Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/520c6060-826a-3f64-b994-794fc7c88795.roa
File:                     520c6060-826a-3f64-b994-794fc7c88795.roa (raw, json)
Hash identifier:          u3KNVYlAtS5nPFH7tcOM8HoTfFzIdC3cUdMEwvEPRhw=
Subject key identifier:   7C:BA:A9:44:87:E1:B2:25:58:2C:71:6D:2D:E0:DC:95:E0:B3:01:81
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F43285849ED4FC7AB13FAF5FBCD16B600
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/520c6060-826a-3f64-b994-794fc7c88795.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     397378
IP address blocks:        2607:6004:a100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:c7:ab:13:fa:f5:fb:cd:16:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=3d1de5fa-f04c-4ff1-9945-a286db809de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:77:e0:18:f9:43:c4:78:51:62:85:ee:e9:21:
                    07:67:fa:09:af:ed:4d:9a:0f:ff:72:e0:2f:27:52:
                    75:a0:40:d5:7c:10:33:64:74:5c:1c:6b:ca:03:dd:
                    86:57:d0:f6:6c:44:e7:09:b0:e5:3e:f7:11:24:47:
                    f6:02:1b:87:0f:a3:5b:94:3b:e7:cb:38:40:7c:93:
                    7d:b0:4d:e3:f9:c5:42:19:63:9a:70:0b:09:97:fc:
                    1a:e3:8d:68:dd:25:d6:35:b9:30:25:01:ea:91:6d:
                    5b:83:64:f9:33:9f:e3:cd:cc:68:49:bb:ab:74:c0:
                    a0:ee:1a:8f:ba:b0:2a:6c:67:0e:54:4e:c7:93:5e:
                    d0:e1:64:50:28:15:c0:dc:39:26:30:01:32:0d:e0:
                    dc:23:e7:15:f3:1b:46:39:1d:ed:92:74:b9:3d:42:
                    d4:21:2c:d3:2a:3c:83:35:8f:9e:a1:dd:4f:45:29:
                    7e:5d:ed:6c:88:b6:1e:53:7a:9b:c5:8e:50:ac:2e:
                    2a:75:28:8f:ff:34:0f:7f:3c:38:62:cb:5e:24:44:
                    6e:d5:3c:d3:a5:51:f7:9c:2d:29:56:9a:61:29:85:
                    e7:75:04:18:ab:23:48:15:81:26:2c:46:fd:ce:79:
                    52:74:3b:f7:59:ad:78:c5:b1:55:86:98:50:df:02:
                    e9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BA:A9:44:87:E1:B2:25:58:2C:71:6D:2D:E0:DC:95:E0:B3:01:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/520c6060-826a-3f64-b994-794fc7c88795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6004:a100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:67:3b:65:14:50:48:34:20:1e:ec:e5:af:f4:6c:10:03:55:
         30:5b:91:6c:93:c8:9f:82:5f:63:fe:8f:c0:bf:7d:e3:4c:88:
         db:b8:b2:19:96:ae:0a:2e:86:4a:1f:f1:7e:7c:39:2d:64:b2:
         d2:1b:59:ed:8c:1b:d2:13:9a:9c:35:c6:d7:e9:e4:bf:a7:4d:
         a5:57:10:51:07:98:c0:01:a6:ee:f6:29:6d:d7:5e:c6:d8:61:
         d1:69:85:ec:0c:d8:41:8f:e5:fe:b7:39:8e:e1:b3:8e:cf:da:
         5a:f9:19:6f:26:8a:9e:9d:36:f6:3b:14:bc:b8:dd:38:fb:56:
         53:72:f1:75:52:1d:da:88:37:f8:31:a3:1c:e5:e6:0a:f5:36:
         5b:d3:35:70:2b:e3:03:43:14:44:5c:e1:c6:f6:0b:f9:f6:64:
         17:a2:5b:e3:9e:fc:fa:39:89:ca:d5:ae:df:f1:c8:4b:8f:6b:
         1e:eb:86:2f:b0:2c:ae:ef:7d:ef:a3:07:f2:56:29:08:50:6c:
         44:57:43:ad:32:a0:c4:54:b9:d0:d2:ce:51:d9:c8:95:13:f4:
         14:a9:1b:4e:9f:fe:bf:31:77:5e:11:0f:3f:53:91:f0:04:fb:
         3e:36:05:22:76:13:48:ba:9c:42:c3:bd:a4:21:f3:c2:e8:45:
         77:e9:a1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:57:26 2025 by rpki-client