Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/15cf95af-7f55-3f54-a1a1-7542dff2cfda.roa
File:                     15cf95af-7f55-3f54-a1a1-7542dff2cfda.roa (raw, json)
Hash identifier:          IlQ6fTVORJoka7JnHVGRXB3g1HqX8QRz+u7mYca/MZ8=
Subject key identifier:   FB:0D:1C:1D:28:76:51:91:66:85:35:87:0B:55:98:CD:A0:83:9A:B2
Certificate issuer:       /CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
Certificate serial:       010D0C9F4328584A0C054AD3D01C9A8125EA9A00
Authority key identifier: DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/15cf95af-7f55-3f54-a1a1-7542dff2cfda.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     11039
IP address blocks:        2606:69c0:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:4a:d3:d0:1c:9a:81:25:ea:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=da230e1a-43b6-4f7f-aaf1-9f2f8b4718f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:27:46:17:b2:5a:93:23:ff:bc:d8:df:99:fd:
                    b6:7d:e0:99:26:43:13:7d:f7:d8:a8:cc:27:62:df:
                    5d:0d:0f:c4:79:c5:be:00:12:3a:37:4d:ac:5a:09:
                    32:73:8d:ee:bc:4a:e6:02:f7:a1:87:62:6b:49:e0:
                    aa:99:10:3f:d6:e8:5d:d3:9d:ed:62:3e:1b:6d:7d:
                    6f:78:d4:a2:b6:a7:a7:1f:44:67:c7:fc:74:9f:e0:
                    13:17:ac:53:3e:91:da:00:15:ae:e5:5b:35:a7:ce:
                    05:e3:8b:31:5c:5a:d1:8b:ff:0c:ff:5f:e9:4f:62:
                    4a:1f:89:c7:6f:59:cf:e5:7e:a2:00:0f:c5:d2:b9:
                    26:72:7f:92:ef:4d:04:59:05:21:57:e4:97:4d:97:
                    bc:da:97:0d:c4:35:eb:84:62:7c:a0:1e:7d:ea:9b:
                    c5:2e:db:74:e7:f8:bf:08:68:6c:7f:d0:6d:5d:76:
                    88:6b:aa:d3:4b:21:cb:5e:46:5c:98:1c:e8:08:1f:
                    85:1d:51:2f:af:c0:0a:dc:c9:b9:ca:f0:0a:43:e8:
                    88:1d:16:a0:bc:e2:e6:3a:a4:c5:54:26:b9:82:d6:
                    d0:6f:67:41:9f:bc:24:58:d6:6d:66:49:65:12:72:
                    f1:69:72:12:38:96:cb:55:00:2a:9f:8d:a4:95:f8:
                    13:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0D:1C:1D:28:76:51:91:66:85:35:87:0B:55:98:CD:A0:83:9A:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/15cf95af-7f55-3f54-a1a1-7542dff2cfda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl

            X509v3 Authority Key Identifier:
                keyid:DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:69c0:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ec:07:2d:c9:f4:fe:66:cd:26:42:ce:5b:38:57:81:7a:5c:
         6f:61:3d:35:50:ba:d0:4b:68:91:18:6d:ba:7f:db:00:41:a8:
         82:82:98:15:0c:4a:e1:8c:68:69:53:ee:d7:cc:fa:cc:b2:3f:
         e1:b3:34:48:84:23:76:f8:97:3b:ad:d4:eb:de:61:7f:fa:0b:
         87:5e:90:10:c9:c1:77:29:1a:83:b8:aa:f3:ab:4a:f0:4c:11:
         c4:80:45:5a:d9:94:c0:99:a6:0d:d4:af:5e:9a:f3:ff:18:41:
         fd:83:ab:1c:1e:8f:84:36:87:15:3f:f5:20:6d:e4:92:ef:1b:
         5e:30:bc:72:8c:3a:67:6d:a3:25:01:da:4d:74:f6:b8:3d:a3:
         06:bd:f5:7a:90:5b:37:32:6b:2f:5b:8c:d5:ac:d8:a0:bf:cf:
         f6:62:74:07:1c:a6:10:63:9a:ce:7e:70:a1:87:f3:89:71:2b:
         77:ce:8c:ee:07:8f:13:15:5c:6f:70:73:e9:ad:e8:8d:29:99:
         0d:92:f1:52:02:ad:f6:c0:62:c8:36:61:cd:bf:3a:52:49:8b:
         fe:d3:21:06:33:28:04:c3:7d:e0:54:f8:ca:2b:f6:87:64:a3:
         66:e2:6f:62:99:0d:a3:b7:36:65:62:40:40:3a:1d:ac:66:be:
         7c:33:41:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:51:34 2025 by rpki-client