Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/b6b08104-9ef6-3ac4-a73d-ce7c5d3a55db.roa
File:                     b6b08104-9ef6-3ac4-a73d-ce7c5d3a55db.roa (raw, json)
Hash identifier:          sJi7JOqQ99cUwaHbvzqWwV+MU1SfaDDcT6MWwORg+UU=
Subject key identifier:   BA:59:EF:1A:2C:B7:39:D2:77:32:22:8A:35:46:64:B5:AA:79:33:89
Certificate issuer:       /CN=ebad5283-db04-4fcf-81a8-4a09a38eb203
Certificate serial:       010D0C9F4328584A5765D1539D73C09BA4184A00
Authority key identifier: 61:DE:A3:8E:F7:70:33:FE:F0:9B:F7:58:2B:E1:A8:29:FA:47:A5:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/b6b08104-9ef6-3ac4-a73d-ce7c5d3a55db.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     16840
IP address blocks:        2607:9b40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/ebad5283-db04-4fcf-81a8-4a09a38eb203.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/ebad5283-db04-4fcf-81a8-4a09a38eb203.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:d1:53:9d:73:c0:9b:a4:18:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebad5283-db04-4fcf-81a8-4a09a38eb203
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=45a9a17c-e3e4-4d6c-a8cb-42e3c2c14a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d7:eb:62:40:60:d6:bc:f5:ef:d4:00:f1:1d:
                    eb:c7:03:71:e7:23:c8:64:b5:05:10:48:6a:46:47:
                    8d:27:ac:c9:83:8e:b5:cc:d0:cf:e0:0c:a8:af:ad:
                    c1:a7:0f:d3:1e:ef:4f:9e:fa:85:b1:2b:64:51:ba:
                    b1:92:5f:55:d1:3a:8a:9f:83:9f:8c:e8:37:1c:94:
                    0c:e1:09:dc:dd:7d:06:b0:0b:c6:54:3f:d4:f9:0e:
                    d6:70:46:ab:01:83:75:8f:ab:99:a4:e9:e8:33:7e:
                    19:b0:4b:19:01:40:40:07:8e:fc:6f:13:64:8d:b5:
                    79:0f:c9:27:41:da:dd:dc:c2:4d:e1:c6:4c:eb:a4:
                    a3:c5:01:00:5f:ff:8f:d8:7f:9e:f7:6b:33:6a:a7:
                    dd:88:07:ca:2b:60:f1:39:b4:97:4e:46:b9:df:67:
                    ae:40:ee:fa:6c:aa:e7:64:53:81:98:66:80:71:72:
                    01:23:85:7d:fc:bb:63:5d:ca:87:db:f3:50:b7:68:
                    44:f2:7a:92:d2:76:ba:6c:f7:f6:d5:4c:ea:50:61:
                    d1:74:60:7a:7d:7a:0f:b1:0b:f3:1a:87:44:73:6b:
                    13:5d:ad:7c:1a:32:ec:be:b1:a5:30:36:7e:30:a3:
                    b3:67:ad:83:3b:63:f5:0d:45:32:ad:80:cd:2c:ed:
                    5e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:59:EF:1A:2C:B7:39:D2:77:32:22:8A:35:46:64:B5:AA:79:33:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/b6b08104-9ef6-3ac4-a73d-ce7c5d3a55db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203/ebad5283-db04-4fcf-81a8-4a09a38eb203.crl

            X509v3 Authority Key Identifier:
                keyid:61:DE:A3:8E:F7:70:33:FE:F0:9B:F7:58:2B:E1:A8:29:FA:47:A5:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebad5283-db04-4fcf-81a8-4a09a38eb203.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:90:77:55:b5:6e:b1:35:3c:bb:23:2a:41:e5:40:fa:5e:81:
         77:48:e3:14:c8:05:aa:21:49:60:07:83:46:23:c5:d4:05:0a:
         3d:26:e3:df:aa:79:f8:56:88:f9:aa:d4:1a:a4:ab:f0:57:01:
         3e:a9:04:31:85:44:4f:68:f1:b5:d3:52:fa:29:8b:26:2c:cb:
         7e:2e:e0:cc:6c:cf:10:6b:f3:87:f2:e3:7f:9b:08:9c:df:bf:
         0b:a7:65:a5:33:f3:28:30:c2:66:34:3e:da:da:5c:c7:79:9f:
         fb:8b:df:7d:c8:67:f4:e1:2c:6c:c2:8b:be:29:74:50:44:70:
         88:3a:63:c6:01:7f:0a:db:1d:83:27:9f:46:0a:07:71:12:28:
         a4:3c:1f:17:92:3a:9a:f9:a2:58:a8:67:d9:ce:d6:27:29:68:
         28:46:27:a5:35:3b:95:a6:f1:81:1c:75:8c:90:ad:09:b5:69:
         d8:98:19:ba:62:5a:5e:08:d2:31:f4:68:87:b2:13:b9:d2:ea:
         f9:03:0a:78:41:eb:bc:ea:62:dd:54:c5:1d:a0:43:51:02:46:
         20:e4:9b:15:37:69:2d:9f:7b:f8:de:20:1e:5e:23:e8:5d:fb:
         f7:87:18:de:f5:2c:2c:36:a3:96:db:ef:41:f0:3f:99:d1:7e:
         b4:5b:32:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:50:59 2025 by rpki-client