Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa
File:                     1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa (raw, json)
Hash identifier:          UvgjyP3/A/k8vts8DriE4vxTw5FLeiYyomZVNuW00sA=
Subject key identifier:   20:46:DF:3C:EF:DD:73:BA:A4:C7:34:9C:16:57:46:94:C1:0C:EF:A8
Certificate issuer:       /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial:       010D0C9F43285849CBCF8415D40964993F1D5810
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        2604:ba80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:84:15:d4:09:64:99:3f:1d:58:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=3fdffa42-9e78-43ee-af68-ee2d356e6796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:89:8c:32:c7:87:75:43:f4:a0:2d:b7:47:df:
                    0e:44:9f:58:67:28:da:b4:64:c0:e2:36:24:f4:9c:
                    d5:f8:60:2d:ac:2e:91:ed:5b:5c:33:22:56:6d:13:
                    14:1b:45:3c:8d:0a:aa:f9:09:f5:fc:e9:dd:8b:33:
                    9f:08:7a:fb:db:94:f3:f1:c5:47:91:52:75:b9:77:
                    aa:a5:43:16:9d:8e:f2:b0:ca:ad:03:6a:d8:10:7b:
                    69:bd:11:96:fb:9b:a7:07:1b:c5:3c:93:c8:36:3c:
                    de:14:d2:4c:f8:b8:cc:57:2e:f9:b5:9a:2e:cd:24:
                    d2:17:4e:e0:df:46:28:58:8a:e6:6c:30:8c:7b:f2:
                    1e:6f:1a:0e:d9:5d:f1:7f:93:1e:fe:8d:ad:b3:44:
                    97:69:e8:1f:c6:42:30:1c:ed:c1:bc:11:31:dc:97:
                    51:48:60:fd:1f:eb:e1:21:c1:29:e0:7b:f7:29:a2:
                    6c:19:28:cf:9d:43:ea:b0:91:83:5f:d8:5c:f2:0b:
                    1a:fd:47:b9:dd:81:8f:1e:68:49:9b:2a:8c:22:cd:
                    eb:06:4b:9b:34:3b:3e:9a:a5:37:30:61:b6:87:6e:
                    1b:02:d0:65:92:37:d5:6b:9f:2a:80:fc:da:ba:7d:
                    d0:d9:9e:79:4c:93:89:9b:ff:a1:e1:28:9f:48:fd:
                    1a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:46:DF:3C:EF:DD:73:BA:A4:C7:34:9C:16:57:46:94:C1:0C:EF:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/1dbb43af-9206-3c1d-b292-f8d28c1d4e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl

            X509v3 Authority Key Identifier:
                keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ba80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:43:d1:ea:46:ca:ed:9a:40:6a:fe:f1:fb:77:e9:97:c9:cd:
         9d:4e:eb:62:98:ec:60:4e:da:8b:63:f9:9f:85:2f:58:c5:5b:
         ab:bc:09:20:4a:c7:e7:05:00:5e:c8:81:d4:9d:99:12:a5:b0:
         a5:a5:9f:7f:cd:9a:a4:0d:34:e9:3d:b4:b7:12:36:56:54:76:
         12:d9:2f:13:55:c3:80:f7:eb:00:07:9d:e5:87:62:ca:bb:14:
         a8:10:44:a0:f2:73:e5:02:62:e5:58:a5:8b:a0:92:8a:a2:d9:
         50:65:e3:d5:6a:dd:dd:86:83:eb:22:c9:5b:b3:6e:0b:d2:73:
         8a:4b:f0:84:f7:8d:e2:b3:7e:4f:d9:41:e7:ec:a3:62:b7:eb:
         2a:45:47:40:2a:a5:22:d5:e1:77:86:f6:eb:98:1d:81:05:64:
         a0:4d:db:1a:b3:4e:05:56:b6:71:67:cd:95:61:4c:93:de:c2:
         36:9a:e1:2c:00:89:b6:c8:06:52:e2:8c:87:77:70:96:90:56:
         c2:04:0d:68:c7:b8:4d:83:53:cc:67:eb:63:84:10:6f:fc:b6:
         0b:63:ff:50:e5:71:33:65:ef:f5:77:e6:39:61:46:ed:84:f2:
         ed:c4:fd:ff:b0:57:d3:03:fa:1b:bc:e5:3a:5f:76:01:dc:02:
         a1:74:c4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:08:16 2025 by rpki-client