Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/0d2d7fe3-bd63-31fa-8abe-c35f9dc6cd20.roa
File:                     0d2d7fe3-bd63-31fa-8abe-c35f9dc6cd20.roa (raw, json)
Hash identifier:          tyZ8isRBiXA+s8OjPWwnElxjNdKWdqJY6oYCZBfM46Y=
Subject key identifier:   B6:A7:3B:2F:99:FA:AF:81:2A:55:47:1A:C0:C0:0C:8C:AB:E0:DD:23
Certificate issuer:       /CN=c86a7ba5-67c5-481d-b278-0b265dc97144
Certificate serial:       010D0C9F4328584A2ABAEC0871656EF9CBD8B8A0
Authority key identifier: 69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/0d2d7fe3-bd63-31fa-8abe-c35f9dc6cd20.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     8075
IP address blocks:        2620:7d:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:ec:08:71:65:6e:f9:cb:d8:b8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86a7ba5-67c5-481d-b278-0b265dc97144
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=feab2d88-67c0-4be9-92a3-83f914835ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7d:a9:96:c7:d4:be:fe:22:5a:1f:67:1a:fb:
                    04:df:c5:b6:65:95:a5:94:cf:56:73:6f:53:85:3e:
                    ae:f5:82:80:96:3f:f4:6d:26:62:1f:17:60:0a:a0:
                    e4:5c:0f:d4:f2:06:fd:28:39:9c:7e:e0:0e:62:30:
                    b2:85:6d:7a:a6:32:3c:48:f7:d2:c0:b7:79:18:a8:
                    32:4e:af:8e:df:ec:d5:0e:21:03:3f:a6:91:fe:bd:
                    18:01:aa:a0:12:fb:68:09:67:e0:bb:9f:8b:89:b0:
                    85:70:93:31:20:b2:02:bc:d1:07:90:41:1f:e0:42:
                    39:4e:fa:af:ec:b1:75:c8:b3:e3:69:c8:f4:ef:c7:
                    b1:bf:c6:d1:e7:22:23:6d:5a:34:6b:07:23:bb:91:
                    73:78:f5:ab:9d:a8:13:c9:f4:83:f3:88:a8:25:57:
                    65:cb:fa:04:98:d5:bf:2a:51:9c:ca:cf:10:4f:3e:
                    97:75:c1:02:5f:93:66:81:cd:f0:c7:6e:de:af:0a:
                    03:1e:87:03:cb:87:ea:d4:09:4f:e7:54:fc:d7:72:
                    48:4f:7a:fc:03:3d:a8:83:52:69:9d:3a:ff:c6:d8:
                    ba:53:ee:70:41:ba:36:92:ab:1a:cb:dc:2b:d9:09:
                    a8:12:b2:0c:46:a9:d5:fb:69:dd:93:58:f2:6d:b0:
                    25:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A7:3B:2F:99:FA:AF:81:2A:55:47:1A:C0:C0:0C:8C:AB:E0:DD:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/0d2d7fe3-bd63-31fa-8abe-c35f9dc6cd20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144/c86a7ba5-67c5-481d-b278-0b265dc97144.crl

            X509v3 Authority Key Identifier:
                keyid:69:92:8D:83:C4:F4:B4:92:18:C1:FE:F0:78:A4:3C:F7:1D:D0:2B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c86a7ba5-67c5-481d-b278-0b265dc97144.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:7d:f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:4b:a6:dc:45:64:13:27:6a:f8:96:2f:0a:fc:b0:29:2c:32:
         10:ed:42:36:82:5a:06:f7:7b:27:0f:1f:0b:67:7f:46:a8:a7:
         8b:df:07:8d:63:45:62:5a:76:72:da:7e:b9:2c:ef:ef:95:2a:
         9d:00:79:99:1e:f8:d1:90:e1:7f:fe:69:43:fb:b0:78:38:2f:
         5e:77:d2:74:77:4c:b9:db:53:02:f2:43:40:eb:65:fe:e5:f1:
         ad:b2:23:e4:67:65:f3:03:1a:58:fa:65:d4:97:5e:fe:13:0c:
         30:77:33:14:dc:2e:37:66:54:02:84:36:4c:1d:b4:cd:fa:37:
         ce:ea:f6:57:e6:88:82:26:19:78:63:5e:41:59:df:54:5e:31:
         96:a5:17:d6:8b:f4:5f:81:7e:4e:26:04:08:41:f6:ac:6d:e7:
         01:e1:b8:25:0d:d2:1c:2c:fe:c2:2f:aa:f4:fe:9e:72:22:22:
         0f:7b:b6:ff:2c:54:6e:aa:b6:59:c4:53:d2:28:33:c4:0f:52:
         da:84:15:61:51:20:65:82:e6:02:82:9f:7b:d6:2d:6e:66:24:
         e3:72:95:e9:4b:f2:f7:ae:7d:a9:5f:29:6b:ee:09:2d:6b:93:
         08:1a:29:ee:3e:0f:3e:81:90:57:44:ad:ee:a7:45:3a:df:08:
         70:aa:69:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:38:28 2025 by rpki-client