Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e010b609-552b-3a16-9e0b-bb4117efc158.roa
File:                     e010b609-552b-3a16-9e0b-bb4117efc158.roa (raw, json)
Hash identifier:          lh/6QRkLJrwGaiXNJ8dQBGU9cu8dR3tLGO3hbZYVSBI=
Subject key identifier:   71:CE:A1:91:5E:24:42:3E:E6:2F:D1:81:4E:35:F0:43:37:89:E3:0C
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285849CBCF9C01F01D1C6448A86F0A
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e010b609-552b-3a16-9e0b-bb4117efc158.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     13926
IP address blocks:        2606:b300:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:9c:01:f0:1d:1c:64:48:a8:6f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=c4413b8b-43f4-42ea-abaa-7d19d91cb888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:da:b1:f4:d4:bc:ee:84:65:9f:30:25:6c:
                    a5:84:d6:f7:09:3d:9f:b9:19:7c:c1:1f:cb:ae:11:
                    6d:18:e1:9f:7c:15:ab:c9:00:32:51:b8:14:95:53:
                    aa:c0:57:f6:2c:5c:cc:28:d7:b1:fa:52:5a:d0:99:
                    02:5f:0f:3d:0f:10:1a:40:1f:8e:b4:14:34:ab:dc:
                    88:06:79:18:ea:3f:6c:84:22:2e:04:d7:8f:4b:8d:
                    03:db:d9:d7:83:ca:ea:c4:2e:7d:a7:e4:93:eb:de:
                    f2:da:eb:4b:8f:c0:fb:d0:b7:0a:ff:e2:4d:8d:56:
                    4f:21:2f:13:09:86:7d:5b:b3:ef:9b:ca:ed:66:ca:
                    94:56:9c:af:29:a2:d4:6d:db:5c:e5:89:3c:4b:16:
                    d1:66:d8:68:97:ef:89:29:c1:98:a0:b8:f4:8e:d8:
                    07:7e:30:01:e3:0a:e2:cf:5a:3b:c7:b7:61:b7:09:
                    f5:7d:b0:4a:ec:a1:e8:e5:f8:f2:82:09:b4:d9:24:
                    c4:a3:95:58:c8:e9:ca:a1:23:5a:bb:cd:98:a9:ca:
                    2a:19:a2:13:39:cb:ec:25:9a:f8:e1:2d:3e:0c:76:
                    4f:4d:33:8a:94:b8:1c:99:ac:64:ce:31:ad:4f:90:
                    84:1f:7f:01:87:68:07:27:27:19:2a:65:3e:13:0c:
                    7b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CE:A1:91:5E:24:42:3E:E6:2F:D1:81:4E:35:F0:43:37:89:E3:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e010b609-552b-3a16-9e0b-bb4117efc158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b300:8000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:0e:c4:24:29:b0:2f:52:4f:b5:71:fe:0d:a2:d5:a7:e6:f3:
         d5:19:be:4f:a7:c0:30:e5:18:c9:8a:ff:05:9a:68:c9:27:0f:
         8d:b0:64:7b:2d:14:0e:36:3f:d4:b2:23:d4:c6:27:5b:8e:92:
         19:5b:26:f2:74:cd:54:d8:74:31:6e:3e:b3:5f:b5:b6:a1:e1:
         5a:d1:c5:e6:09:50:da:76:41:e1:ac:1f:f8:2c:66:d8:91:31:
         5f:94:f8:2c:7f:51:06:7a:fd:e6:49:12:73:15:e3:07:b8:1e:
         d3:bb:76:3e:d2:10:34:6e:23:a8:d0:7c:c7:93:df:8d:7e:77:
         62:2c:e4:5e:30:b2:a3:6a:a8:3c:da:71:09:2e:ee:a8:36:23:
         6c:29:2e:76:4b:93:b7:5d:55:b1:b8:d2:cf:d1:23:7f:79:88:
         c7:7d:26:1b:c0:ad:9f:a7:83:d1:06:18:3d:37:65:b3:63:79:
         05:4f:51:f6:57:52:f6:90:5d:40:0b:1f:49:b1:6b:df:0d:c7:
         f4:bf:42:b1:d6:56:c7:1f:d3:05:0e:68:8b:98:4c:c8:fd:4d:
         e9:27:bb:94:87:e2:1a:3e:16:76:1d:09:87:6f:44:62:e5:82:
         08:a7:07:c8:41:e5:f1:0c:6f:39:67:8d:36:f2:b5:ae:95:fd:
         c3:d4:02:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:01:46 2025 by rpki-client