Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/84aceef2-689c-343a-9a23-0b785ea8f555.roa
File:                     84aceef2-689c-343a-9a23-0b785ea8f555.roa (raw, json)
Hash identifier:          XAa8zWJ11GVwjEpTV2j7Pw6iPOr/pbMvZsz3jOb66Uw=
Subject key identifier:   2E:3F:7F:87:D3:BD:DD:10:82:20:89:86:FA:0C:67:93:57:F6:F2:85
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584ACE0B995CB1594FB8EA1EC130
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/84aceef2-689c-343a-9a23-0b785ea8f555.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     12189
IP address blocks:        2607:6000:500::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:99:5c:b1:59:4f:b8:ea:1e:c1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=6af7e58c-cb07-4281-b004-dc20cafc76aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f5:0b:44:7c:0d:7a:89:72:a3:e5:26:f7:fd:
                    da:90:f6:ff:4e:d2:94:8a:20:a3:18:f2:df:d7:d4:
                    3e:db:8b:52:0b:fc:6b:20:16:2a:7b:ce:c4:60:d1:
                    ee:e6:07:e3:66:9d:b0:54:db:b2:53:40:06:7e:c5:
                    c8:66:0b:bb:56:2e:6e:f7:26:78:ec:ea:c3:4a:64:
                    24:0b:93:09:e5:a8:12:cf:f7:51:0f:9d:ac:c2:00:
                    aa:73:eb:31:7c:18:a1:e4:fe:71:5a:bf:b0:81:79:
                    ad:16:6f:a3:f6:6a:cb:30:c3:09:d5:9f:59:61:24:
                    9a:84:bd:54:b6:d2:f3:a4:ed:17:d0:5b:98:87:56:
                    ae:e5:99:e1:64:29:48:5a:1b:44:c8:8b:86:2f:de:
                    fd:b4:70:05:a2:40:a7:d8:43:5a:c0:e6:48:05:1c:
                    42:7e:46:54:77:fd:78:f8:6b:f0:fa:18:f4:1d:dd:
                    46:ef:f6:b5:86:9e:5a:f9:db:38:39:f0:01:84:1a:
                    0f:1a:49:f3:7e:41:83:42:80:bc:34:dc:3d:ad:88:
                    6e:14:11:48:a0:2f:ac:eb:db:66:e2:49:3a:c3:48:
                    96:d0:80:65:ee:f9:95:3f:3a:49:17:b3:53:34:fc:
                    00:35:9b:35:6a:4a:51:17:ae:99:47:8a:9d:88:99:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3F:7F:87:D3:BD:DD:10:82:20:89:86:FA:0C:67:93:57:F6:F2:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/84aceef2-689c-343a-9a23-0b785ea8f555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6000:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a3:ea:fa:17:bd:9e:8b:54:f2:1e:59:3e:07:d6:76:e8:3d:
         5d:31:85:d5:76:3f:5c:11:16:47:59:15:49:51:ec:51:f6:1f:
         d7:93:48:ad:30:85:73:17:bc:9a:38:88:fe:57:30:a3:49:64:
         f3:e7:e3:35:78:0d:01:1c:59:f9:be:db:72:38:a7:e3:19:dc:
         d4:85:3f:6f:d0:f2:65:84:5b:b9:f3:4a:23:44:70:07:02:44:
         45:0b:9b:94:7e:02:dc:b4:e2:24:cd:ee:30:96:63:8d:35:eb:
         a1:0d:45:33:7b:81:01:71:e7:86:da:94:4b:7a:e7:22:2a:57:
         36:9b:05:bb:da:45:c4:cd:5e:2c:43:16:31:dd:ef:3d:94:e1:
         92:ba:07:0c:4b:e4:32:88:81:2f:d1:47:9e:68:b3:be:92:c1:
         a8:8e:7f:02:d2:7b:01:0a:6c:68:15:e6:0e:a9:ac:1d:5d:cc:
         a7:70:1c:cf:ae:4e:7e:05:6d:1c:fa:dd:0a:b0:6f:a3:9f:4d:
         cf:98:3d:80:6d:d8:89:93:44:a1:c1:2f:7b:41:4a:69:7e:aa:
         eb:3f:b2:65:de:ea:b8:04:d4:88:80:7b:ad:63:bf:52:73:aa:
         85:0b:d5:d2:04:6c:5a:4e:d4:08:b3:b4:69:11:bb:97:61:cd:
         8d:95:4e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:08:41 2025 by rpki-client