Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa
File:                     a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa (raw, json)
Hash identifier:          QQK+p7kOd769FiwtfP3A4hmsM7n9Toit07jJF/Tgdws=
Subject key identifier:   72:23:AA:C8:72:03:0C:3D:B7:B5:9A:BB:0E:D3:78:F1:16:0F:69:32
Certificate issuer:       /CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26
Certificate serial:       010D0C9F4328584A43DB00AA990B90A7D6EDE380
Authority key identifier: 74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     54098
IP address blocks:        2607:2740::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:00:aa:99:0b:90:a7:d6:ed:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=3e8303de-6a06-4c01-a4ac-4e035981d510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c0:6a:83:dd:b5:9a:e5:ee:62:2d:23:3a:d8:
                    48:b4:0d:71:78:b8:cb:d7:73:08:f6:11:2c:22:a5:
                    42:5b:c0:f2:da:e2:a7:bf:62:57:9f:6f:3d:33:f9:
                    f0:8b:e9:5a:1a:91:8b:64:24:a4:92:6b:bd:bd:db:
                    da:44:15:3e:f2:be:ff:08:29:ca:12:2f:79:b3:91:
                    9c:1d:ec:98:4a:a2:0b:30:6c:c4:fc:ec:c9:db:3b:
                    0f:a0:09:18:b8:1a:5a:3d:74:f1:d3:28:bb:d5:18:
                    60:68:63:b1:18:ee:6a:9b:c6:eb:c6:44:0f:83:74:
                    05:7f:8a:81:64:21:44:cc:9a:cf:d6:57:09:ad:65:
                    99:2f:7e:98:64:b3:d7:0f:15:4e:96:57:ad:0f:bb:
                    90:0e:53:5a:98:c9:f9:85:76:c1:e1:d5:f5:d6:37:
                    6e:c9:e8:c0:2d:e9:ca:9c:d7:f5:b3:6f:bc:39:75:
                    13:9a:41:df:1a:74:7b:37:65:63:28:25:f8:0d:44:
                    d2:4f:8a:80:62:bb:8c:7b:10:3b:aa:45:c0:0b:36:
                    f2:52:ae:de:51:19:1a:f7:0e:b9:b1:41:46:8d:ca:
                    ba:ae:e1:38:c5:06:bc:1f:33:86:8b:b1:e3:d2:41:
                    76:7a:9a:1a:49:a5:e4:9c:a3:ba:a5:4c:bb:3c:04:
                    1f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:23:AA:C8:72:03:0C:3D:B7:B5:9A:BB:0E:D3:78:F1:16:0F:69:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/a8bce116-f9c1-3ab1-a05b-f6475a01916a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.crl

            X509v3 Authority Key Identifier:
                keyid:74:72:3E:BF:C2:5D:67:28:C0:C1:10:60:A7:68:80:8F:9E:BA:5C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a86eb3e-d142-4cb9-ad4d-d7f60bac2d26.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:dd:99:a9:9e:a0:a3:d4:52:06:95:6f:24:05:eb:48:b9:a3:
         83:20:e3:29:3f:48:98:43:6e:13:60:b8:b5:fb:4e:b2:fc:b3:
         f1:02:8f:71:22:0a:34:a9:83:f2:df:05:5c:c6:bf:45:6b:a6:
         59:96:5f:e0:2e:a8:d7:f9:a0:f1:e7:45:0e:5a:da:61:e4:7f:
         47:cd:94:35:96:d4:99:fc:32:49:66:f9:92:a4:1d:ca:5c:21:
         d2:56:d9:e9:7c:dc:e6:67:84:82:df:62:c4:78:a7:31:2e:a4:
         8c:e2:e7:18:d9:0c:39:58:de:eb:9d:b3:94:34:44:9d:e8:6f:
         a3:38:ed:4d:22:d7:60:94:1f:71:f7:94:f6:fd:a1:f1:5e:6b:
         23:65:f4:3f:75:e9:65:15:3b:78:3a:41:21:42:d2:30:43:c1:
         f9:7b:0f:5d:c0:74:e0:f6:98:30:28:1c:b0:27:40:6c:99:08:
         06:30:fd:f6:9c:8b:c0:77:31:e2:15:ad:70:26:41:07:92:df:
         90:7f:9c:97:9b:b5:e0:cf:42:9c:73:8b:a0:6a:84:e0:a0:47:
         91:66:dd:e4:47:92:23:89:7a:4d:51:d1:19:65:5e:d8:c1:3a:
         c8:dd:c7:5e:34:f6:0a:30:b5:2c:64:8f:40:b0:b6:ae:b3:a7:
         75:6a:3b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:18:46 2025 by rpki-client