Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e1217593-b6d4-3d57-b503-3d3c536b13f3.roa
File:                     e1217593-b6d4-3d57-b503-3d3c536b13f3.roa (raw, json)
Hash identifier:          v+/qGFCkctgwEukK8m3u3GE/eo5ThTV+DC54AaRh91w=
Subject key identifier:   5A:D2:D1:9F:ED:90:BD:F9:CB:17:EF:85:79:92:EE:ED:64:B8:79:04
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285849DA817F494A76ED7586868C00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e1217593-b6d4-3d57-b503-3d3c536b13f3.roa
Signing time:             Wed 14 May 2025 19:20:58 +0000
ROA not before:           Wed 14 May 2025 19:20:58 +0000
ROA not after:            Tue 12 Aug 2025 19:20:58 +0000
asID:                     396356
IP address blocks:        2604:c980:5000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:da:81:7f:49:4a:76:ed:75:86:86:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: May 14 19:20:58 2025 GMT
            Not After : Aug 12 19:20:58 2025 GMT
        Subject: CN=61f88b74-ee8b-4ddd-94ce-e5e4c0ea046f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:3e:09:8d:45:c0:e3:87:d9:70:d9:2b:69:
                    e0:db:20:f4:f6:76:35:27:73:4e:2e:47:e0:d8:1f:
                    b4:f0:8c:15:f3:4a:d7:98:d8:44:38:ac:c4:51:7f:
                    8b:d9:5d:ae:db:1c:3a:b8:3f:a5:8e:2b:a8:b8:bd:
                    06:43:b3:3a:67:c0:17:83:66:76:5f:2b:8b:a6:57:
                    3b:7f:c4:db:06:38:c2:b2:fc:3b:db:9b:d2:33:5a:
                    ea:5d:94:f4:1f:65:7b:73:a5:dd:3f:71:88:d6:15:
                    32:74:b6:30:5b:2e:c5:73:74:66:43:44:6d:65:f2:
                    dc:b9:81:e2:32:ec:6f:9c:1c:c8:78:f5:39:b9:75:
                    b3:de:33:fe:ba:d1:c3:45:bf:5b:2b:97:8b:46:72:
                    ec:8b:14:0b:23:32:91:f7:71:15:67:a4:36:a1:84:
                    d8:02:97:e2:b6:64:82:09:64:92:fb:7d:1c:20:ad:
                    26:15:69:18:1d:2b:0d:45:1b:a4:89:80:bb:1c:c8:
                    1a:39:90:53:ca:a7:b6:fa:ab:72:61:0d:0f:af:1d:
                    44:a0:70:c6:fe:33:00:4c:04:6b:cd:f9:c1:f8:bd:
                    df:3f:30:2b:4a:33:7f:df:f4:e6:a5:2e:2c:e2:5b:
                    b9:00:11:3b:97:28:80:ed:60:f5:ab:c8:8c:31:65:
                    73:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D2:D1:9F:ED:90:BD:F9:CB:17:EF:85:79:92:EE:ED:64:B8:79:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e1217593-b6d4-3d57-b503-3d3c536b13f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:5000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:5e:1d:0d:ba:e2:63:83:77:cc:e6:59:73:6a:4f:a0:d1:54:
         7d:a9:d2:53:48:35:67:b8:85:f9:fb:66:7b:07:7a:24:92:56:
         51:18:45:f0:c1:6f:fd:e8:42:85:ba:be:4f:f2:6e:29:98:12:
         d4:0c:8b:3b:7a:ad:ec:c9:20:8e:cf:ea:8a:23:7f:d5:5b:78:
         24:1d:bd:07:75:2c:f2:71:02:c8:e1:f7:7c:11:a9:96:15:6c:
         b2:ac:c7:02:13:95:6f:0b:d0:f3:bf:f2:5c:7e:25:81:ed:48:
         ae:30:fc:9a:7f:ce:5f:98:ac:2c:5e:4e:33:ad:c7:7a:9b:58:
         60:86:76:91:13:ef:af:66:df:c9:94:cb:14:b7:2e:61:d6:ff:
         1c:b7:9e:c1:0a:76:0a:10:04:dd:1c:9b:a8:41:8a:4e:95:09:
         f3:6a:e0:65:65:89:c8:4e:00:a3:92:ef:ef:48:7d:68:56:24:
         4e:d3:c6:82:22:5b:36:f5:16:a0:d9:c9:93:21:ab:2b:c1:db:
         ef:3b:55:ff:28:71:a2:94:75:46:d3:8e:15:5b:95:f5:97:87:
         0f:6f:01:71:4c:42:2d:2c:0c:57:f6:e3:30:ab:07:1f:1f:bd:
         2a:36:ac:ec:f9:b8:bc:7e:9b:a7:ec:e8:56:30:dd:16:ce:1c:
         0d:80:20:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:49:34 2025 by rpki-client