Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/6fc63da5-97c1-3909-a780-58400903a3f5.roa
File:                     6fc63da5-97c1-3909-a780-58400903a3f5.roa (raw, json)
Hash identifier:          +L47fTSiBVG3XeL8eQcB6eEIQ3lj0DaEkBUqNBfLVBE=
Subject key identifier:   89:72:B5:36:90:7E:35:59:D2:56:B5:3F:DD:42:66:E2:E0:22:F5:5F
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFD890BB6C9FE4CBBEA580
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/6fc63da5-97c1-3909-a780-58400903a3f5.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        2001:4c8:1108::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d8:90:bb:6c:9f:e4:cb:be:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=473df423-a764-42ef-8c9b-bdc70a88e4a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0e:e1:74:90:e2:a1:76:7a:24:0f:a7:8d:ef:
                    52:94:4d:4a:2e:2c:6f:c0:4f:16:fa:4d:bf:ad:91:
                    df:fc:8b:38:c1:a9:29:0f:65:91:12:57:0e:e7:19:
                    0c:de:b9:07:56:08:de:bf:73:69:bd:9b:d2:27:d2:
                    00:68:3a:99:54:1c:6a:f1:83:54:ac:0d:33:51:ed:
                    01:58:9e:4d:5c:e7:88:8b:c6:d3:24:f7:30:c5:42:
                    6b:e6:0e:b1:f9:f5:8e:01:20:9c:f1:bb:15:a7:6a:
                    91:ac:6a:69:5d:66:6d:0e:df:66:4a:37:35:d8:8b:
                    a5:2b:f5:12:bb:4a:6a:76:f0:84:e2:d4:b7:46:bf:
                    eb:b4:26:7b:5d:fb:b5:ae:a9:c1:29:09:64:cc:86:
                    0c:6f:82:fc:f6:1f:b2:2f:d3:9e:20:b1:9c:aa:75:
                    99:ba:36:4d:50:df:55:79:4d:a6:c5:2a:7d:e0:46:
                    3c:cc:cd:2a:48:f7:da:68:f0:de:82:ed:06:ec:82:
                    e9:53:8e:70:d8:c9:a9:f8:d6:91:d3:c3:93:7c:c1:
                    f1:3d:c5:05:db:eb:35:5e:c8:28:ea:14:18:48:4a:
                    fd:a0:61:0c:76:e3:90:41:9f:33:01:54:4f:47:4e:
                    69:6d:f8:a9:3e:e1:d6:56:ca:ca:f0:f6:e0:ae:8b:
                    15:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:72:B5:36:90:7E:35:59:D2:56:B5:3F:DD:42:66:E2:E0:22:F5:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/6fc63da5-97c1-3909-a780-58400903a3f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1108::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:a1:66:58:5b:8d:53:18:aa:54:44:0d:23:12:92:83:8f:16:
         ac:1c:72:d9:c1:1b:39:59:2c:47:0a:15:0f:52:e8:1f:85:88:
         52:d8:e3:65:d8:cd:80:16:52:c4:86:dd:d0:33:4c:fe:30:d6:
         cf:b8:87:eb:dc:51:c1:b7:3e:1f:0f:df:85:34:cb:45:25:5e:
         a5:73:e8:05:15:87:6d:5a:e9:83:4b:f0:58:73:72:ca:2e:e7:
         8c:00:23:86:a5:77:f4:7a:ad:40:14:cf:ea:f2:66:7e:df:2c:
         be:fa:56:ef:e0:c4:ae:cf:06:ba:d6:48:a6:9e:0c:58:6a:7f:
         3b:75:e6:6d:ae:02:09:ec:f1:cd:4e:1b:bb:26:26:f2:3a:e5:
         c3:5b:6b:59:6b:83:64:e2:f7:9a:04:b4:71:83:6a:10:0b:be:
         bc:a7:c2:02:ee:a2:d0:2a:7b:7f:48:bc:78:7d:44:b8:ca:b7:
         c0:55:7a:2f:ba:5a:d2:83:02:a9:54:0f:e9:06:6a:c5:d0:70:
         ab:b3:90:6a:71:dd:5f:71:94:97:72:68:b8:e1:fa:cf:ae:cf:
         0a:24:7b:92:eb:ae:84:17:92:04:14:97:cc:aa:68:ee:0a:1d:
         10:f3:67:f2:b0:92:e3:01:3c:36:b0:01:b3:4d:6c:19:c0:5a:
         11:7a:2e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:54:44 2025 by rpki-client