Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e89e860-604d-322a-984d-184f1f4cdf1e.roa
File:                     6e89e860-604d-322a-984d-184f1f4cdf1e.roa (raw, json)
Hash identifier:          I6ZxNMYUjet+K6z4kBfvYgNw9Jz0JObgKsjdfeiaU3Y=
Subject key identifier:   80:ED:E3:6F:2A:26:2B:5F:9E:FC:DA:52:80:5C:26:D6:E6:96:AC:A4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4ACFA2E8B928409A60480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e89e860-604d-322a-984d-184f1f4cdf1e.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        2603:3011::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:ac:fa:2e:8b:92:84:09:a6:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=d061631e-9fe6-4e28-a8b4-f7b6e06be498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4a:1f:af:aa:99:2b:3a:2c:11:c2:2b:d3:d2:
                    47:e0:b2:34:85:91:87:ef:5e:d0:cf:db:8f:58:2b:
                    bf:0e:6c:86:d3:4b:9e:d2:33:75:0e:a6:50:36:8f:
                    8b:61:5d:80:f3:f5:d9:58:70:f6:f8:4e:25:39:9b:
                    eb:a3:94:a9:a1:f7:1f:f0:df:7e:e4:1f:2a:8f:a2:
                    8c:e8:2e:12:d3:cf:ef:a1:d5:88:75:34:c7:1f:70:
                    bb:8f:bd:93:74:38:e8:62:a2:0b:5b:84:a6:55:dc:
                    98:c9:a4:44:a2:fd:84:99:d6:12:33:34:80:64:e0:
                    7a:fd:26:72:71:3c:bf:49:87:e2:01:aa:72:a5:1f:
                    e3:a3:43:85:5a:5c:a6:1d:8b:fd:96:a1:9a:00:69:
                    01:97:8a:bd:e7:8f:ab:cb:09:d2:8b:8a:de:49:af:
                    27:81:17:cd:1c:34:20:fe:12:21:f5:f1:71:bf:56:
                    84:e3:c0:1d:28:d9:7e:0b:db:73:b9:29:73:ba:97:
                    94:fe:97:ac:8c:fe:d1:79:7e:74:cb:0b:f2:7a:02:
                    06:78:15:18:f2:5f:2a:37:25:d4:31:9d:b4:10:72:
                    b7:ea:cb:1a:7d:8a:fd:28:76:63:1c:48:1c:1d:1a:
                    c4:2d:83:8d:4b:84:5d:b1:87:bf:48:97:f5:63:82:
                    e4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:ED:E3:6F:2A:26:2B:5F:9E:FC:DA:52:80:5C:26:D6:E6:96:AC:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e89e860-604d-322a-984d-184f1f4cdf1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3011::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:9c:d6:31:6a:ba:07:c3:33:a7:bb:ea:50:f3:08:3e:75:2c:
         31:c2:eb:f6:d8:cb:b7:23:18:a0:77:56:60:6f:bc:b4:52:a3:
         85:61:7d:b8:65:aa:a1:f4:20:e1:a1:7c:23:10:dd:5b:17:63:
         30:72:9c:0e:e8:39:7f:72:dd:6b:7e:8b:b8:1e:01:71:06:cb:
         b4:a7:b7:95:f4:f9:7b:ac:17:03:34:3b:14:21:4d:4f:ab:2d:
         14:00:37:92:55:c2:86:11:71:56:dc:d1:ad:ed:15:e5:9b:d9:
         8f:60:a5:3d:90:de:50:2e:69:b2:40:26:13:67:59:76:1b:db:
         e3:f3:fa:f9:cf:9c:5b:72:58:53:e1:ab:94:bb:08:e4:08:91:
         f2:43:18:de:f1:4b:cc:29:3b:33:2b:40:0a:13:f1:3c:5b:14:
         b1:4f:82:9f:4a:a8:84:8e:56:21:15:d5:ad:41:ed:e3:63:1a:
         52:fc:8d:28:b3:ed:ce:a5:88:98:64:37:a5:42:d7:0d:fb:de:
         3f:c4:de:ec:5d:96:90:bf:86:fc:82:2c:41:31:0f:1c:b3:9d:
         20:07:b6:1e:95:45:de:04:3b:15:96:d0:65:ab:dc:9a:8c:16:
         b8:3c:63:35:57:6f:f5:36:89:7b:6a:40:ae:72:44:2a:d8:24:
         b4:ab:44:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:52:55 2025 by rpki-client