Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4207c09f-b1f1-36a4-b508-ca479abe3ede.roa
File:                     4207c09f-b1f1-36a4-b508-ca479abe3ede.roa (raw, json)
Hash identifier:          7IRyIrVEtMrtcXajS12MX7KrFUo8M+fzZMcXKaLQ1eo=
Subject key identifier:   90:E1:EA:61:AF:93:AA:65:BC:31:CA:BC:EA:BD:15:A9:8D:E7:16:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD06289E61E07A93DDC180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4207c09f-b1f1-36a4-b508-ca479abe3ede.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33490
IP address blocks:        2601:1c0::/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:06:28:9e:61:e0:7a:93:dd:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=065e8ee9-d7a2-44ac-828b-3989269c7b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:af:78:24:60:00:29:cf:0e:ce:fd:f9:0c:76:
                    3c:c8:97:95:6e:96:91:a3:2b:30:1a:54:c2:5c:e6:
                    74:0d:2f:d5:ce:37:53:a9:28:85:43:dc:40:76:c2:
                    8f:a8:40:c6:40:3b:16:3f:a1:62:21:26:dd:3d:a7:
                    01:8b:eb:fd:f6:0c:c9:3d:e2:92:6c:e5:75:33:e2:
                    96:6d:46:34:a7:64:09:5c:a3:9c:5b:97:d4:42:2a:
                    47:7e:fb:54:a8:94:e6:0f:34:1f:72:17:c3:72:8e:
                    2e:57:95:79:cc:aa:99:01:fc:e6:0d:df:d6:12:68:
                    91:07:83:40:7e:3f:2b:ca:0e:a1:27:0d:8d:57:79:
                    3d:ce:0f:4a:7e:0d:b3:fb:a0:51:64:96:27:f0:36:
                    9a:97:f9:a7:2a:5e:d7:9c:eb:57:33:f5:a6:e8:fe:
                    a2:29:38:29:59:6f:49:d6:a4:d9:05:a5:56:22:bc:
                    89:35:65:08:b2:9f:ef:bb:0f:c5:4d:b6:9c:30:f2:
                    d1:f7:a9:6d:90:e1:df:00:ea:82:6f:53:ab:dd:b9:
                    c4:d1:ee:cd:2f:f5:90:56:d7:ff:f9:aa:56:d1:f0:
                    32:90:8b:5d:0c:95:e2:14:68:9a:81:58:25:e4:da:
                    af:52:11:09:f9:aa:1c:e8:51:08:d4:66:4e:9b:9f:
                    91:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E1:EA:61:AF:93:AA:65:BC:31:CA:BC:EA:BD:15:A9:8D:E7:16:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4207c09f-b1f1-36a4-b508-ca479abe3ede.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1c0::/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:13:cf:1e:af:d9:37:4e:3f:19:6d:f6:37:4d:08:38:66:44:
         ef:40:37:96:4b:63:28:e3:2a:fb:7d:f5:ba:8c:60:34:41:16:
         2a:3b:34:f0:09:fe:fa:f6:d8:36:d2:90:00:00:11:e0:7f:20:
         da:e7:10:f4:bd:68:ac:95:ac:64:73:a5:2e:ff:e5:5f:5b:25:
         1a:29:f3:ab:38:a2:b2:1d:16:58:f6:4d:30:4a:60:6a:35:8c:
         dc:84:60:ed:04:71:72:3b:c7:e8:0c:50:67:ca:5a:2e:e9:2d:
         a3:e1:77:66:1a:79:a9:e0:04:93:db:13:53:2f:a5:b4:be:2f:
         31:6a:ab:f9:02:df:50:e1:de:1d:c3:3e:c8:91:8a:5f:65:2b:
         bf:02:5f:3f:05:ba:e0:ae:22:00:0e:96:18:75:64:fc:b4:06:
         b6:06:04:55:bb:97:0b:b2:29:1b:c6:11:4f:ec:3d:19:b8:4c:
         bb:e6:91:bd:da:4d:a3:20:d5:cd:e8:d2:45:49:7d:84:ad:8a:
         b9:8a:be:98:89:a3:f9:0b:6e:e7:2e:0f:42:24:c6:d9:0f:84:
         fc:cb:29:8e:9c:ab:bc:f7:1c:f0:f2:b3:ca:94:38:66:d1:85:
         e0:fb:0d:c1:7f:1f:ed:30:59:df:bd:7a:77:98:ee:dd:44:54:
         a5:f3:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:56:57 2025 by rpki-client