Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/bf7f3f32-7977-3022-acfe-63176d0b6222.roa
File:                     bf7f3f32-7977-3022-acfe-63176d0b6222.roa (raw, json)
Hash identifier:          xTHLbMLCknYhNkqR2fj3SM2pBRBTKIcn2tP6lyqyqms=
Subject key identifier:   60:DB:3A:D6:A3:86:FB:58:CD:62:6C:79:50:51:81:EC:FC:0C:9E:B5
Certificate issuer:       /CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
Certificate serial:       010D0C9F43285849CE9A5A5F7D38C41BA08441C0
Authority key identifier: 2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/bf7f3f32-7977-3022-acfe-63176d0b6222.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     63290
IP address blocks:        2605:c880::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:5a:5f:7d:38:c4:1b:a0:84:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d9e44e-9a2f-4ae3-b80b-550f90f15f64
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=5d1fd427-e639-4e5f-ad60-d06c1bd7b361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e9:25:43:df:d4:28:2d:e2:c3:d2:e8:33:04:
                    00:f4:41:a3:5c:0d:cb:41:17:b4:13:c8:ba:04:0d:
                    a1:0b:6d:25:5f:90:aa:77:55:4d:85:db:b5:1a:ab:
                    0c:9e:70:96:c0:d9:10:cb:0e:9e:8c:db:0c:90:d1:
                    26:75:78:f8:cc:cb:59:67:0b:11:97:9d:bd:9d:da:
                    7c:fb:3f:c3:e2:92:85:28:d4:01:0e:4a:b9:8a:9a:
                    f0:c3:ad:32:ef:7e:e2:fb:5e:90:3a:4e:50:29:1c:
                    f9:2e:a6:a1:84:54:87:e2:9e:aa:99:50:0e:ff:5b:
                    36:27:4b:cf:06:f2:ca:f5:94:a0:c4:68:4e:dd:82:
                    bb:b6:92:4c:fc:9a:2d:99:4c:4d:78:64:0a:ac:f1:
                    74:64:27:b4:80:5e:ce:32:0c:dc:bf:90:fa:14:73:
                    a8:f9:09:2c:c3:38:07:26:92:b8:40:fe:96:32:2c:
                    b6:06:99:d5:01:f9:5e:aa:8f:f2:0c:eb:08:ed:35:
                    ff:49:84:04:b7:52:84:37:9f:e5:d0:a7:3d:1f:c9:
                    45:4b:40:76:21:ea:f3:ef:bb:23:2c:4f:f1:ef:7a:
                    b5:f7:1e:eb:d5:23:16:11:61:d3:21:1f:f7:a6:5b:
                    a8:58:d2:89:5f:1c:34:d6:6a:17:f6:c8:74:d7:65:
                    5d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DB:3A:D6:A3:86:FB:58:CD:62:6C:79:50:51:81:EC:FC:0C:9E:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/bf7f3f32-7977-3022-acfe-63176d0b6222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.crl

            X509v3 Authority Key Identifier:
                keyid:2B:4C:C1:D3:E1:35:EC:85:A4:83:C5:88:B9:DF:2C:74:F9:14:31:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30d9e44e-9a2f-4ae3-b80b-550f90f15f64.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:cb:15:37:9d:5c:2c:18:8e:ef:d6:4d:b7:f2:aa:98:74:e9:
         34:92:28:17:a8:b8:ea:80:28:95:a6:fd:c0:29:10:ff:e8:60:
         38:f6:c6:e9:cd:19:8a:dc:cf:3f:d5:f2:ef:bb:6a:98:6b:20:
         d9:03:46:3a:a3:4e:5b:77:46:20:f9:46:87:73:9c:3a:35:05:
         b6:5f:36:04:80:12:df:77:8b:19:d1:33:12:9a:23:f0:84:6b:
         51:96:aa:59:a8:89:7c:ce:30:d6:f2:f7:33:de:10:32:bf:b9:
         2c:4d:e4:be:ba:dc:0d:4a:46:3c:cb:c7:88:51:b0:33:e3:87:
         77:8e:8b:99:7a:eb:0f:af:32:38:8e:d4:f8:d1:4a:ef:fd:8b:
         0d:a5:cf:7a:d6:e3:d2:08:e5:96:4c:74:56:5d:d5:16:a4:46:
         9d:c7:b6:11:f4:d8:60:ac:c2:c7:74:92:a8:c7:90:df:20:bb:
         18:ec:91:51:aa:9b:a6:05:bb:1f:67:c1:c2:99:9f:0c:6b:b9:
         92:84:bd:d8:1f:8f:18:97:01:c2:0f:3d:7f:de:e1:25:ee:fe:
         47:4c:f1:8a:56:e6:8d:27:25:58:a0:77:7f:38:6e:0d:5e:4e:
         0d:9e:a5:80:c0:d8:f0:50:82:27:2b:03:de:8a:ea:55:8d:0a:
         10:c8:59:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:27:42 2025 by rpki-client