Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa
File:                     c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa (raw, json)
Hash identifier:          zgQRnci3aNk/N06EGNVSY5x6RJV+/4fg9i2y1SASKtY=
Subject key identifier:   2A:63:9E:DA:2E:F8:0D:0E:EE:07:27:C2:27:52:EB:32:FF:85:0E:18
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584A29555A83265E076812E49700
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     33083
IP address blocks:        2001:4830:c400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:5a:83:26:5e:07:68:12:e4:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=974c0b92-46b7-4c4d-a060-266d4b417f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:91:f6:4c:80:ff:30:09:c1:23:ef:30:ef:
                    ca:bf:1a:58:1d:5f:74:09:09:f7:ce:e4:5f:97:8a:
                    d6:18:62:13:fc:9a:6a:cf:a6:76:cc:81:76:94:0e:
                    7e:cf:be:fb:f9:49:10:42:34:b4:cc:a0:23:ba:2a:
                    a2:76:39:d1:98:c9:e9:7e:c6:36:a7:37:1d:d0:b7:
                    9e:09:ed:99:40:29:f1:c7:f0:d4:0a:0e:42:b1:09:
                    13:6f:4c:09:26:e4:a3:e9:6c:3a:e9:97:2f:2e:58:
                    2f:0e:f8:85:6e:7f:db:2f:6f:82:10:f9:8c:53:64:
                    9f:c3:2d:27:4c:2c:03:a9:7c:2f:1f:29:54:9f:2b:
                    3d:f6:48:2f:9a:33:d6:a0:4d:ff:a9:bd:59:8c:dc:
                    87:0a:26:71:ca:30:4d:fc:af:8f:a9:bf:e2:9f:92:
                    cd:e4:61:17:51:b9:1b:bd:0b:30:18:1d:50:0c:dd:
                    80:60:18:44:82:54:2e:b5:d6:93:71:e9:67:45:04:
                    98:07:82:77:b5:a8:c0:7d:32:8f:a7:cc:df:b1:be:
                    8c:7d:85:35:aa:07:3d:85:6c:47:78:cf:a4:2b:86:
                    55:d0:8a:df:b9:8f:f0:ca:3c:27:ba:5a:ad:8b:a1:
                    f1:30:19:9f:ce:11:41:43:79:8c:bf:4d:b1:41:99:
                    aa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:63:9E:DA:2E:F8:0D:0E:EE:07:27:C2:27:52:EB:32:FF:85:0E:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/c4f4ccfc-6cf6-390e-a6d0-9fa3a30cb545.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4830:c400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:64:3c:90:af:a9:06:56:14:69:b4:e1:db:79:14:60:62:fc:
         32:e9:bd:e7:66:51:35:17:85:50:1e:02:c0:02:29:dc:00:cf:
         09:cd:b3:af:49:b3:58:e2:0f:89:6d:22:15:76:11:4d:66:5a:
         30:bc:78:18:78:78:ee:83:1f:a4:5c:fc:dd:a6:14:8a:eb:03:
         5d:5e:75:ee:99:d5:ff:6e:92:24:83:6d:94:1f:a8:22:c5:56:
         e2:2c:cc:7c:25:e3:d2:f4:f6:ba:80:1f:3f:c6:bf:6f:ed:c1:
         63:78:fe:f1:9b:e3:f5:64:82:8d:b7:a7:77:4f:e1:b2:10:ec:
         6e:34:16:23:ed:2d:f0:af:0d:29:95:64:0e:85:4a:2c:0c:fd:
         1d:7e:47:5a:92:2e:03:0e:4c:e8:56:17:71:7f:13:f2:0f:27:
         76:5d:7c:dc:88:c8:7a:bf:2c:0b:e7:7d:e6:98:76:02:4a:e1:
         8b:99:5e:de:62:aa:a6:f7:09:4b:06:ea:0c:de:a5:59:be:24:
         25:1d:75:b2:ec:d0:29:17:7d:d7:22:62:09:02:d2:45:79:f3:
         1d:81:eb:e5:e8:f3:f5:ee:ed:72:b5:0f:c3:0a:d0:21:85:2e:
         b9:78:72:d3:93:5b:9b:16:c8:9c:5c:76:08:73:e1:b9:ad:22:
         6c:59:da:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:07:24 2025 by rpki-client