Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/f85e5abc-3d60-36c5-863e-b7fef14de2d0.roa
File:                     f85e5abc-3d60-36c5-863e-b7fef14de2d0.roa (raw, json)
Hash identifier:          6eatY61wpPBqh/s/VKxSa7sPt98Vckq30Vw6hukp9IM=
Subject key identifier:   A5:51:CB:32:BA:34:78:34:CE:FC:4C:11:8B:D7:94:15:6B:49:B4:74
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F43285849C20A06123B46D027E0F33300
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/f85e5abc-3d60-36c5-863e-b7fef14de2d0.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     398395
IP address blocks:        2606:fc40:40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:06:12:3b:46:d0:27:e0:f3:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=d6905fd9-0f26-438d-92b2-a17c2520b214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:8a:bf:1b:78:2b:4e:77:62:32:38:a9:d2:
                    c7:84:9e:ec:15:51:1f:fa:a3:04:2c:88:08:6a:64:
                    d9:53:a1:25:62:d8:af:ef:4e:9b:8b:c7:67:7c:fd:
                    01:bc:37:29:d4:c7:f1:91:95:b2:79:fe:28:9e:9c:
                    2a:55:ad:d8:bc:cb:c0:c8:86:ec:91:81:a5:f8:9d:
                    82:70:72:4a:0c:d3:66:56:7b:c2:cc:3c:af:f6:af:
                    76:b8:ae:05:12:22:33:34:89:8b:38:5c:f6:54:af:
                    e7:01:30:80:53:ae:2a:1e:84:aa:81:3c:fd:cb:8a:
                    0f:be:b6:3f:ff:1c:be:28:86:e5:cc:82:63:b6:37:
                    52:b0:10:cf:2e:c2:ce:72:e0:5f:23:ec:4f:95:59:
                    a0:49:99:7c:dc:73:79:d6:86:14:21:bc:4a:06:c1:
                    87:f2:66:88:73:fe:5f:17:17:9b:3e:86:3d:ac:ba:
                    55:63:4d:20:63:25:05:87:bf:d7:ff:7e:00:27:af:
                    f7:6f:c9:c6:ee:77:07:38:d7:d5:dc:f4:7e:85:c7:
                    6c:b7:65:02:69:e7:74:c9:d2:39:e7:00:ef:c6:bb:
                    7e:8b:5b:1e:1f:ba:d4:d1:1c:3b:8d:70:8c:e3:b8:
                    a4:64:2d:92:04:43:26:71:f9:eb:57:89:dd:cb:06:
                    20:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:51:CB:32:BA:34:78:34:CE:FC:4C:11:8B:D7:94:15:6B:49:B4:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/f85e5abc-3d60-36c5-863e-b7fef14de2d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fc40:40::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:44:23:25:87:5c:b7:37:91:5b:6e:d4:2a:3a:27:5e:f8:45:
         62:d9:f1:1c:d6:c5:ad:41:a1:7e:b2:1b:29:64:ed:d2:14:26:
         b2:17:41:d9:3a:a5:47:26:ab:39:b3:22:97:97:35:e5:96:e8:
         92:28:92:9b:fa:2a:88:43:17:18:63:b9:bd:c6:cf:3f:b9:94:
         10:13:ff:bb:78:ef:d8:1d:05:9f:cc:bf:d4:5e:a6:1c:2c:ba:
         69:c2:f1:c8:c5:e1:77:ce:16:bb:72:7a:58:bf:1c:11:10:3f:
         51:5f:03:76:e4:de:72:04:2e:74:e3:f2:a8:df:d9:bf:56:f3:
         1d:9d:02:83:3a:35:96:9c:8c:22:e2:7f:63:32:21:21:e6:11:
         1a:81:b1:3f:59:05:e7:10:18:90:58:2e:7f:43:ce:ff:fa:51:
         90:0a:10:35:a7:3f:0d:34:39:6f:8e:26:ec:a4:65:fc:7a:21:
         ef:ec:62:97:2d:a8:95:a2:50:48:90:c9:a5:32:2c:e1:7d:b3:
         e6:65:ca:e4:25:93:86:84:29:0e:3d:f6:7d:6b:48:57:02:e3:
         34:51:5e:b1:6a:46:7a:19:eb:1e:70:a4:e2:c4:80:34:85:e9:
         13:71:27:02:4d:8c:74:e5:08:c4:64:64:a2:1e:30:30:e5:3e:
         cc:26:96:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:27:59 2025 by rpki-client