Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3e4179e9-1c2e-325c-bc9b-4b187abb7ebd.roa
File:                     3e4179e9-1c2e-325c-bc9b-4b187abb7ebd.roa (raw, json)
Hash identifier:          35PC4P8LPtUj6Dnppf0kKcba4lhDm3d2esces3M2doA=
Subject key identifier:   37:D4:31:F3:FD:65:DD:42:CC:BC:A8:DA:71:79:6E:18:A4:D7:3E:E9
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584A56004A821B3E8EB9A8D9C200
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3e4179e9-1c2e-325c-bc9b-4b187abb7ebd.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     23473
IP address blocks:        2607:f750:6500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:4a:82:1b:3e:8e:b9:a8:d9:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=8b949794-d776-4c5d-9b0e-1a75eea5d5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:25:1a:c3:06:11:3a:0f:64:e9:f3:28:75:7e:
                    b9:ea:f2:68:0e:49:9c:c6:34:f5:f2:5e:9e:23:32:
                    a5:8c:fa:c4:5d:c9:94:d4:e0:65:f7:f1:3e:2a:1c:
                    e1:9b:33:aa:50:7b:b4:71:20:99:89:29:0f:f7:d0:
                    a2:02:e3:6e:05:c4:10:bd:a9:74:03:00:ee:bd:5e:
                    2b:0d:fc:c3:a5:5b:ed:ba:7d:fb:51:86:90:e3:98:
                    b6:52:63:ad:71:77:09:04:11:6a:92:88:9f:ec:ca:
                    63:72:3a:66:75:02:2a:41:c1:ea:45:a7:83:06:c5:
                    20:7e:83:61:bb:7c:ca:62:18:19:59:ce:f0:4e:1f:
                    55:01:88:2e:a0:38:c8:5a:2f:15:18:68:d5:9c:cd:
                    8a:a7:2c:0a:93:43:e6:69:a6:a8:c3:48:12:87:32:
                    1d:7a:96:6e:e2:af:f1:69:ba:e3:34:b7:f7:fb:fb:
                    bd:cb:f9:19:06:fb:12:7c:ac:4a:b5:73:18:6b:2f:
                    bf:a8:ad:ee:94:be:f4:87:e2:d5:69:3b:c1:5e:8b:
                    41:09:79:03:67:21:14:41:9b:7d:f1:61:96:ec:06:
                    f6:3e:90:35:18:55:dc:29:d1:24:84:7c:9b:25:35:
                    eb:5c:5e:6a:d5:9f:65:32:a7:20:c6:ed:3d:ce:58:
                    50:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D4:31:F3:FD:65:DD:42:CC:BC:A8:DA:71:79:6E:18:A4:D7:3E:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3e4179e9-1c2e-325c-bc9b-4b187abb7ebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:6500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:04:c7:51:f5:88:23:5d:00:88:79:f2:ba:4e:25:d4:93:87:
         9d:79:db:3b:0f:56:cf:ed:c8:48:91:fa:ba:73:c8:2f:44:1c:
         bf:f4:4d:03:3c:4d:a8:46:ae:df:ae:97:18:e7:2e:54:60:84:
         df:a2:5f:78:c6:70:bb:e7:22:17:35:ad:10:84:2e:f5:9b:f3:
         35:35:05:c1:7b:7b:b1:64:d0:ed:29:26:1e:44:7a:4b:1a:3b:
         88:70:2b:f2:48:8b:4b:04:7e:f6:be:c6:1b:b6:6e:a5:33:3e:
         21:78:88:38:5d:fa:90:72:59:a8:8a:c9:a9:9f:9e:b8:18:4e:
         e4:50:62:e4:f4:bc:ac:b2:65:b9:56:f0:ba:e4:8e:27:5e:38:
         0b:89:4c:95:6a:e5:e8:79:6f:d1:f3:56:08:57:fc:35:ce:9a:
         07:fc:a7:e3:ae:80:8f:bc:43:11:d0:bc:cb:af:fc:a6:fc:20:
         ec:91:82:0f:ef:7f:3c:ec:ee:cd:c6:f1:7e:a3:5e:6e:ed:45:
         1a:df:fc:5c:1e:9d:93:6b:9e:23:a3:00:9c:9e:10:20:f3:11:
         1d:32:d9:0f:9e:81:54:ef:4b:8a:4f:c4:16:b3:52:98:07:35:
         49:2b:c6:2c:5d:25:fc:d7:84:73:f0:a3:4a:4a:8d:bb:7f:98:
         31:08:2f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:29:38 2025 by rpki-client