Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0c65eb67-1e62-3a03-a201-d462f1ece7b4.roa
File:                     0c65eb67-1e62-3a03-a201-d462f1ece7b4.roa (raw, json)
Hash identifier:          SZhrobNoeEdq7h7ibuX+dxNRcSTNy8ttDFVnfwSQT+M=
Subject key identifier:   E6:94:74:BE:58:26:83:E8:C6:DA:39:85:37:19:B1:D7:5A:00:E2:B1
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F43285849E7BA828C26BFCB6EB72A0780
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0c65eb67-1e62-3a03-a201-d462f1ece7b4.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     61317
IP address blocks:        2604:4500:1a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:82:8c:26:bf:cb:6e:b7:2a:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=00abed40-bbbb-422a-a2ff-486963ad6144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:d9:3f:fe:74:34:aa:ea:a6:5f:eb:b8:d0:
                    ed:b3:97:a3:74:fc:f0:98:b1:04:00:1f:9a:15:ea:
                    eb:c7:51:40:85:7b:d3:79:67:a5:1f:fc:72:b7:1b:
                    30:71:f7:13:09:b7:15:c2:30:76:dc:8a:86:d9:9f:
                    4b:46:bd:a0:64:93:48:9a:ce:d1:c8:c2:1d:1e:50:
                    1b:db:2a:33:e1:4e:03:d2:4d:60:11:a8:54:0f:1e:
                    2c:17:f9:c3:f3:85:e6:dc:d2:2c:da:71:d5:ed:36:
                    1b:28:53:c9:f8:8f:b9:62:8b:1b:e6:23:e1:36:8d:
                    d9:cf:46:7b:b5:31:10:0e:ed:7d:75:cd:b7:cc:4d:
                    01:af:c3:c1:20:40:6d:da:51:9c:f8:20:8f:2a:d7:
                    2d:5f:fa:35:55:3c:bb:74:30:a4:13:cf:2b:22:ed:
                    be:bb:8f:df:2f:52:3a:ed:9a:b0:1b:73:bc:34:0f:
                    1f:05:86:b9:ba:9f:f7:88:43:ef:8f:fd:bc:df:6a:
                    54:bc:e3:56:3c:68:a9:d8:bc:46:a8:35:53:f5:cd:
                    0c:27:ca:6f:6c:04:49:2a:b3:dd:16:29:55:34:1c:
                    91:18:a9:69:a6:9c:81:45:9f:e1:12:e9:2d:10:9a:
                    a6:2d:4d:6e:17:6e:e3:80:96:07:3e:5f:05:1d:ec:
                    66:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:94:74:BE:58:26:83:E8:C6:DA:39:85:37:19:B1:D7:5A:00:E2:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/0c65eb67-1e62-3a03-a201-d462f1ece7b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4500:1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:bc:a1:80:40:4e:84:14:3d:a0:8e:3f:cc:03:43:c5:b0:60:
         f3:8b:ed:cc:8d:2a:ca:8f:c6:ca:d1:26:92:9f:46:82:e1:52:
         46:b7:89:19:71:8e:d1:c7:87:e9:78:48:22:b5:5c:91:ba:bc:
         fe:fd:e4:70:0d:41:8a:46:7d:66:c3:47:f9:df:f9:62:d9:86:
         a5:56:b8:3b:c2:c4:bf:c9:0f:4f:e0:9d:1c:fc:96:db:f8:d1:
         b6:00:bd:f6:72:9f:c6:9d:3f:a4:54:cb:bf:ff:74:aa:8e:f2:
         ff:b3:b8:05:61:66:dc:22:7a:d0:17:1b:87:69:ff:42:7c:83:
         03:14:4b:ef:5c:e0:ae:ab:c4:b7:4f:2c:1e:8b:42:20:1e:6d:
         d5:4d:62:f0:5d:33:83:93:e9:c4:3e:b9:ed:21:63:8c:14:9b:
         b1:42:5f:b2:5e:e1:23:2b:70:ad:1f:85:21:1f:f4:0c:c0:5b:
         3e:5b:76:52:ba:46:b1:e2:a1:da:2c:30:45:71:13:da:78:4f:
         68:b9:47:2d:a8:5b:d3:e1:d6:cf:26:22:1c:7b:ce:d8:80:1a:
         16:a8:28:40:04:14:21:32:ab:7f:a3:43:1b:2e:01:41:16:20:
         86:f5:d7:d8:9d:f5:13:3f:15:50:47:e9:66:e2:60:4f:2e:28:
         86:86:a2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:02:46 2025 by rpki-client