Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa
File:                     3a3e578e-9cda-3397-800c-e3cbde377721.roa (raw, json)
Hash identifier:          zePH/IH5Go/Vz95pkZuCmJJt4a9j7BX4/im24i7LzVM=
Subject key identifier:   89:9F:91:FA:EB:4C:AA:02:8E:28:84:91:1C:3B:68:6F:03:9F:9E:99
Certificate issuer:       /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Certificate serial:       010D0C9F4328584A3E45AD7514E3999CE9E51C80
Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        2607:dd40:1000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:ad:75:14:e3:99:9c:e9:e5:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=90b7054e-e54e-4c32-b417-a08b0bfa4363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:8a:f9:08:f8:5a:08:db:55:40:0b:7f:69:
                    a2:b8:6d:51:e4:54:6d:0c:d0:ca:e5:0f:f9:bc:0c:
                    c7:40:5a:8c:ad:0b:d1:82:27:50:7f:33:63:08:b4:
                    d9:94:68:2a:de:68:08:ed:e7:2c:02:52:f8:49:49:
                    b8:1e:a4:da:d4:5a:32:ac:b5:80:b3:a5:b0:a9:67:
                    2c:cd:63:4b:db:84:85:47:7d:7a:53:2c:61:3d:fb:
                    9f:4b:99:73:3f:31:e7:57:79:6a:42:9a:75:86:28:
                    ef:48:6b:29:64:a0:6b:f5:ae:79:42:e9:fc:e3:e9:
                    e2:c9:1c:03:af:4c:85:e0:c6:db:24:37:49:8b:25:
                    94:fe:e1:c3:18:29:6d:24:56:85:40:a8:27:52:68:
                    e6:0d:a9:e8:3c:85:d8:e7:ea:18:b5:9e:3d:25:05:
                    8b:b3:a3:2b:aa:27:d7:3c:c8:44:48:3f:5b:9f:8a:
                    78:9f:91:d1:f0:2d:f3:d8:d5:29:28:86:e5:3a:23:
                    f6:29:86:3b:76:fb:7a:69:fc:1a:e0:05:58:65:8f:
                    23:23:26:b8:58:e5:8c:e4:9f:3a:c8:87:54:91:8b:
                    52:dd:16:14:c8:65:02:25:20:a0:5f:66:13:65:a8:
                    0a:a4:ca:6c:9f:15:f2:7f:e8:63:f3:a3:7d:9c:79:
                    78:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9F:91:FA:EB:4C:AA:02:8E:28:84:91:1C:3B:68:6F:03:9F:9E:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl

            X509v3 Authority Key Identifier:
                keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dd40:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:19:0e:ef:2e:3f:ea:8c:d7:97:22:ed:e9:d9:93:b2:e7:ae:
         39:84:89:ea:97:83:f1:42:33:a4:2b:3e:26:0a:b1:35:51:db:
         bc:eb:3f:ae:b8:5b:b9:ca:8d:cf:4a:97:bf:d7:2a:15:94:b0:
         4a:41:7b:97:78:0e:c3:d6:88:36:93:92:57:8d:13:81:7a:cd:
         b0:20:30:17:a3:38:34:5e:19:33:82:5c:35:d3:7d:30:23:6a:
         aa:28:e9:31:19:c4:0e:c5:7b:69:a2:2e:a7:c3:ee:a7:7f:5f:
         e5:0c:8b:eb:90:1d:d3:ed:73:8e:90:0d:4c:5a:62:e6:91:47:
         f5:91:e7:25:0a:55:97:fa:35:57:c0:90:cd:0a:16:81:31:b7:
         b9:0d:5e:99:5b:4a:e5:2d:f0:cb:cb:fe:68:23:b7:bd:8b:ab:
         6c:9b:df:93:93:a0:9f:86:f4:84:fe:47:37:f9:6b:e5:ad:c9:
         f3:11:e5:04:ef:fb:fc:c3:2a:4e:34:ba:cf:39:a8:d0:e5:11:
         d7:e0:f9:dd:52:6f:82:47:3e:f4:20:34:f7:5e:92:cd:2c:ef:
         ad:d3:3c:4f:99:93:0c:98:c0:d9:6b:9a:66:9f:eb:ba:e0:40:
         ea:f6:ec:39:d8:74:da:01:0b:89:17:c8:fb:9c:45:64:96:26:
         86:e7:90:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:15:22 2025 by rpki-client