Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/dd913951-740c-314f-9c1f-a2c8ba093096.roa
File:                     dd913951-740c-314f-9c1f-a2c8ba093096.roa (raw, json)
Hash identifier:          3KlamfKDIoHGbeVcvPXGPVOQ8G4m7Fa0mG0T6s/B5qA=
Subject key identifier:   2A:49:16:C8:FC:3F:7B:2F:0A:DF:B7:5D:7C:2A:1B:00:00:78:B1:6D
Certificate issuer:       /CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
Certificate serial:       010D0C9F4328584A58CAF8E11F28B1A418E3F800
Authority key identifier: 56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/dd913951-740c-314f-9c1f-a2c8ba093096.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     13506
IP address blocks:        2610:108:4100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:ca:f8:e1:1f:28:b1:a4:18:e3:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=23c78b84-d21a-489b-b6f3-7d6b6fb48661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a9:55:46:82:fe:06:2e:87:62:db:7b:d5:a2:
                    91:79:41:96:af:d7:bc:d8:9c:9b:b6:ad:80:d1:2b:
                    ef:0e:31:04:73:86:6d:3c:83:64:9c:09:16:62:9f:
                    3d:31:5b:42:ec:48:28:4c:6c:2f:cc:61:9b:57:ff:
                    a2:28:b5:79:1b:95:3a:6f:fb:c5:aa:55:58:0d:85:
                    13:c4:03:bc:90:09:c5:7d:85:ed:56:44:70:40:5b:
                    05:08:e1:3c:42:f5:0b:f2:59:db:0a:ba:f5:c5:f3:
                    31:07:f1:5d:a1:dd:51:ac:bc:04:c4:5c:0a:d7:97:
                    56:ae:ad:09:8e:88:11:3e:fa:fe:ce:38:7b:36:63:
                    0f:bb:db:71:57:04:9f:19:cf:1d:f5:04:07:a8:0a:
                    5a:29:68:6a:4a:d0:46:37:2f:c5:ae:03:3a:fd:61:
                    0b:f1:ba:05:04:3a:c8:82:78:15:3b:99:5b:b6:a4:
                    2d:2b:cd:dd:fb:99:38:d8:c0:92:7c:b3:d8:59:7a:
                    76:f4:12:1e:58:3c:23:79:c7:ec:fe:a1:ed:3e:db:
                    02:68:b8:01:d0:08:c4:e4:37:a7:9e:4a:87:5e:20:
                    92:ee:53:d5:9c:1e:15:f1:1c:7e:91:83:78:c5:21:
                    1a:b2:00:0e:2c:36:c0:80:ed:af:54:88:a0:3a:9a:
                    b1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:49:16:C8:FC:3F:7B:2F:0A:DF:B7:5D:7C:2A:1B:00:00:78:B1:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/dd913951-740c-314f-9c1f-a2c8ba093096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl

            X509v3 Authority Key Identifier:
                keyid:56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:108:4100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:98:93:e2:77:8e:5d:65:07:bc:8c:60:40:18:9e:a6:1b:4b:
         a7:a7:49:d7:66:a0:22:82:c6:37:37:c1:dd:f0:69:d8:e7:e9:
         c5:46:90:1a:a4:ed:19:10:ca:a1:e5:79:14:0e:74:23:40:5c:
         f4:ac:3f:89:71:b0:e7:70:52:45:eb:d7:37:6b:f0:1a:21:b2:
         ee:e1:2f:aa:b1:aa:08:c3:af:08:02:82:52:69:48:ec:5a:e9:
         be:d1:9a:56:35:69:f0:f1:9d:c6:4e:26:c1:2d:f4:2b:0d:51:
         33:73:e3:3c:65:15:1a:7c:11:30:cb:bd:63:8e:23:0f:ee:c1:
         43:be:06:c0:61:0a:83:32:3d:cb:2f:f4:2b:d8:3c:a4:53:61:
         22:f2:ff:d5:e5:2c:2d:a3:d8:b9:96:33:b1:bc:4c:e0:ae:b3:
         c6:a0:8e:ab:92:ea:2f:07:28:cd:33:72:75:28:d9:e4:51:42:
         2d:4e:3a:8d:af:e0:14:1e:6f:1d:d4:9d:1a:93:85:07:62:f0:
         e5:b2:33:c6:33:04:58:78:29:26:2c:82:c9:d4:82:2d:14:82:
         13:22:86:36:6b:c3:fa:8c:2d:3e:d1:3b:16:e6:1d:18:04:c5:
         23:e7:c3:5c:00:ea:02:0e:7f:de:de:e3:0e:1b:26:59:1f:bc:
         3c:33:1b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 04:32:59 2025 by rpki-client