Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e76d6c5f-6180-4c10-9515-ca56e9332d2d/b1557639-9c23-3a70-95a5-f083525cbccc.roa
File:                     b1557639-9c23-3a70-95a5-f083525cbccc.roa (raw, json)
Hash identifier:          YaEyo9Kvug5RNok81/0rZ7L9EdmAsZIxXysWV/sGtYc=
Subject key identifier:   87:7D:FE:D7:63:B2:30:FC:1C:18:B0:77:99:0A:DF:C1:47:89:45:26
Certificate issuer:       /CN=e76d6c5f-6180-4c10-9515-ca56e9332d2d
Certificate serial:       010D0C9F4328584A1AC4C08669AC5346DDD2E900
Authority key identifier: 52:D7:69:79:8D:47:EE:72:59:78:1F:B7:C3:30:9D:03:EB:F7:B6:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e76d6c5f-6180-4c10-9515-ca56e9332d2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e76d6c5f-6180-4c10-9515-ca56e9332d2d/b1557639-9c23-3a70-95a5-f083525cbccc.roa
Signing time:             Fri 06 Jun 2025 19:48:13 +0000
ROA not before:           Fri 06 Jun 2025 19:48:13 +0000
ROA not after:            Thu 04 Sep 2025 19:48:13 +0000
asID:                     396982
IP address blocks:        2620:d8:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e76d6c5f-6180-4c10-9515-ca56e9332d2d/e76d6c5f-6180-4c10-9515-ca56e9332d2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e76d6c5f-6180-4c10-9515-ca56e9332d2d/e76d6c5f-6180-4c10-9515-ca56e9332d2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e76d6c5f-6180-4c10-9515-ca56e9332d2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1a:c4:c0:86:69:ac:53:46:dd:d2:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76d6c5f-6180-4c10-9515-ca56e9332d2d
        Validity
            Not Before: Jun  6 19:48:13 2025 GMT
            Not After : Sep  4 19:48:13 2025 GMT
        Subject: CN=7901ee5c-61d0-470e-8388-54df0c74730e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:6e:a7:a7:35:bd:54:4f:5e:22:33:85:12:
                    10:7f:14:5a:5c:d6:29:b3:0b:f5:a1:aa:0b:1b:57:
                    79:38:17:bb:43:fd:4f:85:ed:8e:d5:f3:b7:5d:02:
                    73:de:90:92:42:0c:63:8b:9d:b8:ff:58:d4:19:06:
                    7c:16:22:f6:34:80:ca:00:b7:54:4e:27:ad:32:69:
                    04:8f:e6:f9:4a:a7:e6:14:f9:c5:b2:8a:ab:75:42:
                    38:3c:50:b6:61:0d:bd:56:5d:2b:53:b6:7d:b8:bd:
                    df:ee:2c:6a:12:92:92:0f:a8:11:2b:13:8d:bb:03:
                    ea:06:53:db:f1:3c:e7:12:90:4d:84:56:5b:72:49:
                    a1:79:2e:d5:e6:46:e3:06:d6:be:72:82:9e:aa:48:
                    bd:cb:19:e7:87:de:be:c3:c7:48:63:54:c7:79:66:
                    fa:2a:75:f3:32:6b:83:ca:96:7d:43:2d:18:ff:20:
                    f8:98:63:79:e3:53:97:33:f8:6c:fd:07:1f:94:54:
                    77:b8:5c:01:4f:64:3b:1e:61:b2:69:2e:7f:29:6c:
                    53:49:83:a7:6b:bd:76:45:66:f2:56:97:46:b5:51:
                    a7:91:14:b5:f0:5a:9d:a3:c0:1d:93:c6:5a:13:4c:
                    6a:f3:58:ed:9b:de:0c:0b:58:09:ee:8f:59:fc:67:
                    f2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7D:FE:D7:63:B2:30:FC:1C:18:B0:77:99:0A:DF:C1:47:89:45:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e76d6c5f-6180-4c10-9515-ca56e9332d2d/b1557639-9c23-3a70-95a5-f083525cbccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e76d6c5f-6180-4c10-9515-ca56e9332d2d/e76d6c5f-6180-4c10-9515-ca56e9332d2d.crl

            X509v3 Authority Key Identifier:
                keyid:52:D7:69:79:8D:47:EE:72:59:78:1F:B7:C3:30:9D:03:EB:F7:B6:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e76d6c5f-6180-4c10-9515-ca56e9332d2d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:d8:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:6d:ef:56:7a:ca:53:fd:27:0c:cf:2a:ea:0d:37:60:81:c3:
         29:ca:bd:0a:23:23:a7:e6:49:79:36:73:86:de:57:3d:76:1f:
         cb:bc:71:b6:64:2b:54:dd:ea:45:83:0a:d2:84:7d:c4:bf:ef:
         9e:e0:cf:00:24:41:52:c0:97:da:26:cb:db:74:41:b5:e2:84:
         a5:af:3a:40:4b:0f:6e:c0:95:82:79:86:9e:90:f6:d3:c2:7d:
         47:c9:aa:96:70:a6:42:73:a7:30:8d:8c:5f:e7:aa:b0:7e:37:
         1a:11:36:66:72:46:1b:a5:6c:60:67:96:93:8e:5d:c6:42:9d:
         f0:42:85:c8:c7:b2:30:b1:35:6b:90:0e:f6:84:39:ae:94:4e:
         99:0a:5e:68:a6:7c:9b:d9:a0:81:6e:b2:3b:cc:dd:8c:14:78:
         b4:a7:3d:4d:84:8a:cd:9f:58:d8:3a:e5:62:ee:cc:60:6f:27:
         92:7a:7d:c5:5e:b3:89:8e:0e:8d:6d:96:6b:a9:95:f1:57:ba:
         fe:0e:d9:12:37:68:ee:37:1c:db:98:0e:bc:4a:a7:15:f2:da:
         3a:38:99:2b:62:ce:7b:23:29:ad:56:5f:15:90:30:37:dc:79:
         b2:fc:6c:22:95:ee:88:1f:c2:56:31:b2:c4:5d:5c:02:a7:e8:
         07:77:52:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:46:46 2025 by rpki-client