Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/cd7bbf4a-f326-3337-957b-4b50b07568e4.roa
File:                     cd7bbf4a-f326-3337-957b-4b50b07568e4.roa (raw, json)
Hash identifier:          86b+NhTwnh/GKVipUsLXKJQ1D4XIz2/fsxwS/+6qbyE=
Subject key identifier:   A5:73:70:79:5C:14:C9:47:37:12:F7:45:FB:A1:D4:10:21:7A:BC:00
Certificate issuer:       /CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
Certificate serial:       010D0C9F4328584A0C054AEB1EBFEFB3F682FE60
Authority key identifier: DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/cd7bbf4a-f326-3337-957b-4b50b07568e4.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     11039
IP address blocks:        2606:69c0:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:4a:eb:1e:bf:ef:b3:f6:82:fe:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=74b3d7ee-4dc5-4a1c-9c33-5cabd84695b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:58:8a:58:87:52:e4:15:eb:bf:30:1f:cf:f7:
                    aa:de:2a:a6:3a:c6:ad:2a:ba:f8:23:4c:53:7f:05:
                    a9:78:af:ff:03:62:ca:dc:95:31:5f:15:c5:9b:f6:
                    4d:4d:78:35:40:ab:ae:29:a2:bc:97:1c:8e:d1:18:
                    f9:41:68:e0:87:b4:98:3e:a1:9f:7e:2b:ec:15:5d:
                    9a:b7:09:f6:2f:d3:43:50:7c:0e:8c:17:19:7b:0e:
                    76:31:6a:b4:24:a9:f6:26:b1:23:84:45:74:03:ad:
                    18:fa:16:12:f9:53:02:10:16:1f:16:55:b9:5d:4c:
                    c3:45:ec:19:b0:9f:cd:d3:ac:12:63:ad:a9:21:0e:
                    83:b2:0c:bb:67:e7:5f:2b:6b:6e:b2:95:01:11:9c:
                    f6:c5:40:ca:1e:38:40:e4:1f:af:8b:ca:c2:eb:8d:
                    f4:6d:96:ac:b7:82:56:80:06:1c:67:22:df:40:c3:
                    d6:9f:73:a4:8e:1f:2f:91:59:26:ef:00:14:a1:d1:
                    2a:8a:07:32:56:0c:f3:2b:49:fc:cc:6b:92:b6:d4:
                    4c:7e:25:0a:67:83:bd:a6:5a:67:f9:3b:cd:13:da:
                    33:09:0b:24:2d:71:09:1d:59:ac:c6:1e:0e:e4:02:
                    7a:4f:ad:b1:69:96:07:26:84:3b:0a:96:80:58:bc:
                    28:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:73:70:79:5C:14:C9:47:37:12:F7:45:FB:A1:D4:10:21:7A:BC:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/cd7bbf4a-f326-3337-957b-4b50b07568e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl

            X509v3 Authority Key Identifier:
                keyid:DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:69c0:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:fd:9a:1b:3a:2c:d1:16:ee:10:dd:f3:c5:f3:17:d3:b0:9b:
         a8:47:83:21:85:b4:38:0c:26:99:1f:34:62:20:69:1a:50:54:
         1e:61:49:ba:3c:6c:2c:12:39:fa:42:01:14:98:3a:3d:c6:d5:
         98:c9:94:29:0a:a8:28:2b:4b:54:c0:42:97:5b:df:66:3c:74:
         27:75:cd:7f:02:56:0c:26:88:ab:71:2f:36:a5:53:16:50:d8:
         9b:59:3b:6b:2c:90:e6:64:09:78:7d:74:1f:b8:ee:84:56:ff:
         ef:d3:37:72:41:94:39:49:e8:6a:1f:2f:c5:0c:78:ca:3b:cd:
         de:23:a3:49:2b:80:d8:4b:46:32:c8:37:b7:2f:e6:6a:5a:7c:
         e6:85:d6:e1:51:d5:d7:d2:20:2f:c0:c6:04:32:da:41:78:1b:
         a6:ae:40:3c:07:09:1f:99:95:15:5a:23:a8:6c:d9:b8:80:29:
         ff:e0:4b:97:ca:62:44:ba:c4:18:29:14:8c:b0:a8:6e:e6:7a:
         09:43:0d:a3:4b:6b:1a:16:3f:6f:16:d5:dd:b0:ec:49:8f:89:
         b9:32:5a:60:e1:6f:5d:4a:df:d2:06:4a:e3:1f:fc:e1:a0:43:
         c8:f3:44:39:ef:26:4e:b5:5c:40:48:a2:c6:7f:e8:46:23:7f:
         06:6d:bc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:50:12 2025 by rpki-client