Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa
File:                     a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa (raw, json)
Hash identifier:          2m/IHNKsh84ceDANjaKRobPffHzYdCo63+7FGnvcapY=
Subject key identifier:   60:68:78:8B:09:92:EA:76:70:BE:D0:22:80:13:5E:65:B8:BE:07:92
Certificate issuer:       /CN=511ed25c-3ac7-4d86-9290-879e3813322e
Certificate serial:       010D0C9F43285849CE9A63D9EAE15EACB8573960
Authority key identifier: BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     13325
IP address blocks:        2620:167::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:63:d9:ea:e1:5e:ac:b8:57:39:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=511ed25c-3ac7-4d86-9290-879e3813322e
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=81ea9437-16a6-48a2-9a95-40cbf9687967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bb:c9:4b:99:27:2b:f3:90:2c:65:e4:7c:90:
                    c5:01:a7:66:b7:02:b4:67:0b:c7:e9:d7:9d:22:be:
                    25:95:9b:f8:37:a7:ea:7f:7f:0b:90:05:97:22:86:
                    6a:45:92:5d:29:5d:98:ed:ac:b8:df:43:bb:ff:40:
                    ae:8f:38:57:58:2b:02:8c:00:a6:50:c9:38:c9:ca:
                    6f:d7:c1:bc:a2:72:ff:4b:74:b1:99:ca:c7:73:a2:
                    de:c4:b7:c6:d0:f0:36:0a:df:c6:25:fe:01:de:5e:
                    bf:c3:95:1e:d4:f2:d7:47:b6:54:b1:0c:20:90:f1:
                    86:44:20:1d:33:ea:89:99:64:66:25:2c:29:da:72:
                    6d:bb:ea:75:6b:95:4b:ff:a9:57:2f:22:41:eb:63:
                    65:62:02:3c:11:51:e6:0a:e2:cb:4a:06:9e:6b:00:
                    de:bf:4b:fe:36:dd:4b:9a:fd:a9:b3:8c:64:f0:6a:
                    38:aa:07:5b:37:ed:7e:7f:90:58:4c:14:ec:2f:17:
                    8a:83:4b:76:a3:40:f6:e2:dd:9b:ae:2f:df:5a:57:
                    ec:df:10:24:a6:c8:71:30:15:80:fc:15:08:a8:3a:
                    8d:da:cc:ef:b4:13:20:b1:9c:ff:b7:6c:5d:4d:55:
                    93:fd:85:03:9b:19:e4:b0:a3:fc:06:97:5c:7b:3f:
                    c2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:68:78:8B:09:92:EA:76:70:BE:D0:22:80:13:5E:65:B8:BE:07:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl

            X509v3 Authority Key Identifier:
                keyid:BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:167::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:63:d4:0e:7f:98:74:89:af:44:fd:f1:13:ac:d4:68:d1:63:
         a4:1d:7d:23:ba:14:9b:6e:f3:c7:41:a6:bd:0d:bd:91:89:e7:
         29:8a:e5:78:c8:be:82:7a:43:84:72:ca:ed:17:da:19:69:7c:
         cc:1d:3b:a9:02:92:f5:7a:e1:6b:7f:ef:4c:6b:62:25:27:f4:
         cb:96:42:2b:ad:7c:8b:e7:82:c7:50:69:27:7c:48:20:17:cb:
         65:2e:8b:36:fe:fb:47:ac:d8:8c:25:b6:91:c4:81:6f:63:64:
         e2:37:70:8c:28:3a:af:a7:f4:48:85:c4:3d:77:c5:73:a5:19:
         94:22:21:46:94:89:01:77:81:e5:a0:5b:02:80:cc:57:d8:4e:
         b2:98:49:0d:2c:b1:fc:f5:23:ec:b8:d1:24:2a:b3:9d:0a:13:
         ce:c9:83:25:73:d4:4b:9e:1d:1e:12:9a:21:0f:6c:e2:31:d7:
         85:26:dc:b6:b9:56:04:af:5b:35:ec:c5:cc:85:40:4f:91:b0:
         96:10:e0:30:08:60:8f:f4:4c:f8:cc:b1:c5:08:38:ea:e9:80:
         f7:51:4c:25:95:5c:74:19:c8:15:aa:54:33:4c:9d:de:57:30:
         9b:ef:9c:20:42:5f:44:36:ef:89:0b:37:d8:79:e3:ee:12:35:
         e8:d7:a1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:43:09 2025 by rpki-client