Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/284b97e2-d8e9-3620-98fe-65963d159161.roa
File:                     284b97e2-d8e9-3620-98fe-65963d159161.roa (raw, json)
Hash identifier:          +Z22tjHfQwGycUjYTRPkbYtjwH3IzsY6Zl89F93TPNY=
Subject key identifier:   9F:8E:84:64:8D:58:86:91:BC:9F:EA:12:32:D1:90:54:81:EF:FF:36
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584A1465608DF26B2CE8D9E76280
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/284b97e2-d8e9-3620-98fe-65963d159161.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        2606:7bc0:1090::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:60:8d:f2:6b:2c:e8:d9:e7:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=22cc83d5-f61f-4983-b1d8-1e2fa9b277a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5a:9b:d0:30:3e:52:00:8d:39:ed:ad:a5:47:
                    1f:a6:cc:48:83:4c:54:41:1f:ed:06:75:60:4a:47:
                    74:57:57:7d:7b:b6:57:e7:3c:f5:62:95:9d:0a:f5:
                    35:d1:e4:89:85:75:82:e1:92:01:cc:7f:66:d4:de:
                    80:4a:99:a2:1d:ca:be:3e:0a:05:39:d8:5e:29:36:
                    86:41:3d:1f:02:76:0f:35:72:a7:4f:34:d2:fc:52:
                    c6:24:96:ea:99:8d:63:9e:bc:cf:f6:17:5d:9e:90:
                    a5:e1:66:15:00:6c:4f:98:2d:39:a5:87:7a:eb:3e:
                    39:60:69:aa:d7:eb:82:4f:d5:45:37:06:51:5f:76:
                    e0:0e:0b:9a:a9:8f:e9:3b:71:50:8f:b7:03:b4:29:
                    8b:d6:0c:37:1d:69:be:6b:61:43:3f:d0:9e:55:63:
                    51:b0:99:ff:18:1d:b2:b8:5e:c8:47:01:c8:f1:36:
                    f4:50:33:32:ea:af:94:6a:e6:b2:7f:8d:66:e8:cd:
                    7c:00:3a:16:6f:8e:a7:99:ce:11:91:a5:6a:e4:19:
                    d5:be:cd:cb:10:5c:34:77:9a:24:69:26:e9:5f:92:
                    07:d9:d1:5e:88:08:83:13:59:e1:5b:b6:3b:5d:65:
                    90:66:93:8e:eb:5c:32:a3:a3:63:04:d8:81:e9:b7:
                    35:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8E:84:64:8D:58:86:91:BC:9F:EA:12:32:D1:90:54:81:EF:FF:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/284b97e2-d8e9-3620-98fe-65963d159161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7bc0:1090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:71:81:96:e3:37:2c:ba:40:fb:37:d0:7c:01:0e:f4:6e:64:
         00:48:81:f3:f6:68:14:38:7e:30:89:06:95:e5:cc:c1:58:b3:
         08:f1:0d:d2:32:d4:b0:37:e0:47:98:44:61:6a:b2:96:ee:7b:
         4a:b6:c4:43:23:6c:26:f3:46:12:92:64:07:a6:96:83:24:d8:
         32:0c:84:ab:e0:df:39:c2:0b:21:f1:71:44:b7:c4:e2:af:39:
         3d:61:5f:2e:f4:21:a6:58:6c:82:32:4c:1d:8c:64:26:5d:21:
         f7:16:79:8f:04:be:11:e0:50:fc:2e:73:32:09:6b:e3:34:34:
         ae:cf:11:9b:14:c7:58:d7:a1:98:8b:22:ab:af:e1:6a:4a:5e:
         6c:e7:c4:e7:35:a2:22:55:df:88:7c:ba:a2:d7:6a:88:5b:aa:
         97:d6:fc:2e:8c:f8:d3:99:f5:05:9b:9d:bc:77:c8:ca:bb:06:
         74:cb:2b:9e:10:61:39:9a:6b:21:fe:93:fc:70:28:6c:c7:07:
         01:d4:85:e5:f8:d9:fd:48:a0:9d:42:46:63:3c:b9:18:e1:42:
         5a:39:4c:98:b2:dd:f6:6d:68:da:8e:5b:79:c0:ca:c9:dc:4b:
         0d:62:9c:df:96:6c:00:69:70:04:31:40:9b:7f:72:86:2c:2c:
         ff:2e:3b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:58:08 2025 by rpki-client