Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/49ad91a4-54ac-37a2-818c-38261d97663e.roa
File:                     49ad91a4-54ac-37a2-818c-38261d97663e.roa (raw, json)
Hash identifier:          hf8NxEBUFPmamUz6vjKV+gJJ3WTBUbvGo3MUJ67ZopU=
Subject key identifier:   15:E0:50:0C:16:10:B6:B1:C2:F5:F9:A9:6A:71:B3:B6:8C:BC:70:A6
Certificate issuer:       /CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa
Certificate serial:       010D0C9F432858498CFF1C9245D1D1A5F8648F60
Authority key identifier: DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/49ad91a4-54ac-37a2-818c-38261d97663e.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     399989
IP address blocks:        2604:354a::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:1c:92:45:d1:d1:a5:f8:64:8f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=ff09d6ef-977a-4e79-8cc4-df9fda3c327c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:33:d6:85:49:b0:cc:c6:69:42:4f:10:e8:3a:
                    5b:87:ab:b7:80:58:5b:2b:6b:95:e4:35:c0:c9:53:
                    d5:e0:65:79:72:a2:ae:3d:b4:33:a4:6a:97:5c:21:
                    1b:c5:8a:ef:8f:a5:97:26:61:96:11:fd:3b:ed:bb:
                    af:04:25:5e:1a:99:8c:9c:91:b9:3c:c2:f9:6e:c3:
                    3a:6f:b3:50:b7:1e:7d:07:9e:a1:70:0a:bc:a8:6b:
                    61:9a:49:0b:af:4b:21:ae:05:44:d0:34:a5:60:6c:
                    45:d2:b1:8d:04:c8:b0:0c:27:83:be:b3:55:20:e1:
                    5a:f1:89:ee:f3:20:e2:0f:9c:11:76:b2:11:38:68:
                    48:62:38:04:22:c7:97:d3:bc:02:44:f6:ff:2b:1c:
                    a3:08:c6:17:6c:62:45:6b:0a:d0:2d:06:b7:cb:8c:
                    33:e8:7c:a3:df:c3:21:6f:cc:d9:3b:7c:df:5e:80:
                    d8:8f:68:90:20:2f:82:0c:a9:88:76:27:7d:1e:de:
                    54:03:b7:75:4e:e4:f9:be:8c:9c:a1:ed:52:b0:6e:
                    90:7a:29:b2:40:c6:07:af:9f:fe:61:dc:71:6d:a9:
                    94:91:a0:c2:41:3b:df:74:34:70:62:65:f9:2f:4d:
                    3e:5f:3f:77:d1:3d:f0:88:7e:7a:6e:73:a7:33:38:
                    78:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E0:50:0C:16:10:B6:B1:C2:F5:F9:A9:6A:71:B3:B6:8C:BC:70:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/49ad91a4-54ac-37a2-818c-38261d97663e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl

            X509v3 Authority Key Identifier:
                keyid:DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:354a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a3:bf:4e:23:2e:47:53:eb:ec:db:4f:72:d2:a3:ec:0f:3d:
         2c:5f:86:64:ed:c9:ef:97:06:63:39:22:41:5d:5f:c1:94:61:
         f9:4e:05:ed:ec:39:20:04:93:a7:2b:5d:3a:c6:e1:d6:41:a4:
         f3:33:b6:39:85:8b:67:9b:ff:bc:6d:14:72:ed:5e:9f:f6:45:
         68:91:12:3a:81:40:90:b5:70:33:7e:05:13:74:61:68:4a:a0:
         43:ed:a3:51:85:d8:88:bd:e0:04:96:ce:76:31:8d:0b:93:e9:
         5c:9d:9f:4a:52:35:d9:a9:b2:0c:53:8e:0d:50:5c:2f:7e:39:
         3f:11:8c:f3:96:7e:e5:18:2a:bd:09:60:aa:7b:97:87:6f:6b:
         a7:48:9b:25:a4:f1:4d:71:35:b1:c0:54:b7:7b:d4:53:f0:ef:
         a1:08:fb:04:66:44:f0:fa:bb:1f:fb:a6:3d:c3:1c:66:74:5c:
         69:d4:23:56:d8:6e:37:77:cd:26:54:1b:39:8c:24:2a:f4:91:
         0a:ab:48:5f:95:e6:a2:e6:7e:1b:fc:ae:17:37:08:4e:e0:3e:
         4b:aa:37:d5:86:0b:71:2a:2f:8e:2c:ee:7c:7e:ea:5b:95:33:
         01:9d:cb:6d:75:9c:c1:2c:59:93:cf:59:ec:ed:05:c2:13:23:
         51:7a:c1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:08:37 2025 by rpki-client