.roa
File:                     93f780c0-9c8e-3aa6-80f1-c7d227eeb84a.roa (raw, json)
Hash identifier:          wQoZNiOU3Hg2zl3cfz61rt9vSulWBq9SkIqu8izf1b8=
Subject key identifier:   AD:99:B6:34:85:7D:2A:31:47:B4:A2:48:4C:90:F6:54:FA:54:CB:A3
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584A3A157A94FFA29FE18A88F3F0
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/93f780c0-9c8e-3aa6-80f1-c7d227eeb84a.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     8075
IP address blocks:        2620:147::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:7a:94:ff:a2:9f:e1:8a:88:f3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=d987fa68-1552-4ff2-bd18-d9196f8dc973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:db:d4:1a:e4:47:08:32:62:10:50:2a:83:
                    fe:da:d2:46:2a:f8:66:0f:07:e4:3a:88:b1:3f:fa:
                    84:bb:05:9e:b6:f3:e6:50:2a:d6:1b:61:94:42:df:
                    48:0a:dd:55:27:c0:27:8a:74:81:c4:a9:62:0c:a1:
                    b8:67:7c:e9:20:ad:d8:10:4d:ca:a5:08:1a:ca:39:
                    82:6c:97:e0:ca:7a:53:36:9d:2e:b4:51:17:5f:af:
                    8f:73:2b:8c:e5:f1:0b:6c:7e:85:a1:e6:ed:bb:e2:
                    ed:60:7a:77:6d:94:75:03:5d:a7:45:75:28:99:97:
                    5e:fa:f9:f6:b1:0e:a6:ec:65:05:94:c9:0b:d8:5c:
                    ed:84:fa:81:14:f2:3b:78:f6:53:da:bc:8a:55:ed:
                    78:ab:fe:fa:db:c3:93:d8:ee:ec:19:14:09:9d:77:
                    63:fd:ca:c8:32:3f:5e:e6:f3:fa:b1:d4:af:6a:c6:
                    a6:5e:a4:6c:d6:58:b5:42:9d:bd:04:5c:8c:38:ee:
                    58:75:53:5e:ac:08:1c:43:b1:ad:89:76:0f:73:c1:
                    1d:05:e9:69:db:bf:59:80:21:11:03:46:f5:b7:ef:
                    a4:e8:6c:bc:43:a3:37:91:10:ae:05:93:67:47:f0:
                    d3:11:83:ad:66:63:6d:e5:f2:21:6f:06:f6:e7:92:
                    de:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:99:B6:34:85:7D:2A:31:47:B4:A2:48:4C:90:F6:54:FA:54:CB:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/93f780c0-9c8e-3aa6-80f1-c7d227eeb84a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:27:fc:32:5a:91:c1:56:8e:50:0e:75:d9:79:30:09:43:9b:
         44:cb:36:ed:cf:31:23:a5:74:3a:ba:c3:bb:d4:66:25:f6:61:
         ba:0b:b2:af:92:44:c1:84:59:12:d8:8d:c7:4f:e9:13:24:70:
         bb:f6:9d:6d:4f:3f:90:6d:38:cb:ff:7e:4f:f8:3d:4a:b4:00:
         f6:2d:98:8a:e7:40:cf:a9:28:7c:c5:3d:fd:3a:ff:35:b7:7c:
         ab:72:9b:0d:41:29:ed:cd:1a:83:cb:ce:26:89:81:62:4c:ec:
         9a:3e:0f:57:dc:43:34:81:66:5e:42:64:5b:ba:8e:17:fe:e3:
         c7:17:49:f3:27:29:d9:39:e9:76:88:50:9f:7c:f2:d5:44:92:
         07:28:88:8c:93:06:ae:5b:81:3f:ad:9a:7b:0d:9f:bb:86:68:
         9d:b1:f0:e8:da:cb:c5:40:0c:44:19:a9:49:cb:12:1c:87:2a:
         69:81:15:38:79:92:6c:ea:be:a5:08:d0:57:92:44:85:54:5f:
         e8:f5:b8:02:41:90:c5:4b:5b:af:3d:a1:8d:71:33:38:df:5f:
         49:76:85:9d:dc:92:cd:ee:a5:63:71:b2:f9:1b:0f:cb:73:82:
         98:59:2d:99:31:8c:1a:b7:49:a4:46:5a:b9:6d:c6:14:88:53:
         0d:6e:14:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:20:15 2025 by rpki-client