Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/3ca1501c-31c5-3e12-8c02-67dac83d960d.roa
File:                     3ca1501c-31c5-3e12-8c02-67dac83d960d.roa (raw, json)
Hash identifier:          tPqop7L346M8EcW4jiExmLoZ/tyg8sN6mQV/NdQTLSw=
Subject key identifier:   2F:18:BA:49:BF:7C:C2:14:1F:5F:31:5E:41:6A:50:73:B4:77:E4:F5
Certificate issuer:       /CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
Certificate serial:       010D0C9F4328584A58CAF9115B979630EDB44200
Authority key identifier: 56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/3ca1501c-31c5-3e12-8c02-67dac83d960d.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     13506
IP address blocks:        2610:108::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:ca:f9:11:5b:97:96:30:ed:b4:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=7c9ae3df-d756-4e97-9487-bbc36f223444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3e:66:12:d5:c0:e3:72:8d:ba:09:4b:ad:5f:
                    c6:70:7a:1b:8d:f4:76:ab:00:8d:00:fd:a6:21:2e:
                    7f:db:e0:82:78:b5:1e:18:e6:40:89:ca:eb:9a:cd:
                    1d:3c:7d:90:39:4a:59:f2:32:09:9d:20:60:e8:7e:
                    95:c5:da:7d:94:25:ee:9b:1f:a8:c0:1a:71:f5:d7:
                    80:ec:ef:f3:43:1c:fe:5d:1c:8c:3a:df:2b:c0:8d:
                    f2:46:49:0b:6a:2d:5a:72:e6:a6:df:33:02:43:b7:
                    de:f5:38:47:f8:56:18:ca:b9:bf:ef:a8:71:9a:0b:
                    65:4e:88:64:ea:f7:e1:49:5c:5b:1b:22:f0:c0:ea:
                    2e:40:50:56:09:64:34:2e:4b:2d:02:c1:d0:63:66:
                    b7:65:bb:c2:68:6a:3e:0a:56:fb:23:94:9a:f7:66:
                    f4:c3:9d:26:44:68:1f:28:96:4b:b7:6d:03:d9:a8:
                    32:0b:bc:ab:f6:48:2f:30:0d:23:59:53:5a:47:00:
                    e9:43:b4:62:64:b7:d8:68:c3:a0:1a:4e:77:f9:77:
                    cf:a7:71:03:4d:17:df:0b:4d:0a:1d:6e:01:4a:33:
                    60:c9:89:1c:34:f5:ec:56:06:b9:6a:bc:cf:9e:17:
                    0f:a0:9a:bd:6c:11:d7:0b:c3:5c:b8:47:83:61:72:
                    1d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:18:BA:49:BF:7C:C2:14:1F:5F:31:5E:41:6A:50:73:B4:77:E4:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/3ca1501c-31c5-3e12-8c02-67dac83d960d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl

            X509v3 Authority Key Identifier:
                keyid:56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:108::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:6d:94:95:77:8f:a8:6c:8a:78:8a:dd:e5:e5:e4:fb:fe:b8:
         fb:73:02:24:cf:fa:7f:bf:73:35:34:53:e4:77:dc:6d:36:5b:
         42:5e:13:5d:d1:fc:43:ad:b8:91:c4:23:c2:9b:c8:f7:92:e0:
         38:09:ac:6b:90:b7:88:e9:11:5f:1f:79:4b:c3:db:d8:ce:17:
         c8:b4:d9:f9:61:16:9c:f1:1c:99:89:c8:ce:6a:d6:18:68:64:
         e3:00:2c:18:9a:1a:af:3c:27:1f:00:b1:60:58:82:e5:c7:86:
         f9:4c:97:74:c1:19:05:43:a2:98:22:70:d6:f6:e5:c8:44:d4:
         7d:d6:d1:72:b2:3a:24:8b:48:01:50:ba:96:a9:96:c5:76:3e:
         50:5a:83:21:5b:db:bd:13:1b:e9:bf:13:9b:33:e3:1c:5b:72:
         0d:cc:6c:2a:89:0e:f9:3a:5a:58:6f:c5:54:7e:45:d8:c0:e3:
         66:d5:da:54:62:5b:bf:bf:af:9e:63:99:91:6c:8a:1d:89:9c:
         a2:0e:a6:3c:d4:51:d8:9a:ee:12:91:3d:87:18:41:b5:8b:2d:
         ac:1c:ee:e6:b6:34:fe:08:dd:83:a9:e0:73:48:2a:14:c1:fd:
         4e:92:97:44:e4:c3:34:3b:ce:c9:54:59:81:49:a7:76:1e:01:
         8e:a6:7a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 04:37:12 2025 by rpki-client