Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6aa721fe-9d06-3a42-b70a-b93295423391.roa
File:                     6aa721fe-9d06-3a42-b70a-b93295423391.roa (raw, json)
Hash identifier:          z4m/Q+pJzbHoR6Qb34gjKsHMMylw12jgJHH1fTa3Cy0=
Subject key identifier:   43:FC:2A:91:A4:C0:B5:E8:2C:56:FB:A3:8F:2D:9B:10:EC:F4:F7:37
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F18010D5CFAF4FB15B7169C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6aa721fe-9d06-3a42-b70a-b93295423391.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397236
IP address blocks:        2610:a1:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:10:d5:cf:af:4f:b1:5b:71:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=e6bc915f-6439-424e-92de-af6b256e8bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:87:79:4c:bc:50:75:3c:7e:eb:97:51:81:d8:
                    12:2b:d4:88:06:c7:d5:58:76:bb:0d:41:42:4a:a8:
                    99:9f:46:83:14:f7:44:da:a0:10:98:26:42:23:9d:
                    db:29:3f:a0:ea:5f:d8:18:9a:61:2c:e4:15:4f:60:
                    2f:3b:b9:1a:87:4a:62:a2:f1:da:a1:e9:cd:38:91:
                    33:88:71:b2:4b:2f:60:d8:ec:92:a2:9e:d2:6b:29:
                    2a:ea:cc:2f:91:e3:29:56:d0:c2:70:89:bb:2c:85:
                    b2:22:26:d9:d4:c7:63:0e:34:6d:a3:ab:09:a9:93:
                    dd:bc:83:dc:c4:45:4a:3d:4a:ab:3a:e1:00:d8:2b:
                    1e:8c:2f:a1:c2:45:76:41:bc:f5:f3:68:51:a8:a1:
                    55:31:fb:b8:62:71:b8:ec:8f:6d:8b:0f:09:24:ef:
                    6d:73:91:84:ab:8b:4b:bd:fb:8b:5b:20:6e:f2:a1:
                    48:fc:b4:2f:be:89:18:54:5c:4d:54:09:40:b9:6d:
                    bf:12:31:3f:f9:44:53:04:e9:db:50:70:f5:52:c1:
                    c6:19:fc:6b:ce:8d:ed:83:a4:f2:82:f3:c7:86:40:
                    53:9f:a7:b0:94:13:d1:52:19:35:30:c0:88:89:2a:
                    eb:b3:ca:e0:40:a4:2c:51:af:4d:28:36:77:94:7e:
                    01:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FC:2A:91:A4:C0:B5:E8:2C:56:FB:A3:8F:2D:9B:10:EC:F4:F7:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6aa721fe-9d06-3a42-b70a-b93295423391.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:2a:0c:16:08:d6:66:4a:c9:26:70:50:ec:fa:44:77:55:7b:
         f8:8a:d4:a0:56:4d:8c:20:5b:7d:6b:6c:5b:d9:4a:03:d0:9c:
         64:e5:7f:dc:97:a3:5c:8b:67:07:88:1f:a3:83:93:ac:8c:46:
         82:74:86:89:ec:b9:aa:5b:48:c2:bd:d2:90:be:04:8d:f5:16:
         87:fe:b4:3b:ab:e6:d0:40:e8:e8:64:9c:59:2c:12:e0:92:16:
         9f:f4:cc:10:8b:9e:5f:72:43:c0:54:b3:25:9c:a9:c2:71:a4:
         6a:5f:e5:a3:c6:07:6f:9b:66:93:bb:5a:97:5c:20:2a:6b:60:
         30:72:b3:bc:de:38:fa:59:52:89:07:be:5c:67:34:47:8e:0f:
         2b:6a:1a:85:ed:e7:db:f1:c9:63:8e:47:5e:58:f9:6b:8e:03:
         1d:0c:e9:10:08:17:9b:6b:d8:eb:e3:f1:4e:c6:11:9b:c3:1a:
         f3:a7:d4:38:ba:b6:52:e6:05:eb:95:3c:e4:0a:61:e2:24:81:
         a7:b1:e5:67:3b:47:7e:80:3e:1b:10:b4:30:09:91:dc:c1:6e:
         94:0f:75:23:a5:3c:7a:fa:23:51:c5:9c:bc:cb:1a:22:20:61:
         e1:20:b3:b2:44:95:f0:86:ef:ed:f3:db:0d:c5:33:35:c7:08:
         30:69:21:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:31:53 2025 by rpki-client