Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/d7cfdab0-5e01-3037-91c8-ccf76246a6ca.roa
File:                     d7cfdab0-5e01-3037-91c8-ccf76246a6ca.roa (raw, json)
Hash identifier:          yvAhuP6g3YnuAOVv02ipAGpA6hXR6BxrHkvGZwRZVbo=
Subject key identifier:   B1:51:E7:81:85:7D:D3:EA:E0:B1:65:78:C0:2A:40:EC:76:9C:9E:E4
Certificate issuer:       /CN=618a40c8-2175-4e55-926e-6516ce21ec74
Certificate serial:       010D0C9F4328584A2EB00F45D630E085CE2F6D00
Authority key identifier: 62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/d7cfdab0-5e01-3037-91c8-ccf76246a6ca.roa
Signing time:             Fri 13 Jun 2025 23:02:41 +0000
ROA not before:           Fri 13 Jun 2025 23:02:41 +0000
ROA not after:            Thu 11 Sep 2025 23:02:41 +0000
asID:                     398032
IP address blocks:        2620:1d8::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:b0:0f:45:d6:30:e0:85:ce:2f:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a40c8-2175-4e55-926e-6516ce21ec74
        Validity
            Not Before: Jun 13 23:02:41 2025 GMT
            Not After : Sep 11 23:02:41 2025 GMT
        Subject: CN=890d2790-9d4a-427f-a0f8-b64e5cc9660e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e0:c0:6e:e3:30:74:cf:5e:b3:eb:7a:c1:c2:
                    ac:dd:60:dd:2f:e3:30:0d:89:8f:41:eb:30:b4:3e:
                    e1:70:d1:6e:32:1c:90:ad:4a:8e:eb:f3:00:55:75:
                    f5:d7:34:7c:76:56:25:ca:69:e9:23:ae:9c:71:1c:
                    6a:8b:4c:18:3a:36:54:16:a3:ef:93:e6:3b:17:35:
                    fa:0c:41:a0:88:f3:84:79:1b:89:af:28:df:3a:14:
                    a9:85:58:38:08:37:18:ad:91:83:c6:41:d6:fc:3d:
                    30:1f:d4:e7:c5:ca:24:ef:3d:53:e1:a1:b0:2a:91:
                    81:85:92:e9:4d:37:8b:08:69:49:41:44:2f:7b:4c:
                    71:4b:12:5b:72:c6:1d:b4:c5:b8:cc:39:12:42:35:
                    3c:96:07:56:d4:89:2e:11:d5:4f:b7:74:5c:06:b3:
                    47:fd:da:6f:36:52:27:0b:46:59:88:a2:94:9e:f5:
                    49:cc:4a:d7:57:01:b2:e2:0e:5d:1f:b2:95:86:b4:
                    85:15:42:d0:90:bd:fc:27:f9:35:c3:2d:46:8b:4e:
                    1e:34:d5:a9:c7:f4:e3:3f:aa:a2:28:2e:80:eb:ff:
                    49:d0:11:7d:2d:e6:a3:da:07:dd:b4:74:2d:d1:43:
                    0b:9e:b1:7b:a6:b3:c4:ab:d3:32:63:37:87:78:8a:
                    60:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:51:E7:81:85:7D:D3:EA:E0:B1:65:78:C0:2A:40:EC:76:9C:9E:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/d7cfdab0-5e01-3037-91c8-ccf76246a6ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl

            X509v3 Authority Key Identifier:
                keyid:62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e9:4c:13:ae:65:41:26:16:f7:ca:fe:95:e0:aa:ce:e2:ef:
         9e:70:56:5d:a7:25:e6:73:a7:f7:a2:1b:1b:f1:c7:c7:ed:8b:
         16:b4:e2:59:c5:03:3d:6f:af:0d:02:8d:5b:01:6b:06:b0:9d:
         f3:72:d8:44:3f:16:5c:83:72:4a:0b:56:ec:e2:6b:1a:df:60:
         df:9b:e7:40:b5:4a:e1:7a:50:29:79:ad:05:9f:74:fd:36:4c:
         03:1c:77:1b:57:b6:15:0b:b6:ad:96:c9:bd:86:5d:93:97:47:
         7b:07:48:6c:a1:c1:73:62:a5:4e:03:90:5d:0d:aa:3f:76:9f:
         2e:86:11:24:85:af:ee:3c:5c:74:e7:56:65:f4:c3:7a:a3:2a:
         d9:e3:6b:67:a1:06:51:c5:3a:1a:62:d8:c4:cc:d4:31:1e:c0:
         f4:71:25:b1:9e:3e:9e:fe:6f:7c:ff:f1:d6:fb:a8:0e:51:fe:
         7b:bf:0c:0e:8a:54:81:a8:40:eb:8f:42:17:56:d2:e7:dd:c9:
         31:0b:d4:f4:76:94:bc:b4:39:d7:65:58:b3:f5:32:bb:89:50:
         47:7c:0a:4c:a9:a3:65:98:61:6f:0a:0b:74:f3:5f:23:13:00:
         bd:c5:1e:55:83:29:3a:34:46:38:c2:26:f5:d5:d7:63:32:79:
         d6:65:5c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:19:24 2025 by rpki-client