Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/f37e12b1-762c-3d49-8b93-8ba5322717de.roa
File:                     f37e12b1-762c-3d49-8b93-8ba5322717de.roa (raw, json)
Hash identifier:          CODQfFIwc2DKFD/cizQ18qfLfbkXHyIS9fTlYtl6HBU=
Subject key identifier:   D1:BA:9D:EE:7D:2E:61:64:3C:C2:CF:E9:97:7C:37:8D:33:3B:F9:83
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F432858497279AB1230F1C9F88213C680
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/f37e12b1-762c-3d49-8b93-8ba5322717de.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     395123
IP address blocks:        2606:db40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:ab:12:30:f1:c9:f8:82:13:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=6a8568b9-256a-44af-acb7-cfebf79bc401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d2:72:fb:5f:bb:be:af:ec:b5:d1:23:28:81:
                    b9:c1:5d:73:82:94:10:62:94:ec:c7:a8:c9:79:7c:
                    60:2d:c5:61:09:cb:85:11:9e:09:20:c4:7a:46:3e:
                    87:d2:5a:7f:7c:fc:f1:b9:68:ba:6e:77:c4:77:f3:
                    05:3f:bb:a4:1e:c7:fe:1f:d8:f9:43:eb:bf:9e:53:
                    6c:0b:a4:76:35:8b:79:84:9c:2a:4e:b9:8f:b6:6c:
                    ac:32:bb:1f:ab:dd:49:39:5b:f8:5d:06:ca:52:00:
                    7b:d2:44:8c:73:8d:2d:b5:79:96:ba:de:d2:c6:9a:
                    a5:df:55:b2:92:cb:90:5e:32:1d:7a:7d:7a:ac:17:
                    38:6b:97:a7:41:a2:cf:8c:c5:c2:e1:d1:e1:93:e9:
                    9e:5c:53:c6:57:f3:06:32:2a:c4:fe:16:7f:bb:6e:
                    d7:c4:3f:7f:53:df:ab:9c:e3:79:7c:98:16:5f:e4:
                    4e:de:c4:64:72:11:1d:41:f7:b3:46:f9:19:a5:6d:
                    5d:bf:7a:1d:82:1e:6f:84:fa:66:8d:21:df:d1:a7:
                    f4:cc:d5:c3:1d:55:9f:7f:ff:c3:78:2f:09:dd:ad:
                    5e:ac:15:22:79:81:4d:7b:0f:3f:8a:53:a0:b5:03:
                    83:ab:1c:7e:e9:dd:84:a1:d7:fc:84:87:f9:5b:78:
                    f7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BA:9D:EE:7D:2E:61:64:3C:C2:CF:E9:97:7C:37:8D:33:3B:F9:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/f37e12b1-762c-3d49-8b93-8ba5322717de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:db40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d1:2e:3e:ee:58:da:3a:58:a1:fa:10:6e:7a:16:7f:63:59:
         f9:8e:9e:79:66:e0:ac:c5:10:2b:89:ea:2b:5d:3d:ec:54:6c:
         e4:3a:6a:ca:4b:ff:7a:df:ca:63:d8:86:3b:9d:f2:ab:1e:0f:
         18:18:19:85:e9:4a:af:77:e1:fd:af:f1:b4:6e:df:15:60:43:
         b7:0f:cf:24:e3:1d:93:06:90:b5:72:1c:52:c3:da:fa:7b:69:
         c9:40:2b:8d:09:96:eb:8f:07:3e:b8:10:06:56:b4:a2:6c:c4:
         46:6a:b3:c1:3a:53:a4:af:5f:48:92:db:f3:93:22:6e:89:8f:
         22:29:f5:7d:88:17:3c:0c:84:02:c6:e4:f6:f3:87:94:79:48:
         b6:0e:1b:b5:2d:77:27:d8:81:1a:65:6f:9e:cd:9a:22:18:f1:
         85:20:5f:9e:19:35:e8:cf:95:d2:b1:08:47:72:ea:4e:1a:e4:
         11:6c:dc:22:34:2b:f1:37:6b:db:be:09:11:5e:3c:7d:38:5c:
         e0:53:a0:02:80:a0:c0:eb:83:d6:c4:2a:5c:f3:be:3e:c8:b8:
         fa:26:91:e6:ec:be:ea:fd:98:6a:a2:67:8f:89:a1:91:01:a0:
         b8:c7:9f:8c:f3:c1:d5:e5:62:72:7f:60:d4:a2:ae:75:53:20:
         55:22:b1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:32:25 2025 by rpki-client