Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6006dbff-4647-32e6-92fd-8f63d694824b.roa
File:                     6006dbff-4647-32e6-92fd-8f63d694824b.roa (raw, json)
Hash identifier:          vlZk0++eN/09c9GjW3YNYxRlJ+UL7GPsG/+Nu89hD7A=
Subject key identifier:   30:86:7B:F5:DC:14:3D:17:EE:64:CE:95:55:39:CD:6C:60:66:C5:A5
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849F71518396D217AAD6FD69800
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6006dbff-4647-32e6-92fd-8f63d694824b.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     1225
IP address blocks:        2001:418:3ff:5::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:18:39:6d:21:7a:ad:6f:d6:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=5d0ea220-93ec-460f-8364-4db2db2d8faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ed:9f:38:ad:33:5d:79:f6:97:68:80:98:9f:
                    bd:5e:0b:03:84:a4:8f:60:46:0c:78:92:b3:9f:96:
                    b2:0b:fd:57:3b:5b:2a:a3:85:59:de:2b:e0:d2:a0:
                    92:17:aa:6d:03:02:4f:34:db:44:00:bb:85:76:ba:
                    57:3f:db:2d:1e:1c:19:b5:2c:98:b4:40:b1:a8:35:
                    fa:d2:21:18:f5:b7:54:ac:b0:66:68:6a:82:3f:e6:
                    9b:58:cd:8d:a9:16:c3:f1:e1:7b:13:14:92:8a:3c:
                    3c:ee:3c:ff:e9:dc:b6:52:1a:bb:c0:eb:38:52:8d:
                    aa:f9:10:e3:d8:18:f2:fd:e2:87:45:23:53:72:72:
                    f7:d6:52:3a:f7:0d:a5:4e:1a:49:69:96:2c:fa:46:
                    2c:b8:50:c1:bd:5e:f7:81:c3:99:0b:4d:b0:c1:da:
                    61:cf:4b:4f:3c:60:9a:32:a3:cd:d6:99:5d:ea:af:
                    7c:9c:14:56:44:bb:31:a6:45:6f:0e:47:d7:0c:3f:
                    67:00:cb:cf:1c:4f:b0:67:c0:71:67:62:88:35:57:
                    89:7c:b8:31:4c:8a:a1:fa:3f:18:e8:b7:f3:0c:ca:
                    ed:09:6d:cf:f4:74:ed:84:14:44:c2:33:11:e9:2d:
                    e0:63:08:74:be:22:7d:a3:9a:51:31:d1:42:27:20:
                    be:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:86:7B:F5:DC:14:3D:17:EE:64:CE:95:55:39:CD:6C:60:66:C5:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6006dbff-4647-32e6-92fd-8f63d694824b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:3ff:5::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e9:49:c6:d1:11:fc:77:55:ab:70:7d:d4:fc:00:71:a5:00:
         50:10:78:ef:cd:b4:48:11:1e:9a:e3:1c:67:b1:a1:cd:4e:3f:
         71:07:01:6c:be:33:c4:0e:2c:b2:04:ba:1d:22:48:52:41:6a:
         51:78:db:f5:f0:c5:4c:fd:bb:b3:d7:41:dd:70:14:33:2e:03:
         2e:e3:75:b7:31:8f:28:57:4c:9a:42:5a:d1:fd:44:1c:ae:85:
         39:94:72:69:d3:4f:22:70:bd:95:f6:7b:d7:02:7f:0c:4f:5d:
         53:0c:b3:fe:42:47:b9:6e:05:b9:65:07:a5:b0:eb:86:ee:cb:
         bf:70:06:f9:de:09:6d:98:5c:7f:1c:81:53:ff:1a:df:62:48:
         b7:64:21:07:36:70:00:39:0f:98:64:39:de:7f:86:ce:2c:00:
         eb:7f:af:de:87:ad:0a:a1:02:8c:ed:6b:c3:47:1c:4e:a6:32:
         aa:39:aa:b8:48:ea:39:87:55:45:57:59:ac:dd:47:b2:28:43:
         af:12:39:b7:0d:ac:fb:9c:a0:88:ed:02:70:ed:73:71:79:02:
         ae:1d:69:7a:88:da:82:aa:e0:7e:de:a2:46:01:6c:c5:93:e7:
         fb:d4:c0:41:ec:30:5b:26:6e:80:2a:57:60:f7:59:97:9f:ae:
         22:46:a6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:20:59 2025 by rpki-client