Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/7de7db70-a393-3d00-8071-c1e1fb1b4cd5.roa
File:                     7de7db70-a393-3d00-8071-c1e1fb1b4cd5.roa (raw, json)
Hash identifier:          tL4GpGQFx+44MWZHsr9x/3YZP9bVlYH4uoWUG0Xs+2c=
Subject key identifier:   E9:84:ED:F0:03:A3:D0:DA:1D:DC:B9:D8:32:53:84:07:BF:18:CD:C2
Certificate issuer:       /CN=a1a8e018-88f4-4067-935e-ef8e20a553c5
Certificate serial:       010D0C9F4328584A225ABE02D6DC2BE38F58F580
Authority key identifier: 75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/7de7db70-a393-3d00-8071-c1e1fb1b4cd5.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     40701
IP address blocks:        2602:f965:10::/48 maxlen: 48
                          2602:f965:20::/48 maxlen: 48
                          2602:f965:30::/48 maxlen: 48
                          2602:f965:40::/48 maxlen: 48
                          2602:f965:50::/48 maxlen: 48
                          2602:f965:60::/48 maxlen: 48
                          2602:f965:70::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:be:02:d6:dc:2b:e3:8f:58:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a8e018-88f4-4067-935e-ef8e20a553c5
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=800acc40-0027-4147-b282-b604c3c82b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c6:0f:56:e0:8e:30:40:6f:05:a3:c3:87:86:
                    8e:60:3c:81:35:37:97:00:cc:7e:68:c5:f6:67:bf:
                    bd:b5:70:60:53:dc:eb:66:45:15:68:a7:37:93:21:
                    88:48:a4:c7:0a:e1:21:2d:81:11:ed:70:2b:80:61:
                    e7:92:b0:90:77:7c:e4:57:b2:b2:58:f4:79:fe:4e:
                    d7:21:04:a7:a6:07:e0:5f:44:55:2f:04:3f:30:4a:
                    5f:96:12:b4:60:a9:52:df:9e:ea:5a:23:d2:a2:18:
                    b0:d8:08:a9:c9:96:78:aa:da:ea:9e:ab:5d:78:5d:
                    92:0f:69:c7:b5:87:b4:07:5b:45:3b:5f:e6:6d:df:
                    07:c7:b3:a2:d8:ff:fe:37:b9:4a:d9:0e:12:51:d1:
                    68:0e:c5:d5:a9:67:c2:67:ac:47:08:9c:ea:c2:aa:
                    fd:74:ac:74:93:2f:f3:2d:46:6f:b9:bf:47:68:07:
                    7b:be:f1:96:94:a4:60:13:07:8a:bd:81:7a:d0:51:
                    c7:b1:9a:06:ac:bf:31:40:0b:e4:43:4a:cd:45:c1:
                    29:9f:59:93:4e:51:ac:60:aa:02:20:5c:53:ba:ee:
                    d8:ef:48:8a:a7:d1:0a:f0:31:aa:34:1c:bd:86:20:
                    75:15:2c:d6:c4:43:9f:38:3f:b7:b8:8a:da:fb:c4:
                    2e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:84:ED:F0:03:A3:D0:DA:1D:DC:B9:D8:32:53:84:07:BF:18:CD:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/7de7db70-a393-3d00-8071-c1e1fb1b4cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl

            X509v3 Authority Key Identifier:
                keyid:75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f965:10::/48
                  2602:f965:20::/48
                  2602:f965:30::/48
                  2602:f965:40::/48
                  2602:f965:50::/48
                  2602:f965:60::/48
                  2602:f965:70::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:fb:17:0c:0e:a6:43:d2:d7:6b:ab:16:67:62:29:a8:f6:9d:
         4f:e5:70:a3:aa:9e:aa:0c:7d:69:c5:b4:75:2c:68:b0:09:0e:
         f3:97:4c:2e:3c:f4:83:d0:ec:dd:6a:54:a9:1d:c4:ce:09:52:
         cc:38:b6:19:e3:00:e8:73:20:be:37:1d:86:f2:b3:e7:be:40:
         ad:7a:7f:4b:08:fd:27:de:0b:ab:61:b8:9d:bf:1f:0a:71:4c:
         6f:42:9a:cb:f8:cf:26:0f:70:ff:b4:d4:59:f8:f2:37:a9:91:
         a6:07:5f:b2:e4:44:2f:01:24:93:47:a8:b8:2a:f0:4b:ea:e7:
         dd:f5:1c:18:ce:9a:d2:0f:38:70:54:f8:10:88:92:75:06:15:
         d5:27:c1:18:b4:25:10:08:4a:bc:ed:b8:64:af:2a:21:11:ba:
         45:6d:07:9f:16:5f:6a:90:d2:1c:13:4d:ca:43:a8:e8:0e:f0:
         f8:e2:1f:64:f8:0b:3c:64:77:c6:55:72:19:aa:90:de:7e:76:
         46:25:0c:0a:d2:8a:a7:97:f4:de:13:9d:18:a6:11:5e:91:02:
         61:d1:72:5b:18:98:a4:5a:ad:0a:39:a8:b9:81:00:f0:6c:d6:
         5c:4a:29:fe:0d:91:16:b1:1f:7f:91:b7:4a:b4:c0:c9:18:ba:
         36:b1:a6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:56:03 2025 by rpki-client