Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ae2453d2-b979-33fe-badb-55c4c8aa402c.roa
File:                     ae2453d2-b979-33fe-badb-55c4c8aa402c.roa (raw, json)
Hash identifier:          aBjpaCgImf36CnHZnUwcbQh/XVmFQhXUNAex4WPIpxE=
Subject key identifier:   7A:F5:9C:BF:71:ED:A7:12:8C:F1:89:EB:E1:16:0B:09:FF:8E:1A:17
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584A2B4BB45FAA9CEC61D879CF40
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ae2453d2-b979-33fe-badb-55c4c8aa402c.roa
Signing time:             Thu 12 Jun 2025 17:53:03 +0000
ROA not before:           Thu 12 Jun 2025 17:53:03 +0000
ROA not after:            Wed 10 Sep 2025 17:53:03 +0000
asID:                     25645
IP address blocks:        2605:8300:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2b:4b:b4:5f:aa:9c:ec:61:d8:79:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Jun 12 17:53:03 2025 GMT
            Not After : Sep 10 17:53:03 2025 GMT
        Subject: CN=66e59f97-ce11-40d7-9753-e9944d6afcac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:18:c1:f2:d5:94:93:f7:91:27:a5:ee:d8:06:
                    4d:8c:10:2f:a6:bf:99:2e:28:e9:83:32:51:d5:ae:
                    15:2e:a2:58:fe:99:71:93:b5:0c:2a:fb:2a:e9:0b:
                    cd:f9:67:6c:c5:d3:c1:f8:d3:0d:0d:42:a2:9f:f4:
                    a6:61:9f:d2:91:e2:ca:23:fa:5f:93:22:c6:37:1f:
                    43:43:2c:4f:c9:28:05:90:f8:2f:32:34:3b:71:fc:
                    4a:e3:21:38:e0:74:a7:33:26:62:2e:65:6a:3e:9c:
                    8f:97:c6:db:1f:a8:ce:1b:31:e5:8f:00:22:23:47:
                    b1:22:9b:4f:b1:96:59:53:74:18:00:f3:1a:c6:f9:
                    b2:34:75:fc:26:c8:0b:f1:99:1a:d7:b8:c8:86:68:
                    f3:c9:44:76:3e:0a:a9:d9:2a:27:c9:69:ca:a9:f8:
                    48:72:b8:d8:8d:7b:34:fc:cb:f0:43:73:a0:7a:4d:
                    46:f2:96:6d:e4:6c:61:4d:06:4e:e1:9f:a1:02:f8:
                    05:f6:ad:30:94:05:17:e6:df:c8:e8:10:a4:11:3e:
                    73:f7:33:70:68:21:5e:c5:8a:ba:42:db:66:9d:79:
                    7d:1e:e6:9f:94:48:96:c6:ad:43:e2:ba:73:d1:bf:
                    7d:af:ff:42:d0:9b:8a:ee:94:f3:b1:5b:c4:8b:02:
                    9f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F5:9C:BF:71:ED:A7:12:8C:F1:89:EB:E1:16:0B:09:FF:8E:1A:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/ae2453d2-b979-33fe-badb-55c4c8aa402c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8300:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f2:f1:f9:e5:c2:ea:a4:d5:9b:e4:bd:8f:b2:08:f6:c3:8d:
         8c:90:96:fb:f9:5a:5f:a9:aa:a5:06:da:bb:b7:ca:d7:d0:24:
         ae:b9:1d:57:0d:fb:ce:bd:a0:0e:c8:3c:38:26:eb:a5:a6:49:
         9f:6c:56:72:bc:01:1b:3a:6d:db:c4:67:6f:20:d7:dc:6a:f5:
         4d:e9:e4:e4:88:c5:4d:24:52:3b:09:e4:92:ba:f9:fd:2b:da:
         85:f2:e0:e6:04:55:6b:9b:40:e0:9c:06:ea:10:71:f0:ab:56:
         4c:67:b4:80:87:5d:7e:69:32:e7:e7:2d:ba:eb:86:ff:5f:88:
         a2:b1:8a:90:df:13:9d:5b:ed:7e:36:ef:4c:ed:92:06:8f:2c:
         5f:13:d3:38:00:c0:76:17:14:a2:10:53:bb:da:92:db:90:80:
         db:0a:22:64:9c:2a:50:89:f1:ae:e8:90:a9:f0:2c:75:e3:ba:
         12:b0:1f:9b:01:7e:0a:f0:86:43:43:1e:00:46:bb:e9:5f:44:
         52:17:27:47:8e:34:46:7c:cd:8d:6e:d1:4c:bc:ca:e6:3b:bb:
         5b:62:79:85:99:36:42:32:a1:72:3c:4e:b5:04:15:1b:0f:5b:
         cc:5b:6b:63:78:01:db:71:38:b3:e3:2c:ca:01:0b:00:96:f7:
         27:7b:26:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:14:27 2025 by rpki-client