Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212/dcc41fd4-74ce-3352-a50b-62c5e7b95f39.roa
File:                     dcc41fd4-74ce-3352-a50b-62c5e7b95f39.roa (raw, json)
Hash identifier:          idfSI3MVcrYMYREqjDYR6sAv+5F/G0sdJk116zzWxO4=
Subject key identifier:   AE:CF:31:66:5F:46:EB:E8:F0:09:43:54:13:30:1A:79:FB:8A:70:A4
Certificate issuer:       /CN=c2bc323a-eaca-4811-9f31-5631f5ae8212
Certificate serial:       010D0C9F4328584A14657558D5209AFCBCB66900
Authority key identifier: DA:BD:30:48:0F:12:EB:9F:EF:F2:14:C3:88:92:54:EE:C6:3E:50:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212/dcc41fd4-74ce-3352-a50b-62c5e7b95f39.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     46262
IP address blocks:        2604:2b40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212/c2bc323a-eaca-4811-9f31-5631f5ae8212.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212/c2bc323a-eaca-4811-9f31-5631f5ae8212.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:75:58:d5:20:9a:fc:bc:b6:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2bc323a-eaca-4811-9f31-5631f5ae8212
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=fb39be21-0ffb-4530-bfe7-fd1c2f5a5145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:24:b3:c9:e3:f4:f9:0b:5c:d4:7e:cb:0a:d5:
                    82:bb:f9:cb:3a:9f:34:c0:e4:b2:c6:a1:63:68:93:
                    b2:df:37:31:27:75:0c:c3:a6:96:e7:75:e9:32:fa:
                    ab:0d:83:9e:79:f8:7b:56:29:b7:e2:aa:b2:29:f7:
                    fb:e5:f4:18:14:c5:b4:32:77:34:92:bc:b7:97:7a:
                    bd:8c:a7:4b:80:a6:30:9d:c4:ba:8e:9e:57:82:67:
                    18:f3:48:81:cf:0a:83:a4:bd:7a:d3:2d:0e:de:d6:
                    bd:57:c8:65:2e:86:ef:54:82:3b:c7:83:98:e3:d7:
                    d4:34:4e:96:66:c9:a3:3e:47:f4:22:7c:77:41:50:
                    1d:7b:a8:44:ca:7f:1a:06:06:91:5f:46:e4:0a:5b:
                    a4:f9:6f:99:44:cd:01:b8:a6:12:4f:8e:a7:cb:17:
                    42:1c:93:e2:33:ad:54:6e:b9:58:7c:f9:1a:14:65:
                    31:7b:cc:74:2b:a7:18:d2:7a:4f:c8:6c:98:2f:a5:
                    c3:d2:94:ec:fe:f5:e2:d7:c0:b8:d5:09:86:50:0d:
                    09:7d:7d:5b:7e:48:1c:06:9b:48:21:45:51:33:db:
                    75:94:f6:7c:48:75:05:f4:8a:39:e6:c9:7a:dc:a9:
                    25:ec:09:37:b7:7c:04:97:a7:2c:14:93:93:1a:7b:
                    3d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CF:31:66:5F:46:EB:E8:F0:09:43:54:13:30:1A:79:FB:8A:70:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212/dcc41fd4-74ce-3352-a50b-62c5e7b95f39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212/c2bc323a-eaca-4811-9f31-5631f5ae8212.crl

            X509v3 Authority Key Identifier:
                keyid:DA:BD:30:48:0F:12:EB:9F:EF:F2:14:C3:88:92:54:EE:C6:3E:50:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ff:f8:a4:21:b2:43:06:34:30:19:54:6e:b8:4b:91:be:39:
         a2:b1:b4:bc:ec:64:76:ba:66:95:db:16:95:3c:7e:1e:d1:36:
         2e:1c:14:fe:88:c0:00:54:1c:51:c4:3f:d7:05:7d:9c:90:89:
         68:77:ea:1b:4b:c9:1e:fa:ca:16:cb:a0:ea:85:92:16:af:a8:
         40:70:b5:30:67:61:a9:1a:c0:c2:9d:5f:fd:c1:97:a0:5f:56:
         ec:6e:3f:7d:1a:86:bc:fa:95:7c:83:64:13:6a:87:9e:15:d4:
         05:78:33:0e:c2:c9:43:24:41:25:55:d7:f1:da:c7:83:fe:8f:
         0c:fd:18:9c:81:e5:4f:68:0d:1a:23:37:4a:bf:84:fe:bf:05:
         b7:2e:d1:ba:80:ec:e6:3d:07:15:a3:9f:cd:96:2a:6e:45:01:
         9c:bd:f0:6f:f3:70:c4:b5:0e:0c:f5:ac:4e:28:ea:79:51:f7:
         2d:ad:00:fd:41:1c:fd:ee:c8:e6:40:02:04:29:a2:f1:49:39:
         16:1c:c2:d3:b6:4e:f2:28:a3:39:52:56:76:5e:d0:61:64:dd:
         db:62:b4:9e:f0:30:2e:0d:e5:6a:e7:4b:51:2c:17:03:5d:91:
         ab:7f:ab:34:8b:a0:d7:1a:03:5f:b0:9d:87:92:d5:6e:f1:87:
         66:f7:6a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:29:09 2025 by rpki-client