Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3f820480-a79c-33e4-9bf0-e82ff8d04c83.roa
File:                     3f820480-a79c-33e4-9bf0-e82ff8d04c83.roa (raw, json)
Hash identifier:          aruv4UbcGLBowQdHRuDpAbRdvrlKb7JQkgbegMUiO5g=
Subject key identifier:   6E:03:8D:5C:25:84:ED:43:EC:F5:69:2E:E6:E0:B0:D4:BC:8A:10:7A
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584A18954846CE73814C25845100
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3f820480-a79c-33e4-9bf0-e82ff8d04c83.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     30133
IP address blocks:        2001:500:62::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:48:46:ce:73:81:4c:25:84:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=65684be6-d356-40f2-abab-3c999536dcd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:46:93:9f:be:d0:20:14:81:48:52:6b:79:dc:
                    b8:90:10:0a:a8:69:8d:21:fc:e6:6e:71:23:e7:59:
                    90:15:d2:29:51:d3:fc:29:4b:00:af:8e:bb:ca:8a:
                    ce:88:95:ea:99:7f:8f:23:b4:47:93:ed:61:40:ee:
                    a8:a7:48:ed:3c:46:4e:42:97:d8:39:ca:e8:3b:ff:
                    42:bb:39:53:bd:2f:43:b6:ce:eb:2e:a0:b7:8d:3b:
                    90:07:a7:d0:17:b8:6d:95:5c:46:80:b4:a8:eb:4e:
                    a4:5e:d2:78:01:96:45:ca:36:5b:a8:47:97:31:55:
                    a3:d3:e8:d4:4f:a9:e6:f8:b2:24:a4:01:82:e9:ed:
                    60:78:09:d2:4e:29:bd:9e:8b:f7:95:cc:24:58:fa:
                    e5:69:77:ee:7e:bc:b8:12:54:ab:b6:99:b9:f5:9f:
                    85:98:e4:13:63:34:38:20:db:7f:b2:38:66:23:04:
                    28:87:10:a0:e4:28:f0:42:40:c6:13:57:2a:ca:53:
                    19:12:0f:b4:0d:3f:06:6b:c9:f4:56:15:cb:2d:f0:
                    65:bf:cb:47:70:ab:5f:2c:c8:67:01:47:0d:b0:1a:
                    4f:3d:0a:13:d5:3d:8c:1f:88:ac:42:3a:4e:14:08:
                    3b:2c:17:99:de:1b:8d:35:99:be:d2:42:25:55:be:
                    c2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:03:8D:5C:25:84:ED:43:EC:F5:69:2E:E6:E0:B0:D4:BC:8A:10:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3f820480-a79c-33e4-9bf0-e82ff8d04c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:62::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e5:ca:da:d3:31:0c:39:09:34:83:07:36:88:3c:a8:a1:5e:
         1b:30:d3:74:6d:95:1e:1d:c4:38:77:88:42:8b:ee:e2:bc:15:
         9f:9c:ab:9e:28:f3:55:a4:f2:fe:ff:8c:08:57:59:bb:f7:32:
         f1:07:b5:da:46:0a:0b:f9:6e:95:55:e4:5c:6e:29:bc:c8:9f:
         f6:44:a0:1e:19:f2:1a:58:dd:79:9f:bd:98:48:23:f6:01:f1:
         ff:8c:f3:f3:53:52:1e:2e:a5:5b:cd:41:85:c0:72:72:63:c0:
         5f:8b:8a:a9:22:48:59:92:f6:ce:1a:f6:57:28:8e:da:49:4c:
         a0:30:eb:7c:dd:5b:dd:f7:ea:cf:1b:47:91:09:94:a0:b8:ad:
         ee:1b:cf:ba:0e:57:3f:db:1b:67:1c:49:da:45:8a:56:e1:71:
         f0:c6:fe:78:b8:ed:25:49:ae:61:9b:5e:80:b0:e3:33:36:1f:
         ec:1d:22:68:de:43:b9:46:72:56:46:df:f0:24:3a:08:ad:2f:
         d9:b9:8f:09:c6:4b:8c:e8:cc:cc:88:99:c6:d1:bb:69:04:bf:
         23:5f:1c:1f:57:1d:44:ac:72:07:c3:e8:7b:ab:0b:1f:b3:d4:
         2b:b4:d4:c4:57:27:78:51:bf:7a:81:10:cb:4f:e9:ac:79:cf:
         9e:fc:bc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:04:59 2025 by rpki-client