Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/30b8917d-b7de-3085-9375-fdf3c9052747.roa
File:                     30b8917d-b7de-3085-9375-fdf3c9052747.roa (raw, json)
Hash identifier:          Kn97c9TVIJMR5J+N7HE6e9WohJSOFyPKRPZvoqJKemY=
Subject key identifier:   6F:78:F5:06:F2:52:D4:71:AE:FB:E4:B2:06:86:5C:7E:80:97:8A:59
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F432858495C2446E7BD6D7BCA89137380
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/30b8917d-b7de-3085-9375-fdf3c9052747.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     26383
IP address blocks:        2605:e440:25::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:46:e7:bd:6d:7b:ca:89:13:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=3ee6a115-4716-48e9-949a-99a4af26bf94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:81:20:df:76:eb:d0:14:5c:a1:40:9d:1a:f6:
                    0e:28:15:c3:77:f3:c4:a3:1c:8f:e9:a5:f7:9f:33:
                    d2:9b:3a:24:66:86:78:8c:a2:51:72:bd:dd:ab:16:
                    09:b9:dd:32:48:80:e4:5f:26:5a:3f:f9:6d:d9:41:
                    39:5a:98:9a:86:62:ec:cb:15:4f:af:7f:f0:08:ed:
                    22:51:1c:1f:b4:71:8e:2a:81:26:72:3e:2c:46:f7:
                    a4:2b:87:57:24:c3:df:52:0d:05:19:a2:a3:04:8c:
                    f7:91:49:c5:f8:1b:dd:eb:55:4f:24:cc:a7:09:a7:
                    0c:59:01:e3:d1:46:da:e0:f9:f1:1e:bc:eb:94:b9:
                    51:77:30:82:40:45:d1:70:41:95:78:bc:e6:2d:5c:
                    1f:81:39:ce:00:de:d5:73:24:f0:fb:67:88:cd:0c:
                    64:ab:25:d7:86:42:91:07:70:11:3a:77:56:67:26:
                    b1:a3:6d:d9:98:76:75:10:3f:e8:83:7f:cc:2f:08:
                    01:d6:9d:16:29:bc:e4:03:32:8e:b2:20:2e:3e:a6:
                    f2:a5:f5:ec:cb:37:b9:1b:e8:a8:45:97:c4:e0:0a:
                    62:30:e5:42:08:3e:02:11:4e:a6:94:61:a9:32:cd:
                    8f:7e:e3:af:ed:ef:85:7b:1f:2a:eb:50:57:f9:fd:
                    8c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:78:F5:06:F2:52:D4:71:AE:FB:E4:B2:06:86:5C:7E:80:97:8A:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/30b8917d-b7de-3085-9375-fdf3c9052747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:25::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e5:ba:30:98:a5:ea:62:d4:b2:c9:4b:75:fc:29:9a:52:4c:
         90:e3:56:78:34:f5:f6:df:68:7c:4a:97:f8:8c:f8:7c:d4:66:
         77:48:d2:01:c6:0c:ca:8f:28:81:fa:e2:3c:a1:c7:38:a2:05:
         bb:62:ac:6a:98:92:e9:6d:ec:74:44:47:5d:04:17:13:d4:2d:
         8c:ae:ea:c3:4d:8b:f3:71:3b:70:2f:38:e9:85:3d:bc:ce:eb:
         b8:17:7c:42:a3:ef:01:52:30:6c:5c:ac:37:5a:aa:d9:8a:82:
         d4:46:8e:92:20:94:24:ac:08:e8:f5:f5:c3:96:b6:26:4c:75:
         5d:dc:43:f7:9a:7a:3e:ce:5b:4b:14:38:ac:1d:02:82:2b:6a:
         ab:46:26:94:7e:f9:d2:2b:c3:da:98:4a:8b:99:96:f3:73:c4:
         76:0d:a5:49:48:7a:bc:ad:34:4d:4b:46:5f:da:3a:11:19:8e:
         11:a6:5b:9e:4c:f9:ea:0e:5c:4c:4e:5f:ee:72:92:5b:21:d8:
         ff:fb:e7:0a:46:7a:03:e6:1f:d4:2a:fd:81:4d:6d:74:6a:83:
         44:1a:29:d3:43:ba:cd:6f:39:17:7b:cc:e6:3f:5e:be:32:97:
         07:de:b2:51:05:9a:cb:36:00:b3:0b:13:41:a5:20:0b:1b:51:
         4a:84:c4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:35 2025 by rpki-client