Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/1f55a889-9414-3f09-b1a1-20b5eefcbfff.roa
File:                     1f55a889-9414-3f09-b1a1-20b5eefcbfff.roa (raw, json)
Hash identifier:          xiURfm3BjT8QEcbQwZf7WBq5Lh7ttm7pJ6Rbac++ZEI=
Subject key identifier:   C7:9D:EE:E7:33:08:C8:5E:E6:90:AA:6C:04:F3:B1:56:39:B4:37:F0
Certificate issuer:       /CN=605ef18e-eb43-492e-a589-20f12375c0ce
Certificate serial:       010D0C9F43285849C79F61DF91CC0E268D08E940
Authority key identifier: E1:35:66:D1:EB:AB:AF:F9:00:4E:D5:E8:19:12:3D:95:42:12:5E:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/1f55a889-9414-3f09-b1a1-20b5eefcbfff.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     40785
IP address blocks:        2607:7040::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/605ef18e-eb43-492e-a589-20f12375c0ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/605ef18e-eb43-492e-a589-20f12375c0ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:61:df:91:cc:0e:26:8d:08:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605ef18e-eb43-492e-a589-20f12375c0ce
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=5a5750da-e2a1-41d9-9559-fcd74628bf67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:fb:ad:c9:6b:b6:03:c7:3d:41:d4:b4:7c:
                    89:7a:a0:40:23:70:ad:af:d0:c4:14:29:ee:2e:0e:
                    ed:eb:c2:1b:7a:e2:3e:81:7e:8f:8d:78:22:17:fc:
                    e9:ed:c1:8b:f8:f6:2e:3c:36:d4:62:ac:0d:87:27:
                    34:d2:28:b1:27:a0:15:89:39:51:dd:79:5e:66:80:
                    2e:06:c6:32:dd:b6:bd:d6:76:9e:f4:84:c5:0b:5d:
                    7a:5e:37:9f:aa:ff:23:e8:90:ac:2e:1b:11:e7:fe:
                    29:ec:31:4b:9a:23:ef:ab:f3:de:93:a5:66:d4:39:
                    47:bb:60:b7:23:92:2f:83:1c:0b:27:34:71:64:ca:
                    06:83:98:15:dd:a6:fc:7b:e7:eb:e6:d0:fb:ef:60:
                    bc:88:10:62:06:02:c1:8d:3a:67:41:be:34:3a:3f:
                    92:e8:43:b7:34:64:e1:89:72:eb:07:7e:06:dd:d8:
                    4e:fa:0c:98:03:a6:af:70:e6:e1:29:62:b1:9d:2d:
                    92:9c:71:87:a9:8d:23:c4:d1:ac:ea:4f:45:d6:18:
                    5b:1f:14:ec:cc:f7:34:e0:f6:c6:1f:23:c1:01:51:
                    03:84:0e:38:1d:84:19:47:7c:5a:27:02:46:87:27:
                    dc:ba:c7:1e:62:fa:8e:dd:59:df:2a:01:a7:ba:19:
                    af:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9D:EE:E7:33:08:C8:5E:E6:90:AA:6C:04:F3:B1:56:39:B4:37:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/1f55a889-9414-3f09-b1a1-20b5eefcbfff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/605ef18e-eb43-492e-a589-20f12375c0ce.crl

            X509v3 Authority Key Identifier:
                keyid:E1:35:66:D1:EB:AB:AF:F9:00:4E:D5:E8:19:12:3D:95:42:12:5E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7040::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:d0:03:26:2f:ed:9f:ec:be:b2:3f:b8:e3:c3:d6:16:a8:8d:
         88:13:be:20:ca:f6:b4:97:2f:34:93:bb:e4:af:c8:85:11:67:
         01:25:59:df:13:50:ad:da:67:88:11:c0:c7:94:ec:7e:83:b6:
         bf:a9:b0:6f:f9:6a:c4:de:85:64:97:9f:fc:27:b3:83:2c:ba:
         b6:f6:1b:b0:5f:24:6f:60:13:96:b7:8b:f2:28:da:e1:f8:cb:
         c3:19:6d:33:77:1e:e2:34:f5:6b:53:3c:86:05:df:42:1a:bc:
         b5:e2:0c:9a:99:6f:67:e0:04:36:d6:1a:48:65:38:d5:10:c1:
         77:0f:53:22:52:e8:f8:a7:4e:56:d5:ee:51:b6:8d:be:8f:87:
         71:3d:b1:bf:ba:e3:c7:54:86:38:06:29:df:57:c0:9c:50:b5:
         da:dd:37:5f:bc:96:85:49:b5:6a:6a:cb:fe:29:7f:73:2a:50:
         eb:66:24:ba:cb:e9:3a:89:6e:d6:64:f8:07:7a:8e:12:dd:17:
         35:55:66:ba:84:46:57:97:d7:a5:c1:55:4f:6f:8f:13:34:0a:
         7e:2b:fb:32:09:13:c3:5f:7f:71:d2:53:f4:b4:3a:e8:b5:63:
         ab:10:6a:7d:d8:71:e7:2a:3a:ba:12:3b:35:f3:0d:0d:ab:22:
         22:73:d4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:48:58 2025 by rpki-client