Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/6f777758-37ec-3629-a5b3-9b222bf1ebe8.roa
File:                     6f777758-37ec-3629-a5b3-9b222bf1ebe8.roa (raw, json)
Hash identifier:          CfvdScqpU/B1nVlRyJBBOpvBTuQKjFhUULmmeuKwPdc=
Subject key identifier:   CE:EB:9A:AC:6E:4D:A3:2F:99:65:1D:A3:6E:60:CB:68:18:69:40:65
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584A0A9FD2F6119F2CA1B31ACA80
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/6f777758-37ec-3629-a5b3-9b222bf1ebe8.roa
Signing time:             Sun 01 Jun 2025 01:00:49 +0000
ROA not before:           Sun 01 Jun 2025 01:00:49 +0000
ROA not after:            Sat 30 Aug 2025 01:00:49 +0000
asID:                     27539
IP address blocks:        2604:a900:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0a:9f:d2:f6:11:9f:2c:a1:b3:1a:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Jun  1 01:00:49 2025 GMT
            Not After : Aug 30 01:00:49 2025 GMT
        Subject: CN=76c752b7-4430-4ecd-83b1-c40c69bb0a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:67:64:d3:40:4d:a2:4a:91:41:e5:fa:d4:46:
                    3a:72:8a:a4:5b:89:53:77:77:22:07:94:77:8f:73:
                    d6:b2:67:69:05:62:60:f4:5f:8d:20:d8:93:e0:6b:
                    a0:23:90:78:87:f1:6b:cd:92:55:ef:8a:4a:cf:f0:
                    a1:7a:c9:58:33:4f:db:0e:68:e1:52:05:db:92:7f:
                    55:73:b2:32:30:62:70:bb:8d:38:b0:3b:eb:a8:81:
                    5e:c1:6e:bd:32:d9:8f:9b:02:4f:ec:68:7c:f5:62:
                    27:2d:7a:a1:8c:6d:9e:71:39:8e:f5:a9:7c:09:90:
                    fe:03:46:64:e0:d9:15:d3:d1:65:51:59:ea:fa:45:
                    01:94:30:89:1a:59:f9:d0:00:43:c9:40:a2:d2:f9:
                    0e:5f:8b:fe:da:ec:84:4f:88:85:04:44:c9:2a:e4:
                    6a:53:f8:27:ab:d7:ac:8e:61:23:6f:cc:9a:42:de:
                    9d:ef:58:da:21:96:fc:4e:66:9f:03:4d:98:66:5c:
                    be:ee:49:97:db:c0:af:9b:3d:68:f4:16:12:a6:f8:
                    e9:07:87:6f:73:22:a6:6e:5f:a1:78:02:1b:f0:42:
                    92:ef:30:1a:ab:58:95:a9:8f:4b:e7:fd:a3:8b:30:
                    ac:75:d0:42:95:a0:5a:a0:33:80:57:51:ea:7e:2f:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EB:9A:AC:6E:4D:A3:2F:99:65:1D:A3:6E:60:CB:68:18:69:40:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/6f777758-37ec-3629-a5b3-9b222bf1ebe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a900:e000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ab:0b:96:5b:28:70:2d:a2:a7:50:97:53:af:99:33:02:ca:
         73:74:31:37:e1:54:35:e5:b7:b4:11:53:ec:89:eb:13:b5:2b:
         15:6f:74:be:a2:05:f0:c0:a8:0f:2f:a0:2d:3c:ac:70:d8:46:
         43:d7:4a:25:e4:31:2d:07:98:8e:91:47:6a:2e:23:b7:85:17:
         95:12:25:9b:8a:43:93:07:ad:6b:57:8e:fb:be:cd:45:3a:8e:
         4c:9c:2b:d0:17:bc:b3:19:16:87:5e:ef:e9:72:00:a9:32:d7:
         00:ff:17:db:3e:01:d8:46:25:7c:e5:e1:82:1b:00:42:c2:70:
         d5:3b:a2:c7:46:03:26:e8:b2:54:7e:9a:c1:d6:42:19:fd:15:
         9d:a7:d6:41:81:95:a2:f5:31:3c:48:4d:c1:a0:c4:60:86:55:
         7b:ec:69:47:3d:23:d1:de:b0:75:be:9b:6c:fc:f2:c9:1d:6f:
         23:83:f4:63:ed:83:32:c9:c4:bd:ed:ac:34:c3:05:8c:54:a9:
         0d:ac:a9:c9:12:92:83:5a:50:d0:42:7b:0d:99:ee:a0:85:5e:
         c7:5d:56:77:5c:e0:c8:56:11:02:3f:f6:4e:4d:7f:05:3e:83:
         44:5a:03:6a:37:c5:c1:ac:b8:0b:f0:28:fc:bc:e1:40:96:b3:
         6b:c6:ec:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:07:31 2025 by rpki-client