Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/35c6001a-b4fa-378a-ac14-5506718c4e2b.roa
File:                     35c6001a-b4fa-378a-ac14-5506718c4e2b.roa (raw, json)
Hash identifier:          GzlA95UPYdJbMiCLV3iBHvERLRcUJJRFh/70dzj+RTo=
Subject key identifier:   6B:1D:B1:D5:F6:31:4E:CC:E2:27:9B:82:01:26:8F:F0:F7:8F:8C:37
Certificate issuer:       /CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
Certificate serial:       010D0C9F43285849EA85151D5B07D0777C929ED0
Authority key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/35c6001a-b4fa-378a-ac14-5506718c4e2b.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     16509
IP address blocks:        2620:121:5080::/43 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:15:1d:5b:07:d0:77:7c:92:9e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=c3ca4749-e307-4143-8280-cd116aad7591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6e:e4:4a:6f:76:dd:24:fe:19:f2:97:ab:d0:
                    92:dc:04:b2:80:a3:db:8d:27:f4:0f:2d:67:d1:57:
                    72:31:4e:1c:24:32:7c:79:79:ff:ae:c5:93:ed:f0:
                    a4:71:58:25:b6:e5:5b:ac:c4:26:fd:b9:c6:f6:86:
                    32:70:61:f8:22:05:2f:b7:ee:a9:de:33:be:77:0f:
                    dd:4c:6e:91:81:7e:82:23:38:67:70:ee:d0:19:fc:
                    1d:b4:61:5b:f6:19:0b:f9:54:eb:b8:c6:34:5f:bc:
                    84:ce:99:d1:26:46:ba:3c:9c:9f:b4:65:9d:9e:4d:
                    8c:83:00:c5:e5:79:f8:b2:ee:3e:d7:95:8e:18:39:
                    ac:4a:6a:ec:6f:14:84:22:da:a8:da:99:f6:b9:49:
                    20:08:9f:e8:35:51:e6:92:c2:8a:65:c2:36:bd:8f:
                    7c:71:56:97:aa:50:05:5f:99:2b:38:17:35:40:6c:
                    9b:d0:cc:45:b6:c4:14:11:0a:33:30:65:01:2c:58:
                    b9:65:1c:70:0a:44:15:d2:88:8e:d9:8c:af:31:17:
                    bb:17:a6:d1:77:1c:f0:71:cf:37:d4:20:22:fe:ed:
                    ac:b3:3a:35:64:6b:a8:0a:ff:28:f4:6b:57:f2:b8:
                    2f:a9:99:31:c6:0c:19:35:37:83:c4:31:24:da:d0:
                    b6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1D:B1:D5:F6:31:4E:CC:E2:27:9B:82:01:26:8F:F0:F7:8F:8C:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/35c6001a-b4fa-378a-ac14-5506718c4e2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.crl

            X509v3 Authority Key Identifier:
                keyid:5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:121:5080::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ee:de:78:a4:92:d3:22:21:50:c7:03:d8:58:db:b7:c0:b0:
         49:08:8e:ae:de:41:4b:93:e8:ee:ad:2c:ab:77:63:5f:0c:60:
         75:6a:7b:64:69:7b:d6:13:17:4f:30:36:79:43:47:f4:ca:37:
         ec:13:b7:e4:dd:6b:95:0c:71:ff:73:39:64:9a:38:c1:1e:10:
         58:55:0a:94:c3:a9:12:7f:53:36:6a:a9:ba:8e:e6:93:89:83:
         d0:d1:8b:85:68:37:00:d3:18:37:2e:cc:6c:08:53:50:59:c1:
         51:f1:0d:26:79:35:98:4f:28:1b:da:28:fb:2d:57:fb:6b:fc:
         9e:14:e1:a4:85:5b:8e:22:eb:9a:a2:39:b8:4d:34:b7:b6:a1:
         c1:b9:4e:99:c4:21:2f:21:97:66:72:22:ad:ff:c6:d9:f7:40:
         c8:f5:ee:fc:c7:e3:af:e9:78:3d:56:91:4e:26:7c:ff:08:93:
         a0:87:f2:56:6e:aa:de:81:fb:f0:7f:d7:1b:89:e3:7b:ac:33:
         e4:81:64:9b:7b:6e:f2:2b:c4:f7:72:f3:09:a9:b4:38:6c:ba:
         a7:7f:81:28:83:6d:db:5e:f7:d0:0f:7b:b7:5c:7d:64:43:23:
         78:03:8e:45:f7:95:9d:88:d4:7e:a5:74:1c:a8:90:68:c0:f1:
         a1:66:51:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:21:11 2025 by rpki-client