Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/1b6464a5-3725-3742-83db-ed28b8df3f78.roa
File:                     1b6464a5-3725-3742-83db-ed28b8df3f78.roa (raw, json)
Hash identifier:          0TKTsLsTfE+IYAaHnspSRxsrKTjCLjO+buObqVBJX4s=
Subject key identifier:   44:24:92:F1:2B:57:C5:D8:FE:12:3F:4C:BB:01:29:F2:D1:3E:ED:19
Certificate issuer:       /CN=0c3cf342-4337-44bf-ac45-d0772ad75854
Certificate serial:       010D0C9F4328584A0C0569507A70F57F7E650880
Authority key identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/1b6464a5-3725-3742-83db-ed28b8df3f78.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     49791
IP address blocks:        2606:2040:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:69:50:7a:70:f5:7f:7e:65:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c3cf342-4337-44bf-ac45-d0772ad75854
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=1cf4e464-23b5-4c31-a9f9-5d7c3b7cd1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:11:9f:9b:98:2f:1b:c2:3c:c1:af:cf:1c:e9:
                    14:f0:ca:d8:0f:b3:f2:cc:25:09:62:10:5a:69:ab:
                    c4:d2:3a:7f:53:b4:14:3f:ba:22:92:ef:77:9f:b2:
                    87:f6:72:f4:24:d0:6f:49:1f:0b:d1:f9:b4:b4:40:
                    38:54:32:44:a9:5c:9f:c9:9e:7a:4d:e4:52:78:b4:
                    05:e6:a7:c3:a3:b4:8b:a8:83:e0:c6:2a:02:de:16:
                    09:c5:fb:25:c0:a9:d9:12:96:f4:9a:f6:b8:23:dc:
                    57:8b:95:43:df:99:78:ad:b0:85:9a:ed:19:02:ef:
                    91:fe:d2:70:f0:d7:06:91:63:d3:ad:13:81:97:49:
                    25:6e:71:34:73:8d:34:ee:db:f5:b1:52:b3:82:06:
                    be:50:9e:fe:ee:88:91:22:3f:41:87:e2:78:40:e9:
                    48:e8:13:29:82:54:06:ec:cb:11:08:02:a6:0d:5d:
                    bc:54:64:99:74:b5:d0:71:33:fa:0b:4a:27:3c:86:
                    a4:f5:6c:2c:7b:09:23:4a:32:b2:d9:33:99:48:52:
                    5d:1b:fa:5d:2b:11:b3:d2:72:5b:52:f1:bc:49:23:
                    f3:4b:52:b4:5e:73:7a:88:93:a7:06:aa:6c:68:45:
                    8c:6f:3d:af:da:82:a2:07:13:0c:b6:dc:09:4c:5b:
                    59:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:24:92:F1:2B:57:C5:D8:FE:12:3F:4C:BB:01:29:F2:D1:3E:ED:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/1b6464a5-3725-3742-83db-ed28b8df3f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl

            X509v3 Authority Key Identifier:
                keyid:33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2040:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:bf:33:28:54:25:57:62:68:eb:19:a6:f5:ed:0a:19:72:51:
         b8:30:7e:89:b8:9c:46:98:54:1a:79:49:e3:12:6b:26:4b:82:
         0e:e1:dc:fd:96:ec:68:4f:d9:5f:85:81:29:6c:d6:e5:fb:4a:
         e6:3a:6c:db:7b:0a:df:1d:cb:63:ee:56:0d:f8:97:64:d0:b7:
         28:2d:14:49:b8:e9:08:12:b0:78:c6:62:fa:74:be:b9:a9:b2:
         73:c7:77:25:1a:dd:c0:64:6f:3c:86:ec:41:4d:57:33:0e:f2:
         a6:62:8d:cf:3e:f4:b8:db:e0:a6:20:a2:27:cc:ca:8a:e9:2b:
         67:7d:01:43:b7:14:51:78:aa:e8:25:31:21:15:f6:2a:ec:54:
         06:a6:3a:a5:b9:f8:98:0e:8a:8d:57:68:57:2e:14:89:5f:eb:
         71:1b:be:a2:57:0c:38:0d:2f:99:ff:64:2c:5f:de:d5:fa:0a:
         72:1d:9c:6f:bd:83:af:37:7f:83:81:07:6b:35:ab:ee:bf:69:
         21:9f:34:9b:cd:08:28:9b:73:53:af:51:27:c7:2a:8b:64:d8:
         30:21:b2:e0:9d:d9:e7:59:70:40:3d:34:08:26:a2:a7:b0:e9:
         78:23:66:5d:a3:5c:68:39:c4:a4:5b:42:39:82:03:98:d9:12:
         6f:dc:7b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:28:34 2025 by rpki-client