Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/dd9049ef-69d3-3c85-9ed9-4895494d47a6.roa
File:                     dd9049ef-69d3-3c85-9ed9-4895494d47a6.roa (raw, json)
Hash identifier:          b4jG6BCw8/hSvxojkmU5kAOQqlvO+SRemcw2XPoZl6w=
Subject key identifier:   E6:D6:EB:74:0B:1C:90:B0:48:9F:A0:D7:51:49:34:E2:C7:54:0F:CD
Certificate issuer:       /CN=219560ff-1a32-4424-9e54-f95df54ecc84
Certificate serial:       010D0C9F43285849CA16007161C8D3CCAD3AC380
Authority key identifier: B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/dd9049ef-69d3-3c85-9ed9-4895494d47a6.roa
Signing time:             Thu 08 May 2025 22:11:27 +0000
ROA not before:           Thu 08 May 2025 22:11:27 +0000
ROA not after:            Wed 06 Aug 2025 22:11:27 +0000
asID:                     16509
IP address blocks:        2607:f5f0:1fc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ca:16:00:71:61:c8:d3:cc:ad:3a:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219560ff-1a32-4424-9e54-f95df54ecc84
        Validity
            Not Before: May  8 22:11:27 2025 GMT
            Not After : Aug  6 22:11:27 2025 GMT
        Subject: CN=32c310a9-c3b7-42d4-b4d4-7b800d4d07d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:73:41:bd:ac:4e:40:45:c9:7d:86:9d:e7:ae:
                    fe:88:db:4d:77:09:f5:ea:5d:09:e2:3a:c5:99:9a:
                    66:2d:b3:95:2d:31:cb:06:47:d8:db:64:94:6c:0e:
                    43:0c:41:93:1b:43:fd:85:26:05:98:df:2a:cc:96:
                    49:73:4f:54:b8:b5:71:0a:6c:40:a6:98:86:23:95:
                    31:df:13:28:6b:b0:29:db:31:6f:d2:d1:f5:aa:9b:
                    b2:3c:04:31:02:de:38:96:2d:e6:db:1c:4c:20:a2:
                    79:cc:ce:5a:07:ed:14:45:fe:42:e6:a5:97:c4:16:
                    2d:34:77:46:b7:5c:9c:d1:6d:fe:1f:84:01:40:0e:
                    30:97:04:36:25:9c:ec:63:30:76:6a:b6:47:22:42:
                    9d:3e:3b:c8:50:11:3a:d7:ce:c6:e3:b2:3e:1f:99:
                    07:a5:ff:08:82:c9:ed:56:ed:d8:8c:e6:45:04:95:
                    eb:15:e1:26:ee:e4:e5:5b:90:bc:12:a7:9f:6a:5f:
                    9e:9b:49:43:76:48:f0:03:84:c0:de:19:ef:eb:aa:
                    46:4d:a5:69:63:e0:8b:e0:3e:20:b1:e2:f9:05:cb:
                    e0:e6:32:68:49:c2:bf:2a:00:d3:0c:18:eb:fd:8e:
                    cd:d3:17:a3:7d:aa:61:d5:f1:54:08:1d:04:d5:77:
                    59:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D6:EB:74:0B:1C:90:B0:48:9F:A0:D7:51:49:34:E2:C7:54:0F:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/dd9049ef-69d3-3c85-9ed9-4895494d47a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl

            X509v3 Authority Key Identifier:
                keyid:B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5f0:1fc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d5:fa:39:6a:6b:85:37:fc:da:bb:a3:e9:ab:bf:85:c0:9d:
         6a:f0:fe:17:bf:30:4d:b5:47:6b:39:aa:06:f8:c9:1d:7d:a3:
         93:a6:57:1a:1f:ff:ea:86:34:d7:59:19:a3:5f:44:07:53:6c:
         0a:2a:a7:aa:a3:0e:c6:60:07:df:00:db:9a:2b:59:9b:3f:62:
         e3:f7:9a:ff:04:05:d3:51:7a:8f:39:8c:81:51:23:76:d1:4d:
         9e:c0:d9:74:1b:69:d4:2b:b6:d4:0b:d0:bc:7f:df:9e:a4:4f:
         2f:75:32:7f:fa:be:37:66:51:a6:10:25:9b:e1:91:f3:42:89:
         19:5b:9d:3d:76:b1:be:5b:d3:25:a8:44:0e:13:86:e4:31:04:
         f0:5c:70:9f:3a:4a:45:24:e1:0e:3d:b0:85:97:e6:31:ef:72:
         7c:f1:8d:63:a0:96:93:e9:b4:de:ad:c6:ab:7a:dd:26:53:38:
         82:ae:47:d5:e4:1a:20:bd:fd:a6:09:4a:a9:a8:7d:59:f9:a3:
         a6:51:56:ca:45:33:8b:3c:bd:09:70:4b:32:02:99:31:6f:25:
         09:ff:fc:97:64:d3:ce:99:01:c7:8e:5f:9d:33:55:14:67:fb:
         fe:e3:82:00:d8:12:56:fb:14:cb:b1:3e:ec:71:0b:f2:2f:1e:
         20:c1:64:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:40:35 2025 by rpki-client