Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/ef63e560-1036-3fd3-af61-21d022a1a803.roa
File:                     ef63e560-1036-3fd3-af61-21d022a1a803.roa (raw, json)
Hash identifier:          7/rb2h8dTpJSn5HftH6pfLiEXb6lrh/Tes9mHfTzppQ=
Subject key identifier:   E6:EE:82:C9:8C:E0:CF:5B:00:B8:99:3E:11:AF:65:B8:63:B4:0C:D0
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F43285849B2AF5E2F6D7588CF477A4B00
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/ef63e560-1036-3fd3-af61-21d022a1a803.roa
Signing time:             Wed 30 Apr 2025 13:01:02 +0000
ROA not before:           Wed 30 Apr 2025 13:01:02 +0000
ROA not after:            Tue 29 Jul 2025 13:01:02 +0000
asID:                     36007
IP address blocks:        2604:bc0:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b2:af:5e:2f:6d:75:88:cf:47:7a:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Apr 30 13:01:02 2025 GMT
            Not After : Jul 29 13:01:02 2025 GMT
        Subject: CN=d10ed09d-dc76-44a2-beb2-a906021b1227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:90:c5:3f:2d:e0:6e:33:d3:ac:d8:af:5f:96:
                    3c:6b:f7:20:fc:5e:6c:14:c2:6c:ee:ae:7c:5d:d7:
                    6f:75:03:dc:73:23:e0:67:be:85:e5:5f:77:40:c7:
                    79:06:8d:d1:49:c1:cd:ca:ef:62:62:7e:c2:99:58:
                    3b:f5:37:82:d8:a3:4c:3c:c0:2f:21:d8:56:cd:f0:
                    18:05:20:23:69:c4:47:f7:78:c2:ac:f0:07:d1:42:
                    44:70:2f:ef:c6:01:63:e9:b7:0a:e7:e7:18:a2:8a:
                    75:ea:97:2a:3d:e6:60:41:7f:aa:b9:97:48:59:c3:
                    b2:40:63:4c:f5:70:ea:c9:b7:4e:e8:eb:1b:5f:ff:
                    b2:b7:cc:ea:38:5f:2c:7d:39:67:16:48:62:e8:0c:
                    e9:c5:1d:07:99:95:38:b6:ac:8b:5c:db:c3:0c:a1:
                    b1:3b:e8:ab:b4:36:69:01:79:e1:ac:18:b1:e4:a9:
                    65:f3:47:88:03:32:98:93:f3:ee:74:0a:c1:02:e3:
                    4d:9c:49:e6:47:ef:23:b5:70:fc:69:d2:65:64:3b:
                    6a:ec:f7:22:83:1a:14:a2:a2:d7:70:90:82:f9:13:
                    e0:75:fc:34:f2:8e:d1:f1:c8:dc:d6:90:b3:16:1f:
                    a9:d9:23:77:2a:12:73:9c:d3:60:53:94:7b:ee:8a:
                    fa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EE:82:C9:8C:E0:CF:5B:00:B8:99:3E:11:AF:65:B8:63:B4:0C:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/ef63e560-1036-3fd3-af61-21d022a1a803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:bc0:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:59:35:fe:b3:99:d3:a9:03:71:61:c1:87:d8:64:f6:76:43:
         da:f9:1c:26:49:30:71:8c:ff:d3:8d:45:99:e6:bf:b0:3a:df:
         33:92:c9:a0:87:24:86:65:c6:aa:7c:48:41:d3:72:37:0b:31:
         01:fd:85:db:52:92:14:be:b9:3c:c7:f8:7d:08:a0:dd:32:81:
         03:24:4f:c3:b2:d6:0d:2f:83:ea:09:a2:86:d2:a3:cf:f1:ff:
         59:41:cf:2f:34:8c:8d:1c:be:4d:7a:bc:01:7d:75:bb:db:1d:
         d4:2a:d6:eb:25:78:d5:58:90:93:34:f4:ea:72:1f:7a:2f:2e:
         3b:a1:b3:3c:7e:08:5d:53:09:f1:82:74:38:3b:3a:6a:a8:37:
         dd:7e:1c:95:fc:88:bb:0d:ae:ba:fd:62:7d:f6:9b:25:a4:4f:
         2b:da:ba:2e:78:f7:e2:a6:14:e6:bb:89:b8:a5:61:15:75:ef:
         a3:fa:c0:d9:34:e3:c8:63:2b:14:44:ea:89:3d:99:ef:d0:08:
         b6:e3:49:07:28:55:0e:7e:77:68:81:b6:8f:76:8a:ce:dc:77:
         b4:ba:a9:b6:5c:74:c1:b2:92:33:95:11:b3:15:a8:9c:34:a3:
         09:53:99:2a:4f:d5:7b:6c:bb:6c:d7:6a:ee:2f:cc:d9:b1:c8:
         b1:5b:94:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:40:44 2025 by rpki-client