Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/06745cdc-3e32-3e1b-8f3a-467bfc079230.roa
File:                     06745cdc-3e32-3e1b-8f3a-467bfc079230.roa (raw, json)
Hash identifier:          6yqik1YzHKx0M8gxAdslqRuIj1V771dQh0BtdiD5B7U=
Subject key identifier:   C3:20:F7:2D:4E:08:D7:25:B6:D2:A6:2C:E0:9B:1F:81:A1:8A:19:70
Certificate issuer:       /CN=6a30b207-de04-425f-94e9-ee12d4529f56
Certificate serial:       010D0C9F4328584A427582413460A9F9DDC8F140
Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/06745cdc-3e32-3e1b-8f3a-467bfc079230.roa
Signing time:             Sat 21 Jun 2025 01:00:48 +0000
ROA not before:           Sat 21 Jun 2025 01:00:48 +0000
ROA not after:            Fri 19 Sep 2025 01:00:48 +0000
asID:                     16509
IP address blocks:        2601:9201:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:75:82:41:34:60:a9:f9:dd:c8:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56
        Validity
            Not Before: Jun 21 01:00:48 2025 GMT
            Not After : Sep 19 01:00:48 2025 GMT
        Subject: CN=ca128aa7-0c9e-4103-9b4b-b5793e667c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:35:76:4b:21:8d:02:83:d8:21:eb:f2:97:b8:
                    1b:da:3d:52:f1:47:ed:3c:6c:a4:dc:c3:7a:c1:fc:
                    fb:f8:ad:6b:16:03:a6:4e:67:cd:6a:d6:74:e9:cb:
                    45:65:5f:43:02:6c:4a:9e:34:df:da:a4:78:1c:45:
                    8f:c8:73:18:2c:ef:62:b4:04:5f:1a:17:37:06:8b:
                    b2:ca:91:67:fb:9f:e0:74:30:21:f6:af:85:c8:ec:
                    cf:79:65:92:cf:1e:ed:26:9c:29:aa:15:0d:25:8a:
                    bf:1b:80:07:29:04:42:9d:48:4d:03:95:ba:c3:17:
                    f9:29:4e:6b:c8:56:7f:e2:2f:b1:46:3a:54:ce:54:
                    ca:5f:26:f8:d5:88:50:d3:98:28:11:20:fc:11:c8:
                    98:bb:b5:3d:bf:be:ba:16:8b:b9:63:11:4a:2c:4f:
                    64:bf:c1:f3:3e:a5:7e:f5:14:d4:2c:30:92:dd:5f:
                    4b:90:09:1e:36:56:2c:c4:02:9b:56:d8:4a:33:fa:
                    4d:f3:d4:3a:c5:b7:ea:31:af:92:12:9b:98:2a:4b:
                    d0:18:9a:49:6e:05:0f:b4:86:29:26:4b:26:ae:27:
                    57:78:83:20:4d:bf:52:f1:40:52:bb:d3:ee:bf:ce:
                    5b:fd:d4:15:7a:34:b2:81:7e:0e:ac:bb:4d:b3:52:
                    f6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:20:F7:2D:4E:08:D7:25:B6:D2:A6:2C:E0:9B:1F:81:A1:8A:19:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/06745cdc-3e32-3e1b-8f3a-467bfc079230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:9201:13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:af:9d:b5:e8:89:3e:b2:22:cd:9c:cb:85:22:f6:6b:55:01:
         8f:4c:ba:c0:db:6c:71:bc:a6:2d:a4:84:fa:32:79:a2:30:52:
         45:9d:7f:f9:8f:4a:10:72:f6:97:42:32:af:0a:f4:63:20:99:
         44:97:9e:58:de:b9:8c:2c:62:5c:58:51:09:1e:c1:d9:db:c7:
         1b:64:f9:27:ba:05:64:3a:44:14:b5:1f:f8:c2:8d:57:6e:81:
         af:38:5e:14:c0:f5:83:9f:60:2b:17:ff:b9:b8:b6:b5:98:52:
         9c:dd:c6:0e:b7:cb:44:a5:c6:7e:8b:e8:18:e0:c8:c6:93:c0:
         18:08:f6:2e:5e:73:5a:56:bb:f2:e8:89:4d:15:f3:fe:d6:ad:
         8a:88:7a:39:bf:f2:bf:73:25:e1:4b:f2:ec:09:82:5f:3e:a0:
         47:08:f5:d8:0f:5e:b9:9b:11:8a:6f:3a:11:d7:49:58:b2:d3:
         af:dc:3c:67:b9:60:dd:32:f3:89:d7:23:e1:fb:1a:1d:4d:30:
         a3:b2:df:db:55:08:cc:65:e8:4e:42:78:15:bb:3b:57:ab:b5:
         c0:85:c1:c4:b3:68:66:2a:f5:8b:00:cb:40:59:d8:ac:b1:bc:
         22:fb:56:d6:72:d1:3a:26:83:1f:af:50:c9:9e:64:00:18:1e:
         3c:3c:55:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:29:01 2025 by rpki-client