Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85/053d677c-a9fe-3977-ae76-393625720bd7.roa
File:                     053d677c-a9fe-3977-ae76-393625720bd7.roa (raw, json)
Hash identifier:          qJx3e9IVNvyhSxELux4D/Ic8Iacm9whII+Q+/Guxc2A=
Subject key identifier:   5A:15:B8:43:EC:97:F2:B5:41:3C:2E:04:31:FA:5A:2F:93:3B:6B:F0
Certificate issuer:       /CN=4e4d5dc0-6ca6-42f2-9772-3d414d369a85
Certificate serial:       010D0C9F43285849C20A127832C9BF0224216A40
Authority key identifier: 47:08:75:1F:56:29:B8:0B:48:DE:E0:EB:AA:58:58:CF:81:68:FF:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85/053d677c-a9fe-3977-ae76-393625720bd7.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     30382
IP address blocks:        2604:db40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85/4e4d5dc0-6ca6-42f2-9772-3d414d369a85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85/4e4d5dc0-6ca6-42f2-9772-3d414d369a85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:12:78:32:c9:bf:02:24:21:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e4d5dc0-6ca6-42f2-9772-3d414d369a85
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=5d500d92-09da-4af2-bad4-639a0ed9ffe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:df:c8:03:38:51:0e:b4:be:4f:9a:8d:e2:
                    18:5f:15:eb:d1:cc:90:b8:b4:87:9b:5c:f3:1a:c1:
                    6d:21:cb:a8:49:97:0f:81:6f:76:53:fd:f9:a0:b7:
                    06:d5:99:f2:9e:7d:12:52:7d:39:e9:4b:82:ec:ad:
                    19:7f:b8:71:6e:8b:03:5a:de:a1:41:83:bb:6c:b5:
                    dc:b6:9b:9c:b4:20:8d:0f:28:ce:53:03:5b:c3:2e:
                    e3:ed:fe:99:9c:43:2e:4e:a9:44:f4:25:84:36:0f:
                    56:3a:19:f1:36:dc:30:5c:50:fa:ba:ae:3c:9a:f4:
                    a6:b2:14:23:d7:e8:64:11:6b:c5:2f:d9:45:63:63:
                    c0:58:73:4a:d8:31:01:e8:96:37:5c:4a:af:91:46:
                    d2:22:46:39:ca:5f:36:5a:ac:9d:f7:d1:a0:7b:59:
                    62:cc:2f:0a:41:88:e6:b5:0e:23:4a:b8:a1:df:f8:
                    96:c5:f7:6d:d2:2b:15:1b:af:6b:b1:cb:88:c1:07:
                    9a:95:5d:d2:27:c0:1b:eb:1b:06:1e:6d:72:07:1f:
                    b6:b8:8d:e6:d0:fe:7f:81:a7:0c:6d:30:d2:68:f1:
                    b1:77:4f:52:5c:7c:8f:17:01:86:58:ec:20:86:e4:
                    7f:22:d6:47:3d:5e:5a:c6:b2:03:43:f3:b4:67:34:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:15:B8:43:EC:97:F2:B5:41:3C:2E:04:31:FA:5A:2F:93:3B:6B:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85/053d677c-a9fe-3977-ae76-393625720bd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85/4e4d5dc0-6ca6-42f2-9772-3d414d369a85.crl

            X509v3 Authority Key Identifier:
                keyid:47:08:75:1F:56:29:B8:0B:48:DE:E0:EB:AA:58:58:CF:81:68:FF:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:db40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e5:91:1a:b3:26:23:5b:f0:4a:44:29:75:1c:c9:9f:2e:48:
         3b:a3:1e:48:6b:7c:d6:f0:cb:a4:6b:f8:39:25:3f:45:5a:ca:
         98:9a:01:f8:17:1e:65:68:a5:e1:6c:62:23:4d:8f:04:96:e7:
         d3:a8:f8:5a:25:77:f1:1f:ac:c8:b2:eb:9d:0b:6c:08:2f:b9:
         84:39:fa:96:b5:51:14:8c:31:4b:fe:6c:6a:b3:a3:90:6b:18:
         ea:b2:a1:85:25:fb:fe:53:f1:26:19:3b:37:96:7b:5f:e7:d1:
         73:9f:9a:01:dc:0f:5e:b6:aa:ba:7d:48:56:3e:89:92:61:94:
         61:f1:13:53:fb:aa:d8:20:50:07:84:e7:f9:93:5a:f9:05:4c:
         16:97:a9:db:02:fe:be:1e:cc:b8:78:cc:25:ee:d0:6d:5e:2b:
         56:36:31:1a:1d:37:20:d0:87:be:83:ba:e0:7d:c9:1d:91:58:
         d1:fe:ff:09:7e:81:e3:38:49:dc:40:fd:29:63:01:bc:35:c8:
         eb:93:47:0b:0f:39:d1:14:b8:0d:a6:9a:b0:0c:50:74:6e:77:
         e8:bf:b0:43:c7:19:b3:f6:ce:54:34:af:a5:6f:72:6d:64:40:
         74:33:48:9c:d0:8d:3b:d9:46:6b:2c:82:a6:35:53:c3:96:23:
         00:96:ff:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:28:16 2025 by rpki-client