Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/b03d981a-03b9-3f4c-9a11-5afe6a4e15d9.roa
File:                     b03d981a-03b9-3f4c-9a11-5afe6a4e15d9.roa (raw, json)
Hash identifier:          kQAIHO1X7G940VOUPaig2BvVdPSjCsYdrcvIZdkBhZM=
Subject key identifier:   48:00:A6:2B:38:C8:7A:A3:A9:D9:35:99:45:FF:0F:1D:10:6C:0D:4F
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F432858499AF48E582095B1B301BA4680
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/b03d981a-03b9-3f4c-9a11-5afe6a4e15d9.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     396422
IP address blocks:        2604:81c0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:8e:58:20:95:b1:b3:01:ba:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=41614009-8957-4a28-b7e4-bbb49a186f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b7:57:18:c6:15:04:d7:47:b2:1f:e1:69:25:
                    6b:7a:cf:da:40:cc:50:a9:f4:68:9a:44:2a:04:a3:
                    dc:53:91:c3:80:cb:77:6e:00:88:49:76:da:db:ee:
                    24:0d:50:a9:3f:c8:8a:87:8a:f4:46:23:ee:d8:b4:
                    19:18:c9:75:5e:26:01:c8:52:f5:57:48:c8:d2:4e:
                    ec:27:50:5a:56:d0:02:fa:65:92:85:55:0d:8e:c2:
                    24:e1:3a:1a:ca:b8:8d:97:7c:61:cf:e3:d4:80:09:
                    0a:05:0f:d4:37:ad:65:30:33:73:38:1b:d2:d0:d3:
                    42:be:6c:71:41:88:9d:3a:41:7c:a8:15:b7:a5:43:
                    14:0f:bb:b0:a9:58:24:9b:df:b1:3b:63:e5:9b:24:
                    b1:11:2f:be:0c:af:9e:99:9d:e0:f0:f8:36:33:8f:
                    2d:a9:e6:17:28:5e:e2:f0:e2:ad:13:2a:10:bd:77:
                    85:b5:bf:80:57:0d:ab:fe:5a:5c:32:6d:b3:1f:d0:
                    7f:87:28:e9:24:2c:09:e7:72:72:94:2c:ff:5e:98:
                    e9:4b:aa:75:f9:1f:c3:65:40:7f:cf:89:eb:23:34:
                    70:4d:52:de:ad:4d:2e:f5:1a:ab:5a:84:e8:b9:aa:
                    a9:71:d3:75:e0:ca:3d:ba:31:0c:49:87:9f:e0:96:
                    0e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:00:A6:2B:38:C8:7A:A3:A9:D9:35:99:45:FF:0F:1D:10:6C:0D:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/b03d981a-03b9-3f4c-9a11-5afe6a4e15d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:81c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:23:76:eb:d0:28:d9:e9:61:34:e5:5e:0c:35:a0:7e:d8:9a:
         d9:65:e4:91:7c:8c:8d:6b:81:a0:c5:f4:82:da:65:44:c2:57:
         ca:3e:94:e8:58:d0:26:9d:f1:dd:15:64:57:15:d3:9e:20:9d:
         38:64:7f:f5:9d:81:f6:21:a1:8b:e6:16:cf:90:85:5c:75:c4:
         38:82:c4:67:dc:c2:90:e5:ff:6b:d2:e0:b1:91:41:6f:ee:24:
         f8:2e:a3:d8:e2:34:7a:67:b9:68:ab:88:ce:93:66:cb:10:a7:
         24:2e:26:6b:46:93:dc:e7:6f:c9:0b:d9:9b:a7:58:95:59:1c:
         2f:41:32:72:a8:fc:10:8f:b7:91:f5:30:44:74:2a:b8:55:ac:
         bd:9e:07:21:a0:c3:8b:87:b3:f4:01:b4:fb:61:88:5d:1e:7c:
         b1:a0:17:52:6d:64:47:82:71:11:fa:21:dd:4e:af:12:a7:e6:
         db:9e:c3:53:15:07:e5:33:b8:02:e6:67:52:de:25:5a:e1:42:
         6f:a2:9c:fa:c8:53:94:27:c3:df:26:20:36:e8:f0:cd:4d:7b:
         b3:2e:5f:89:21:05:e9:bd:c9:7e:bb:fc:3d:29:9d:6b:cb:97:
         cb:cb:77:6c:42:34:6d:b8:23:3c:47:f3:a0:ea:d5:dd:05:17:
         4e:50:e9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:18:34 2025 by rpki-client