Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/2953b610-a434-3572-bb79-1dcab516be48.roa
File:                     2953b610-a434-3572-bb79-1dcab516be48.roa (raw, json)
Hash identifier:          Db1J2HoXerAdSd9n13ntwMVq3euWvmmXJGH5h3N131k=
Subject key identifier:   C5:A3:21:A7:27:2B:2C:3B:31:FC:30:03:3D:0A:03:FD:02:D8:61:7B
Certificate issuer:       /CN=c939804d-392f-4714-a1f1-89eb4660daf7
Certificate serial:       010D0C9F43285849C0A4CF2FF045FA635A3BAE00
Authority key identifier: C6:FC:D1:09:1B:FA:5D:0F:A6:65:0C:1C:14:CA:66:B3:B9:99:A4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/2953b610-a434-3572-bb79-1dcab516be48.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     11990
IP address blocks:        2605:fa80::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:cf:2f:f0:45:fa:63:5a:3b:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c939804d-392f-4714-a1f1-89eb4660daf7
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=52844106-13c8-40bc-a1de-43ab35d56446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:12:25:5d:40:1f:8b:aa:1f:f4:11:d3:9e:18:
                    f6:77:3d:1a:63:b7:d7:7c:f5:1a:dc:b9:aa:ff:50:
                    fa:d9:45:7b:26:6f:9c:cb:ea:30:84:b4:4c:3a:bb:
                    96:a4:a5:ec:a8:05:84:17:1e:b0:0b:51:4b:3a:d2:
                    8c:51:f7:9b:d4:bd:51:bd:42:4d:5d:8f:c5:28:41:
                    ca:af:73:69:cc:6b:38:41:7e:a6:17:44:17:a4:a4:
                    16:f8:6e:fc:4e:48:2f:94:43:e2:3d:7b:47:a4:a8:
                    bd:e6:dd:7e:68:36:8a:85:bd:30:99:97:17:c5:97:
                    19:10:76:cd:75:c2:8c:82:9d:a6:b7:b1:df:0a:20:
                    0f:1d:59:77:62:58:6a:bd:f3:20:76:02:73:3d:4f:
                    20:a2:2d:c5:c3:d1:62:76:ce:b1:72:23:1b:af:8a:
                    9d:ec:ea:58:fa:23:1b:c6:e0:a1:05:d6:89:8b:29:
                    39:a4:0c:cb:9a:fb:17:f2:56:19:64:d1:eb:c1:65:
                    7e:45:61:2a:50:62:15:80:75:5f:88:f4:0d:38:e4:
                    0d:e2:77:70:5a:d3:c7:67:e1:74:5c:c7:f2:a3:8f:
                    bd:fc:78:ba:6a:d3:a3:01:42:7a:b0:2d:0f:f7:ab:
                    49:a1:14:4d:a7:88:38:7d:e2:e1:14:42:00:04:fe:
                    0a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A3:21:A7:27:2B:2C:3B:31:FC:30:03:3D:0A:03:FD:02:D8:61:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/2953b610-a434-3572-bb79-1dcab516be48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.crl

            X509v3 Authority Key Identifier:
                keyid:C6:FC:D1:09:1B:FA:5D:0F:A6:65:0C:1C:14:CA:66:B3:B9:99:A4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fa80::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:6f:71:6c:74:c7:d5:7a:f8:c8:20:8e:c8:67:0b:2a:33:0d:
         f1:74:1c:eb:bd:c0:41:2e:69:96:42:f4:da:db:4d:09:6a:3e:
         84:f7:e3:17:6e:0f:ae:2a:dc:71:e2:9f:07:21:c2:d3:6b:8b:
         d8:e8:f4:df:53:b4:f2:c8:9f:a5:07:b3:60:ff:af:f5:52:2b:
         b8:0e:26:b0:b1:00:1f:4b:53:fe:73:b6:6c:27:fe:94:99:e5:
         4d:3b:b0:66:1c:aa:79:bb:19:47:d7:94:83:1f:9e:77:2d:bd:
         30:af:db:3a:f3:5b:2f:bb:1e:98:84:4b:5d:d6:50:cc:23:02:
         be:fe:44:7b:fa:58:4e:a3:b2:27:75:24:1d:32:57:93:37:9f:
         c1:a7:da:ad:b3:d0:0c:8a:e9:08:dd:3f:16:7f:56:82:66:83:
         8d:0f:9b:2d:d0:de:ec:99:4a:5d:1d:a0:8f:03:3e:a9:1f:55:
         63:7f:ef:aa:c8:9b:41:d6:67:06:28:ea:2d:33:84:ff:11:51:
         09:1d:74:bd:6c:19:e9:ea:d5:45:9f:97:71:c7:d3:a0:38:65:
         f7:06:30:cb:97:9b:b8:6e:19:b5:44:fe:e1:f9:36:b7:27:3f:
         d5:e4:19:10:ff:85:54:42:35:ef:3e:dc:16:0d:bb:90:61:83:
         7b:2c:01:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:04:06 2025 by rpki-client