Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/e0b13cf2-4c85-3047-9b4d-c199dc2055d7.roa
File:                     e0b13cf2-4c85-3047-9b4d-c199dc2055d7.roa (raw, json)
Hash identifier:          ZY9T6Y6z/peP/eJdmXAH4gw3ioH5+EHZfrKHxa77ZAw=
Subject key identifier:   74:3B:E9:0D:3C:B8:AF:7F:5B:80:34:EF:BB:50:31:2D:68:ED:24:D6
Certificate issuer:       /CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be
Certificate serial:       010D0C9F4328584A4D2BBCFFC43E8F07B1C96500
Authority key identifier: 88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/e0b13cf2-4c85-3047-9b4d-c199dc2055d7.roa
Signing time:             Wed 28 May 2025 16:42:18 +0000
ROA not before:           Wed 28 May 2025 16:42:18 +0000
ROA not after:            Tue 26 Aug 2025 16:42:18 +0000
asID:                     14618
IP address blocks:        2606:b740:1::/48 maxlen: 48
                          2606:b740:49::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:2b:bc:ff:c4:3e:8f:07:b1:c9:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be
        Validity
            Not Before: May 28 16:42:18 2025 GMT
            Not After : Aug 26 16:42:18 2025 GMT
        Subject: CN=ca4c9d0a-9bff-4275-aeb0-886420f4079a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a9:4c:da:7f:de:52:b7:40:ce:c6:8d:91:5f:
                    86:c8:6d:26:97:43:3a:86:44:32:88:40:d8:96:0b:
                    d5:dd:89:f0:ed:ce:34:a1:cc:c8:e0:ce:6d:e0:4d:
                    ca:c8:8d:c5:44:7e:8c:64:b2:6e:eb:79:92:a6:dc:
                    af:6e:4c:81:cd:ab:d4:88:f7:12:ea:39:7d:d8:7c:
                    76:db:24:05:df:3f:43:cc:22:97:26:50:a7:f4:e2:
                    81:e1:cc:c0:12:7a:e0:12:8b:e3:c9:c7:34:89:6a:
                    c2:26:3d:38:e9:21:86:9c:66:b2:93:48:04:57:4e:
                    40:6e:b3:a6:a5:99:cf:11:cc:07:1b:46:97:79:c7:
                    3d:ff:74:6d:6b:a8:6c:57:12:2d:46:c8:35:1e:ed:
                    a3:03:b7:0f:c2:62:0d:0f:b2:86:dc:9b:e7:83:89:
                    a8:76:5e:e2:b9:08:3d:e4:f3:76:49:ba:c1:f0:1a:
                    c4:ac:ee:80:c8:42:e2:9a:29:e2:0b:33:d8:8f:d4:
                    29:d6:fc:71:fe:9e:5c:9d:48:7a:9e:e7:23:c3:9f:
                    89:9b:bb:a4:ae:e9:4c:17:02:ee:84:be:41:c1:d0:
                    c3:51:47:58:1c:5f:73:f6:7f:76:3c:53:b2:57:ae:
                    d3:c2:8d:d1:dc:98:b3:01:e6:2a:96:33:47:47:42:
                    0c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3B:E9:0D:3C:B8:AF:7F:5B:80:34:EF:BB:50:31:2D:68:ED:24:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/e0b13cf2-4c85-3047-9b4d-c199dc2055d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl

            X509v3 Authority Key Identifier:
                keyid:88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b740:1::/48
                  2606:b740:49::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:f1:06:af:58:08:2e:ae:3c:c0:74:10:83:5f:49:b4:cd:a1:
         76:a9:78:6c:5a:b7:51:44:2f:94:65:fd:44:20:0b:03:11:a5:
         48:5f:fc:14:6e:11:f1:86:4a:34:dd:bc:66:95:6b:23:2d:6a:
         4c:63:2e:ef:6d:fa:34:a6:cb:dc:ce:00:36:51:0c:0c:b3:2b:
         23:44:28:9f:a7:e4:44:fb:b9:96:6a:03:03:46:c7:dc:b5:b3:
         b6:b7:4d:14:59:25:4c:87:bf:25:15:51:4c:ad:f0:c8:4f:d5:
         c1:7c:6f:f2:0a:31:bc:5b:86:ad:44:0b:fa:d8:7b:1a:63:47:
         ca:a3:a6:76:ce:6a:55:9c:5f:b3:34:70:6c:62:66:22:f3:31:
         5d:fe:10:0b:d9:fe:37:a6:da:fd:d4:cc:49:40:9b:59:e3:bf:
         06:aa:87:6a:f4:98:c9:1e:a0:f3:f1:b7:0a:27:e1:3d:0d:39:
         66:66:7d:1a:fc:d5:ab:34:3a:e1:95:e5:47:65:a2:c4:6d:bc:
         72:18:5b:f1:02:cf:67:5c:92:be:90:2b:85:67:76:f7:88:2f:
         3a:db:43:a9:d5:3f:cb:ec:77:53:5c:bd:e2:69:21:f9:60:dc:
         5b:6f:7f:52:ce:51:fe:16:62:15:c4:0d:37:bb:24:78:bb:29:
         94:f7:e2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:09:18 2025 by rpki-client