Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd5cd56c-08bb-3fa3-89d9-181e2a4b5d3d.roa
File:                     cd5cd56c-08bb-3fa3-89d9-181e2a4b5d3d.roa (raw, json)
Hash identifier:          tuM9FQR788V3ekLyiDmi82Ukp/0XEhLAvGFt1JbT9a4=
Subject key identifier:   D1:5C:74:8A:6A:A0:A8:9B:45:B6:82:F8:66:9B:69:19:87:D9:AF:1A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06182BEE8343DFC2000600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd5cd56c-08bb-3fa3-89d9-181e2a4b5d3d.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        2603:2246::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:18:2b:ee:83:43:df:c2:00:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=cc0398de-c092-4b6a-aab5-47ff16a665fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7a:93:68:1a:54:07:72:b9:87:59:46:0d:f4:
                    01:12:45:bc:c6:69:85:40:6a:22:c4:1e:c7:96:af:
                    ad:42:fe:0f:37:cb:5b:34:80:2f:d9:87:ec:10:7d:
                    be:60:a3:8c:06:3c:ae:42:8d:49:d0:ae:55:3e:10:
                    d4:a0:73:16:c4:4f:a2:2b:48:39:40:45:c4:ed:63:
                    89:c4:a5:14:51:af:63:f1:53:92:cb:51:de:20:52:
                    a7:6d:7d:da:f8:ec:d2:b9:51:54:10:5f:99:3f:02:
                    76:56:52:3a:e2:7a:99:52:f8:84:2b:90:ab:92:88:
                    6c:42:cd:31:83:40:ba:89:81:8b:50:b4:0e:ae:61:
                    7c:34:27:fc:e5:7d:3f:46:8a:49:b8:c7:1a:22:ec:
                    cb:da:3a:d6:67:21:c7:8c:21:2b:92:3e:85:c7:86:
                    6c:ad:6b:a7:4a:0c:75:4d:bc:d3:be:08:4c:56:27:
                    b7:90:7b:01:64:49:f3:c8:b0:4f:b3:89:58:32:e4:
                    e6:b5:8f:af:92:4f:b7:69:c1:82:ff:9c:77:9c:76:
                    40:3e:5d:61:0e:ca:b1:36:89:ef:f1:ee:35:5e:d1:
                    99:4f:59:45:03:05:8a:92:e7:e4:0c:cb:55:e7:4b:
                    8b:b4:d8:3e:8b:10:58:08:34:e1:ff:5b:6c:3e:0a:
                    c4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5C:74:8A:6A:A0:A8:9B:45:B6:82:F8:66:9B:69:19:87:D9:AF:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd5cd56c-08bb-3fa3-89d9-181e2a4b5d3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2246::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:de:f1:2b:c9:5a:40:68:ec:d3:37:1d:11:90:dc:7d:58:2c:
         7a:58:23:20:52:9a:91:f1:08:6f:e1:c3:9c:34:ec:6e:41:e7:
         d1:7e:b0:64:7c:e1:3d:ea:b5:0f:4c:f9:0b:60:46:31:01:3f:
         82:02:5f:f2:74:d8:be:45:76:54:3f:3f:7b:41:7a:fd:86:57:
         c1:04:4d:3f:3d:59:01:fc:9f:33:70:66:63:81:fa:43:54:fb:
         7f:57:89:b2:49:f8:6c:de:d3:e8:ff:0e:3b:f9:e3:35:e7:36:
         7d:f3:bd:ac:07:b2:76:d0:09:f9:2f:1c:71:2c:77:c6:c3:ec:
         0d:91:f1:64:77:fc:f2:a0:9d:44:77:b2:52:5a:cc:26:d8:5a:
         06:c3:19:43:48:15:ec:e1:16:a9:3f:a8:0a:69:8f:fc:32:f1:
         6f:20:b2:45:57:55:1c:f0:e9:66:e7:e7:fb:9d:52:32:a7:6a:
         c2:04:35:ca:5a:38:6e:5c:bc:64:77:7d:1f:92:4b:8f:90:18:
         df:8c:fb:98:43:6b:ee:2c:fe:70:f0:6e:79:9a:d3:dc:71:52:
         09:59:b3:7d:ab:a3:26:f8:77:57:c8:c1:b3:19:a8:c0:d7:58:
         ee:40:8d:6e:17:5f:73:64:82:41:c7:54:81:eb:44:8d:74:a0:
         59:b6:98:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:58:15 2025 by rpki-client