Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/878804ae-2c92-32cf-a079-f9b1123410d3.roa
File:                     878804ae-2c92-32cf-a079-f9b1123410d3.roa (raw, json)
Hash identifier:          wt3OyLEGPolI+mUM7tFmN652xdVbHPznzuZ6yTot4J8=
Subject key identifier:   A7:1F:E7:52:58:C3:34:47:D8:8B:ED:71:80:D1:8D:D3:59:D7:2E:4B
Certificate issuer:       /CN=95461742-42f0-4cce-8182-baf4cdd0bf5d
Certificate serial:       010D0C9F4328584A366635681E12E5AE80B9D200
Authority key identifier: F9:FA:06:67:CA:72:8E:83:22:19:F0:C1:E4:03:6E:D5:98:B6:03:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/878804ae-2c92-32cf-a079-f9b1123410d3.roa
Signing time:             Mon 16 Jun 2025 17:20:21 +0000
ROA not before:           Mon 16 Jun 2025 17:20:21 +0000
ROA not after:            Sun 14 Sep 2025 17:20:21 +0000
asID:                     393657
IP address blocks:        2620:13b:a000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/95461742-42f0-4cce-8182-baf4cdd0bf5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/95461742-42f0-4cce-8182-baf4cdd0bf5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:66:35:68:1e:12:e5:ae:80:b9:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95461742-42f0-4cce-8182-baf4cdd0bf5d
        Validity
            Not Before: Jun 16 17:20:21 2025 GMT
            Not After : Sep 14 17:20:21 2025 GMT
        Subject: CN=fcfd9668-60af-42a4-a6a4-ff5271a7811c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:59:7c:4a:8c:fc:07:30:8a:74:83:43:85:2b:
                    3e:3c:ee:51:3a:3b:fc:4e:f4:cc:2b:3a:96:7a:0a:
                    51:c4:eb:f6:c2:ec:44:d6:52:1e:41:13:78:b2:8f:
                    a3:38:e1:a6:56:88:41:c4:71:22:33:65:f9:e3:39:
                    62:7b:6f:a8:2d:aa:d6:fe:99:37:51:bd:1d:ed:49:
                    99:e3:ae:d7:06:5f:e2:38:43:e5:f2:24:9f:a3:f8:
                    df:45:7a:a4:f6:df:df:5f:df:b5:59:73:2d:f4:55:
                    a4:14:e9:3f:c2:82:5e:b4:92:7d:44:4c:f8:da:af:
                    dc:81:20:1e:d5:ad:6b:38:1b:b2:75:c7:e8:6e:58:
                    5e:db:cb:a4:59:a8:f9:4e:88:46:b6:d7:b1:43:9c:
                    4b:95:68:6e:5f:56:0f:66:98:ef:79:5f:08:87:c5:
                    24:09:93:8a:0d:62:ec:ab:e4:24:39:f9:45:f2:db:
                    06:d3:89:77:bf:54:16:5d:f6:ca:23:a2:f3:c6:63:
                    e8:5b:12:88:29:6a:f3:5b:39:09:dd:91:d4:f6:b1:
                    9f:13:65:80:c0:e5:c2:d4:35:45:80:51:97:c9:18:
                    1f:62:01:40:03:33:83:4f:48:bd:11:e0:71:92:7f:
                    13:02:13:89:99:41:4d:10:5b:cb:94:83:16:0f:e2:
                    56:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1F:E7:52:58:C3:34:47:D8:8B:ED:71:80:D1:8D:D3:59:D7:2E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/878804ae-2c92-32cf-a079-f9b1123410d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/95461742-42f0-4cce-8182-baf4cdd0bf5d.crl

            X509v3 Authority Key Identifier:
                keyid:F9:FA:06:67:CA:72:8E:83:22:19:F0:C1:E4:03:6E:D5:98:B6:03:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13b:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:5e:7d:4f:e1:23:70:94:96:40:b8:b6:cd:30:bb:13:3a:b2:
         15:2c:3a:52:c3:27:a0:32:9e:8b:f1:a8:3a:a0:6e:86:75:ba:
         91:9e:b5:e0:0d:5f:1e:80:80:6f:39:35:e0:10:30:c7:dc:8a:
         77:00:02:71:10:d3:52:53:d0:9e:60:22:05:bb:9b:88:66:20:
         29:f1:dc:ff:03:c3:ce:bf:5e:ff:2b:b1:ca:b9:d3:cf:7d:ad:
         84:5a:15:f5:15:4b:0f:94:54:fa:91:09:e0:1f:75:76:93:cc:
         a4:1e:24:a7:81:e4:dd:68:9e:d7:2c:a5:51:d5:46:c6:91:e0:
         e6:73:ab:a8:3b:f6:61:aa:23:3d:90:48:03:80:0c:8d:42:6b:
         2c:0b:f3:ff:5a:58:51:12:5e:78:8c:89:ce:71:d8:ff:fd:a3:
         38:b6:01:9b:18:79:48:eb:82:fe:b3:be:62:b7:76:b4:5a:c9:
         fc:73:35:ca:a4:40:f4:0a:2b:82:b5:83:f3:27:ff:b1:f5:dc:
         bc:4a:15:a1:0f:a5:ea:71:f6:10:f7:b1:5a:7f:b1:0e:28:52:
         47:54:99:7a:ac:f9:be:a2:86:f8:ed:7e:66:6c:92:17:d5:6c:
         3a:3a:d5:41:36:a4:52:fa:c2:7b:b7:4d:f6:5c:51:1d:2e:06:
         bb:32:af:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 10:58:45 2025 by rpki-client