Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f9570d2b-71fc-308b-b155-9b79a5f9352e.roa
File:                     f9570d2b-71fc-308b-b155-9b79a5f9352e.roa (raw, json)
Hash identifier:          05HyOE9xrWBy3nmde5JIl0PfIDM8D5CvCUYFdPsUALc=
Subject key identifier:   BA:3A:89:79:16:E7:C9:18:A5:4C:59:38:F8:B2:B6:A8:B9:49:16:3F
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584AEF8BCC082455762F48B1AC20
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f9570d2b-71fc-308b-b155-9b79a5f9352e.roa
Signing time:             Fri 22 Aug 2025 01:00:33 +0000
ROA not before:           Fri 22 Aug 2025 01:00:33 +0000
ROA not after:            Thu 20 Nov 2025 02:00:33 +0000
asID:                     271
IP address blocks:        2607:f8f0:1400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:8b:cc:08:24:55:76:2f:48:b1:ac:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Aug 22 01:00:33 2025 GMT
            Not After : Nov 20 02:00:33 2025 GMT
        Subject: CN=e0cd6e97-9012-4bb3-8cb7-292472ad0f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:47:c4:a4:55:81:b4:ba:65:d3:14:6f:7c:c7:
                    88:58:09:91:fd:41:53:53:a9:0f:94:72:54:67:52:
                    36:d6:63:f7:e9:4a:a4:c6:28:6a:a7:70:8e:97:f8:
                    34:94:8f:6f:33:8c:89:b0:4b:dc:e1:41:e1:6f:f3:
                    76:a5:2d:3c:2d:f0:ba:0c:b4:44:bd:34:7d:f2:d1:
                    85:d0:46:51:13:47:46:09:f4:68:5c:ad:6f:04:45:
                    ac:25:13:8b:b8:37:d7:b7:34:93:bd:9f:fe:fe:f0:
                    58:79:e1:63:70:26:b8:fa:d3:c3:1e:e6:87:22:d6:
                    b9:56:b5:8d:86:ee:c3:dd:41:ad:b8:38:6e:ac:15:
                    26:08:86:14:95:06:c9:d2:1d:8a:f9:47:5b:27:e3:
                    00:03:57:fd:0e:76:a2:8f:00:9b:2d:80:0f:98:d4:
                    84:28:67:0d:30:50:cd:59:a5:5c:b2:76:d2:2f:9e:
                    40:8b:94:0e:fe:f3:87:63:ef:f1:ca:a6:8e:88:43:
                    da:0c:19:1a:38:a1:8a:f5:86:f4:91:dd:71:ad:b7:
                    6b:b5:29:55:b3:f9:31:56:98:21:4b:4d:5c:ed:a7:
                    0b:5c:94:b9:4f:e2:fe:d3:17:35:3d:a8:63:85:95:
                    eb:9d:92:f2:95:61:68:5e:67:78:2f:8b:ad:85:a6:
                    a5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3A:89:79:16:E7:C9:18:A5:4C:59:38:F8:B2:B6:A8:B9:49:16:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f9570d2b-71fc-308b-b155-9b79a5f9352e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:1400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:81:1d:bf:76:39:f0:a0:e3:a9:52:e9:08:3c:6a:20:bf:00:
         c4:fe:5c:b7:47:d9:c9:c2:b0:ca:12:39:1c:52:77:4c:b3:c7:
         12:d1:4c:dc:b3:b4:45:77:30:a8:d7:d1:37:ed:0f:a6:bd:4e:
         a9:9d:cc:81:9e:c1:95:b6:8e:e4:8c:c3:08:5d:e1:21:a7:af:
         f0:91:ec:81:b5:e1:a4:96:88:95:93:e0:b2:ec:82:20:8c:69:
         16:d9:bc:67:28:63:ce:3b:03:9b:51:f5:50:36:6c:5d:97:6b:
         21:35:03:ee:cb:99:7e:fa:53:73:d3:77:97:ac:66:d1:60:f0:
         99:1f:7b:cf:31:40:7d:b6:09:bc:53:34:9d:b0:5d:a3:d5:3c:
         fd:92:b1:6a:16:18:ae:f8:9c:ec:40:25:6c:fd:1f:95:40:f3:
         8f:0a:33:f4:e6:89:27:c0:c0:fc:51:18:12:cd:88:47:9a:ca:
         d7:b2:fd:4e:24:22:b2:19:82:fd:af:db:8b:c6:02:46:7b:3c:
         7a:c2:9b:19:c2:37:1f:d0:5b:41:05:25:8d:61:8c:67:09:45:
         33:3d:e7:fe:2d:9f:53:4d:21:11:d4:e7:da:7e:a9:c1:59:d6:
         ba:12:71:da:3a:66:3d:36:34:df:7f:a8:02:f3:6c:5f:d3:3e:
         5a:1d:20:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:41:29 2025 by rpki-client