Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a2f431f9-02fa-39f9-918d-cd4915a8898e.roa
File:                     a2f431f9-02fa-39f9-918d-cd4915a8898e.roa (raw, json)
Hash identifier:          NVn9LIFdUIC+kno2DHZsMLFHisSQYr88UiRNAtDskoE=
Subject key identifier:   C3:7C:CB:31:68:AC:B2:CE:54:57:86:95:66:6F:5E:55:84:BA:F9:14
Certificate issuer:       /CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
Certificate serial:       010D0C9F4328584A0C055D705DA640E8F3AD1C00
Authority key identifier: 5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a2f431f9-02fa-39f9-918d-cd4915a8898e.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     25637
IP address blocks:        2607:4800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:5d:70:5d:a6:40:e8:f3:ad:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1f49b6f-a170-485e-8c07-d518b906c6ae
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=014c7102-3b82-4d93-a415-0af7622e3868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fd:6a:50:4b:08:8d:c9:26:2f:a9:ba:96:37:
                    1c:da:c3:e0:d5:61:da:5b:27:b8:d8:29:05:8d:41:
                    2c:54:75:f7:1e:98:d3:3f:9b:d2:f5:d4:c0:ec:c3:
                    36:d9:bb:71:87:60:c8:c1:54:96:34:d9:12:87:de:
                    53:84:34:e6:8e:79:9e:f2:9d:61:34:68:5d:d6:96:
                    73:86:67:cc:69:1d:a0:a9:a8:8b:26:b8:e9:d3:09:
                    7e:dc:aa:9c:1f:1f:ae:b9:70:88:3a:3c:36:46:ad:
                    62:8a:ac:b2:43:48:40:21:40:fc:eb:25:c5:19:3c:
                    94:b0:2e:7c:bb:f8:e6:63:1f:e9:48:64:0b:59:2b:
                    02:a8:7e:fc:b0:49:3d:14:e2:d3:22:93:a7:ab:54:
                    88:f9:90:5a:99:bc:c1:cc:1b:4d:c6:3a:43:cb:1f:
                    74:97:cf:44:7e:93:33:09:5b:66:a8:83:5b:dd:c4:
                    cb:f5:d9:a8:fa:52:5a:bf:b3:a3:8c:ff:f6:10:bd:
                    73:76:6b:3e:a9:e2:f1:f0:1c:67:5d:03:64:09:6f:
                    68:4e:d4:5d:36:41:ff:ff:bc:c5:f5:ea:9f:1b:60:
                    33:59:57:06:dc:4e:20:14:07:cb:40:35:96:4a:54:
                    67:96:76:1b:ef:f4:1f:87:ce:25:64:ee:f2:6d:4e:
                    91:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7C:CB:31:68:AC:B2:CE:54:57:86:95:66:6F:5E:55:84:BA:F9:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a2f431f9-02fa-39f9-918d-cd4915a8898e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae/a1f49b6f-a170-485e-8c07-d518b906c6ae.crl

            X509v3 Authority Key Identifier:
                keyid:5F:D6:DB:12:03:6D:54:0E:FB:5F:55:5F:C1:4A:FC:20:D9:54:A6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a1f49b6f-a170-485e-8c07-d518b906c6ae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:5b:41:2b:03:35:66:a8:a7:bd:c2:47:fb:71:17:60:f8:aa:
         cb:0e:ad:55:8b:64:1e:18:d4:1a:df:36:a3:35:c1:82:14:8d:
         1e:96:e2:00:25:a5:5c:ea:e3:7d:47:00:de:eb:73:f8:90:e9:
         63:08:3a:47:ee:1e:3c:c7:bd:7f:47:f8:be:d7:95:a4:11:b0:
         e3:4d:38:3c:b2:71:1b:d3:79:87:c4:86:f3:d5:ca:11:52:fe:
         56:ed:82:cb:0d:6f:01:b9:bb:a2:a3:67:d9:47:67:97:00:b0:
         18:ed:5b:70:ca:62:4c:7a:51:ba:1e:a0:37:34:dc:f4:a0:b7:
         b0:50:b5:18:f2:ea:3b:46:f6:4d:90:02:66:a0:22:a3:89:ac:
         38:bf:cc:09:54:06:4f:29:cb:e6:02:8b:01:27:a2:16:88:e5:
         bd:68:fe:e1:ce:6e:e1:24:7b:51:80:98:ea:3f:15:f6:77:7f:
         a6:de:b1:f0:8c:87:38:3b:3d:9c:38:e6:49:89:2a:f4:35:a8:
         19:86:e1:1a:9d:fd:c3:4c:f7:8f:4a:25:c3:a0:92:3e:19:83:
         71:e3:29:9d:c6:ad:d0:e9:6d:90:51:c2:9a:ce:3b:14:65:e0:
         cb:17:9b:e4:8f:39:be:86:5f:9a:22:c2:6a:08:2f:80:c5:ae:
         d9:27:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:03:36 2025 by rpki-client