Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/68250aec-f861-319d-ba5b-6553bba87e15.roa
File:                     68250aec-f861-319d-ba5b-6553bba87e15.roa (raw, json)
Hash identifier:          nG6K/m2Ytyy2JFVB7zVI1g5eaP9kyHc3sKyfKG5oBEs=
Subject key identifier:   1D:D7:DF:FB:EE:6E:B6:C6:C6:B7:A7:06:E1:79:B3:B0:6F:2B:A9:35
Certificate issuer:       /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial:       010D0C9F4328584A3FAAD9301F8E79D8F2A3A540
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/68250aec-f861-319d-ba5b-6553bba87e15.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     19229
IP address blocks:        2607:2e00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:d9:30:1f:8e:79:d8:f2:a3:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=022203d6-508b-47cd-bd36-c93ad936d630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:74:72:ab:cd:43:c6:e7:aa:2c:66:db:3e:32:
                    49:38:6c:50:f4:25:92:6e:f6:52:89:c0:a0:5b:b6:
                    54:4d:38:17:31:1b:82:d2:24:97:fe:b0:12:3d:ac:
                    97:98:ae:db:8e:62:7e:d5:82:eb:80:b9:2a:17:7d:
                    76:55:9b:2c:d4:7b:b9:ee:7c:0b:a0:f0:b1:86:18:
                    fb:84:7a:43:b0:fb:60:ca:88:62:32:e7:83:5a:77:
                    f4:5b:ec:5a:20:d0:37:6b:ad:bf:1c:b1:98:43:cd:
                    56:ec:09:d9:7c:55:a4:f7:82:ae:af:c3:eb:06:8c:
                    43:e7:5a:f2:ca:28:4c:46:83:20:a1:c6:d6:e9:58:
                    e2:6b:17:d2:f9:3f:bd:14:61:60:6f:e1:49:95:20:
                    c1:55:6a:da:3d:a4:06:09:78:a2:f0:01:5d:a1:5c:
                    7b:c3:8a:0d:72:40:35:ee:e5:5a:65:44:70:8e:e5:
                    41:25:f3:1b:15:93:f5:cd:b0:b7:59:82:45:d7:89:
                    78:44:1e:4a:91:d6:3a:1e:6d:ce:a3:b6:73:18:99:
                    65:b5:92:40:d4:b4:37:1e:13:fb:3f:7d:83:75:5d:
                    66:bf:47:09:d1:f2:07:ed:99:6d:de:28:94:47:a4:
                    b5:cf:d6:f1:b6:3e:56:cf:9b:67:0b:34:83:2a:c1:
                    99:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D7:DF:FB:EE:6E:B6:C6:C6:B7:A7:06:E1:79:B3:B0:6F:2B:A9:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/68250aec-f861-319d-ba5b-6553bba87e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl

            X509v3 Authority Key Identifier:
                keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:bd:5e:e6:c2:92:5b:fc:b1:a2:9e:35:3a:f3:61:9c:28:07:
         ab:fa:67:c0:9e:a3:60:10:7e:62:15:21:09:4b:4a:e2:58:86:
         1b:bf:a3:56:bd:b6:b3:5d:41:1c:76:b2:2b:47:47:85:df:0f:
         f5:0d:e3:57:1f:2b:5a:06:a2:93:49:c4:c7:e2:84:dd:59:46:
         88:fd:1c:65:c9:7f:53:4d:b9:99:bb:fc:fc:b1:db:98:d4:05:
         77:1c:29:84:44:b5:bc:27:5c:ad:ce:32:05:99:b8:c8:a7:88:
         a1:39:16:6d:83:b2:a7:6a:8c:2f:77:d5:23:af:46:4c:bb:cd:
         0c:e0:35:74:e1:25:e0:f1:f1:be:0f:03:4d:8d:70:c8:81:90:
         9e:50:c5:ee:fa:39:e0:c1:9b:cc:13:fc:e0:3e:53:ff:7b:ec:
         4e:43:ac:76:36:56:54:52:95:79:e4:15:57:30:c9:04:19:f5:
         46:38:f6:ae:34:5e:1a:95:b3:56:5a:88:f9:b2:50:48:45:4a:
         a4:13:67:79:55:ad:80:a4:20:fc:76:e6:e1:df:59:95:f7:a2:
         cc:50:a6:f8:30:d7:89:37:18:da:69:7f:7f:b6:6c:c5:a3:cf:
         49:28:a9:d2:c5:3f:5b:bb:92:ef:15:52:06:18:44:87:df:08:
         59:9f:b3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:22:47 2025 by rpki-client