Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/b1e75ac2-bce3-37cf-ae4d-e7f373871433.roa
File:                     b1e75ac2-bce3-37cf-ae4d-e7f373871433.roa (raw, json)
Hash identifier:          aSq87CoHnDMM4ySFvetJppQBbAd7T35qdkSeyDN55qQ=
Subject key identifier:   60:78:50:EC:9D:DA:FE:AA:B6:56:D9:B6:DD:5C:61:12:D9:DB:F6:7F
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F4328584A1B5FFB946D717710DDD01F00
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/b1e75ac2-bce3-37cf-ae4d-e7f373871433.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        2606:9c40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:fb:94:6d:71:77:10:dd:d0:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=d568140b-3905-44e8-aba3-77f397b92d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6a:ea:fd:ad:3c:20:c2:cf:d7:ab:82:d5:33:
                    ae:00:6f:53:78:ab:78:55:34:c8:f9:2f:b7:5f:71:
                    dc:d0:e6:5f:fd:42:4d:4b:66:72:8b:1f:2e:69:32:
                    3a:1c:05:60:27:0a:d4:3f:94:06:d3:28:79:48:ff:
                    92:fe:bc:aa:62:76:cd:83:d7:33:32:25:a7:a1:c5:
                    ba:f2:21:af:37:5c:5d:64:02:a0:15:ab:f1:9c:a3:
                    a1:b1:87:61:72:35:b2:74:bf:87:6e:b7:66:c2:2f:
                    1a:15:6d:d2:29:ce:50:9a:69:57:0f:09:d8:1d:78:
                    af:15:c1:a6:79:9f:cc:23:75:7d:4f:53:56:4f:ea:
                    c0:bb:9f:44:25:ff:09:b2:65:7c:a7:59:cf:bb:4d:
                    8f:95:85:6d:13:a8:69:1f:0c:a4:ef:fc:8e:91:98:
                    05:29:3c:2c:5e:2e:dd:c4:a6:06:4c:3d:7e:a0:cd:
                    7b:e6:f6:21:b8:ff:24:dd:44:93:c0:06:f6:f1:50:
                    2f:e5:fd:b2:af:9a:16:b1:16:52:63:34:03:a5:9d:
                    d9:45:db:64:7c:f9:8b:55:23:fe:a8:4a:fe:c8:22:
                    6d:31:6f:b0:fd:89:e6:f6:39:5a:f6:e1:11:eb:c1:
                    1c:35:ba:f8:d6:7c:68:e3:f9:15:85:0e:2a:91:2a:
                    24:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:78:50:EC:9D:DA:FE:AA:B6:56:D9:B6:DD:5C:61:12:D9:DB:F6:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/b1e75ac2-bce3-37cf-ae4d-e7f373871433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:3b:db:c5:94:c1:15:43:86:1d:cd:b3:75:2f:16:b0:6f:68:
         b8:42:13:cc:fc:c8:cc:d9:f7:7b:49:40:70:03:7b:cd:1d:0f:
         4d:13:ec:28:e5:91:34:d3:bf:4e:c7:09:98:aa:f6:1d:e1:80:
         bd:d4:19:fa:c9:6c:2a:ce:fc:11:59:d8:87:61:15:84:ce:9a:
         32:57:6b:ee:b0:01:2f:c7:82:d7:d5:bc:c4:de:c5:83:80:25:
         b9:2c:57:ed:98:aa:ee:67:a0:35:4b:32:50:34:10:a0:0d:26:
         dd:08:08:82:d3:aa:97:b4:2b:2a:19:78:95:ee:20:24:21:b0:
         fc:81:82:ef:5e:69:cf:3f:73:9a:fe:c7:bc:a8:8e:0c:84:dc:
         18:7e:16:35:82:54:b5:a1:51:c0:33:e3:68:d2:6e:f5:96:0e:
         67:89:52:36:47:50:4c:54:82:0b:fb:52:6f:76:51:86:1c:94:
         12:08:4f:21:d5:2b:18:ae:4d:07:7b:fa:f0:0b:df:e6:50:f7:
         8c:ea:93:77:e5:64:cc:a6:35:ef:96:57:38:e7:98:c4:9c:66:
         16:23:18:d8:fc:30:c9:38:1d:b8:a8:c4:de:15:a0:3e:b0:38:
         12:d7:d9:c9:cb:47:e8:2c:cf:e1:f5:c3:f2:b5:a1:3a:60:68:
         63:0b:53:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:26 2025 by rpki-client