Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/c6bd5e97-af33-328f-9bf6-adfad89ec417.roa
File:                     c6bd5e97-af33-328f-9bf6-adfad89ec417.roa (raw, json)
Hash identifier:          hTAjhtF1ILAjkEYLLHQ11RQ2t70egq7nsLon8udhaFI=
Subject key identifier:   74:06:C0:19:D0:F3:F7:1E:A3:AB:69:58:48:B8:C9:0D:F4:83:EB:6A
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584A268AB13F20379B1D8EEC9800
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/c6bd5e97-af33-328f-9bf6-adfad89ec417.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     40568
IP address blocks:        2620:10a:80bb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:b1:3f:20:37:9b:1d:8e:ec:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=2f1d7c95-bb10-4113-93cc-08c828be063b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1b:7a:22:f2:f4:b4:d3:8e:00:cd:2a:d9:1c:
                    16:03:27:ba:97:87:33:c6:2d:44:08:12:30:a8:4f:
                    13:46:ca:73:e2:64:49:75:f4:f9:92:bd:4c:a4:b2:
                    bd:cf:e8:87:af:a1:1f:93:51:5c:6c:8d:12:d8:d1:
                    ea:8d:7e:f2:dc:4f:30:5c:3e:9e:c7:30:d9:af:2b:
                    db:d9:fb:b0:59:fc:7b:38:a2:74:51:8f:9f:1c:97:
                    16:67:07:af:a4:fa:0f:c0:6f:9e:91:16:b8:29:72:
                    80:22:81:61:c0:c5:6d:46:98:e0:1a:51:14:59:75:
                    da:29:00:8f:39:dc:7f:ff:35:b7:f5:d3:2f:5a:34:
                    f5:f4:27:3e:84:42:f0:fb:6b:1b:27:0e:9c:af:3d:
                    ab:ca:8b:99:b3:d1:82:6e:b2:a9:56:65:bc:78:66:
                    7e:a3:ae:3f:fd:5c:83:b3:89:0f:d1:04:3c:2f:d1:
                    a4:74:16:09:a8:03:9a:78:39:93:26:e8:16:79:15:
                    f4:0e:8d:b8:f6:87:11:91:6f:8f:39:44:03:b3:f6:
                    21:51:8a:4a:02:1a:a6:c0:85:7f:20:e0:d1:a5:6d:
                    33:a4:74:fd:97:a8:7c:50:63:3d:e2:ce:7c:1e:6f:
                    47:67:04:1d:3b:8e:fa:a7:02:3d:53:67:c6:0b:3d:
                    41:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:06:C0:19:D0:F3:F7:1E:A3:AB:69:58:48:B8:C9:0D:F4:83:EB:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/c6bd5e97-af33-328f-9bf6-adfad89ec417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:80bb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:80:59:23:0c:82:6e:94:53:51:d3:07:2f:d3:28:12:e5:c1:
         68:9a:a7:8f:42:0c:ee:40:df:af:ef:5f:02:ca:45:4d:61:e5:
         97:4b:05:af:72:49:93:05:50:e7:f5:4b:d2:d6:27:fa:11:c1:
         99:23:f2:af:2d:84:de:89:10:73:35:1a:84:c5:55:48:0d:67:
         04:e6:4a:8a:09:0d:5e:2d:35:bb:72:64:9e:2e:b8:4c:6a:e9:
         01:35:09:af:c2:54:c7:76:2c:e6:50:6f:18:c6:8e:66:e6:40:
         8e:0a:28:a6:12:0d:2e:e7:a7:45:e4:95:06:4f:6b:59:d6:c4:
         84:d4:0c:07:d4:6f:ee:f2:1d:1b:66:71:57:54:8b:eb:9e:c2:
         53:fd:0b:fc:6b:f2:24:e0:de:09:49:6c:d2:03:4b:00:5d:1d:
         70:d6:b4:42:03:d0:6b:24:5c:5b:6a:3b:c9:16:a0:42:df:ff:
         28:3a:ad:fc:1f:22:80:59:a0:92:6e:17:9f:45:33:8f:e7:0d:
         bd:a8:d4:88:67:6a:3f:72:80:c2:8e:ec:97:2b:02:aa:03:82:
         74:58:24:22:95:ed:5c:5e:0d:2f:0d:9f:15:f8:87:ca:4f:00:
         e6:e3:1c:3b:ae:1b:66:62:d8:82:57:80:39:2d:b5:ac:60:23:
         96:04:d1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:29:10 2025 by rpki-client