Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/d4768484-b745-3f39-a4e8-08939a0ff42d.roa
File:                     d4768484-b745-3f39-a4e8-08939a0ff42d.roa (raw, json)
Hash identifier:          Eo0SHMZi6CYJ4/XuwIF92EcMGgo/iPqUCuDKauf+/bc=
Subject key identifier:   E5:02:FF:F4:4C:3D:54:A6:0A:22:D9:99:44:B7:1F:96:B2:FC:2E:82
Certificate issuer:       /CN=036b2dbb-e7db-4b60-b1d9-949d2edba6fe
Certificate serial:       010D0C9F43285849CA6A0E78588C7D75DD521E80
Authority key identifier: 4F:10:4C:3F:94:5F:DB:EB:A3:61:DB:19:DB:7E:DA:ED:96:69:91:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/d4768484-b745-3f39-a4e8-08939a0ff42d.roa
Signing time:             Fri 09 May 2025 01:00:47 +0000
ROA not before:           Fri 09 May 2025 01:00:47 +0000
ROA not after:            Thu 07 Aug 2025 01:00:47 +0000
asID:                     400387
IP address blocks:        2607:6340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ca:6a:0e:78:58:8c:7d:75:dd:52:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036b2dbb-e7db-4b60-b1d9-949d2edba6fe
        Validity
            Not Before: May  9 01:00:47 2025 GMT
            Not After : Aug  7 01:00:47 2025 GMT
        Subject: CN=b5ae1782-20aa-4e94-b2b7-1771446ffe62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:93:36:2d:29:d1:36:83:d2:9c:3e:ea:f2:ea:
                    d7:15:de:40:ca:9c:bd:85:76:f6:be:35:12:b3:cf:
                    6c:5d:9d:33:8d:68:b5:1c:4d:16:d1:8c:f6:2c:64:
                    6c:45:90:7f:b3:88:ff:dd:63:cb:ee:88:bf:fe:2f:
                    7c:95:ef:03:f6:44:69:b3:db:8b:a5:99:3f:0f:27:
                    83:f8:4c:05:3f:59:3c:49:5b:46:b2:f5:e7:96:1f:
                    b2:5a:e8:18:43:1b:22:b4:d8:9e:ef:88:aa:93:56:
                    7b:a9:34:cd:80:e6:85:cb:1c:e9:63:03:71:80:21:
                    44:97:16:29:63:e4:44:d2:f5:68:4a:9e:05:ff:71:
                    1d:68:87:ac:15:02:50:ac:0a:06:94:47:25:59:46:
                    c0:c2:09:fb:75:e5:1a:c3:84:8e:86:5e:23:48:1f:
                    8b:0c:4e:89:a4:5e:a6:78:81:0b:3f:ff:59:44:ba:
                    9b:36:69:55:9c:d6:55:42:7d:b4:43:95:50:f9:2b:
                    ac:72:74:b2:32:d8:de:a2:23:f1:75:d1:55:34:6d:
                    7a:88:56:3c:87:a1:76:be:32:79:12:a9:b3:d4:37:
                    60:ae:b0:37:1f:0f:94:0a:98:71:9b:2d:88:50:d8:
                    e9:51:85:3a:1e:30:61:ac:16:bb:71:b3:a3:d6:36:
                    aa:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:02:FF:F4:4C:3D:54:A6:0A:22:D9:99:44:B7:1F:96:B2:FC:2E:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/d4768484-b745-3f39-a4e8-08939a0ff42d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.crl

            X509v3 Authority Key Identifier:
                keyid:4F:10:4C:3F:94:5F:DB:EB:A3:61:DB:19:DB:7E:DA:ED:96:69:91:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:fc:c8:3f:6a:ea:2a:eb:35:02:9d:b7:ef:df:aa:06:14:cc:
         11:b1:57:1d:3e:cb:76:65:b5:34:11:dc:84:bb:e7:28:3a:d5:
         d6:46:d0:48:76:cb:74:ea:c2:ac:f9:e8:8b:90:db:ce:ac:02:
         a5:c7:98:f3:ff:b0:ab:87:f5:d8:ee:8e:8b:8e:d2:a5:65:74:
         3c:66:18:ad:85:fd:1c:3b:9e:84:30:e5:24:d1:a0:86:d8:cb:
         0c:3d:73:e8:d5:73:73:96:7e:06:75:79:56:f5:a9:a7:f4:9b:
         32:68:11:35:19:c6:cf:17:f9:79:6f:54:5f:5e:8d:25:f3:cc:
         7d:58:05:f2:2e:fb:7a:38:57:13:e4:7d:fc:89:a3:55:ec:41:
         00:bf:3b:ee:20:9a:31:43:d9:f9:03:33:e2:c3:ee:1b:e0:b1:
         35:df:2e:9f:0e:c9:59:57:fe:06:da:c6:18:bb:6e:cf:0e:14:
         78:c3:61:51:70:e3:9e:52:92:59:58:32:90:52:2c:86:03:5d:
         ea:e6:20:1b:77:03:12:23:8d:ba:b6:17:21:75:1e:db:ed:34:
         5b:5e:ba:39:ca:53:02:53:ec:31:81:6e:08:4a:c6:0d:66:94:
         ad:eb:a7:a3:11:71:40:f1:c5:10:a6:87:2f:f5:e8:03:3f:ad:
         e5:12:d5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:04:13 2025 by rpki-client