Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ef8bffd8-0d9e-3e31-bab3-133c7528c17e.roa
File:                     ef8bffd8-0d9e-3e31-bab3-133c7528c17e.roa (raw, json)
Hash identifier:          kmAtcP4yQ4x7wHaZ+QZRn/r3VSe1kQy6hTL3xWAtSco=
Subject key identifier:   B6:8F:DA:C3:69:BD:AE:82:50:B5:14:C6:F0:30:9F:CD:A9:F6:5C:E1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AE81CCEDECF00E4323700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ef8bffd8-0d9e-3e31-bab3-133c7528c17e.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20001
IP address blocks:        2605:e000:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:e8:1c:ce:de:cf:00:e4:32:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=bf9bb522-9e68-4fa8-a222-19532ab37669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:08:5f:d0:a5:9d:41:d9:85:9f:9f:cf:c9:11:
                    fd:51:ea:da:6c:2d:04:d9:3b:df:07:0c:03:d9:99:
                    cd:da:63:38:5b:a5:dd:30:eb:d1:86:46:2d:46:2d:
                    38:55:2c:be:e1:f6:e3:87:29:d8:39:62:16:a7:63:
                    18:9b:a0:bc:9a:c4:e5:a4:8a:8b:d1:40:61:e4:40:
                    65:0a:17:f1:97:b1:69:6e:3f:6d:7a:e4:83:6d:1c:
                    5b:03:c4:8c:d7:11:64:65:e1:72:09:1c:78:60:f3:
                    73:b6:82:ce:65:dc:1f:06:a4:ed:97:09:4e:06:aa:
                    72:c2:83:78:5f:ef:47:93:00:68:f1:87:47:71:ba:
                    64:3c:71:a2:f3:48:be:ed:0e:4d:86:15:77:cc:dd:
                    d0:f2:6a:17:b8:13:ad:31:fa:af:c5:e5:09:71:c3:
                    ec:b3:d1:43:61:f4:03:0c:a7:31:93:7a:2c:f2:f7:
                    e9:b8:51:af:02:47:4b:37:a4:94:d6:a6:e9:25:76:
                    5f:72:1f:7c:fd:2f:58:15:4f:2c:4d:7e:15:bc:54:
                    de:ee:92:bb:6c:ab:14:83:7d:77:5f:49:ac:5a:03:
                    82:a8:a8:00:ed:a2:14:2a:76:0d:bb:a8:80:c9:78:
                    fe:98:d1:62:2e:64:25:2e:03:ad:4e:c0:e3:8c:30:
                    65:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8F:DA:C3:69:BD:AE:82:50:B5:14:C6:F0:30:9F:CD:A9:F6:5C:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ef8bffd8-0d9e-3e31-bab3-133c7528c17e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e000:1100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:76:56:5c:20:fe:3d:be:52:ed:08:82:75:cd:08:8f:d2:d8:
         a2:29:0e:dd:ed:e1:62:1f:f2:85:27:ea:d9:84:4a:db:16:7f:
         15:9b:ea:f2:22:a3:02:21:7a:a7:0e:23:60:27:c3:ef:7f:91:
         60:f5:55:af:01:fe:fd:a4:fd:82:e6:7c:58:47:bc:b9:95:cc:
         51:d8:a1:32:81:39:f3:be:11:79:4f:7d:31:3f:ac:1a:2d:3d:
         f1:b9:76:2e:81:a4:b0:ba:d9:37:d1:7d:35:db:d0:4d:a5:ac:
         d5:06:aa:c1:fe:c4:8a:1c:cd:df:0c:55:4e:2d:c0:16:66:e9:
         a0:fd:0e:f0:dd:ce:7e:76:a2:f4:4d:8e:7a:89:26:59:20:33:
         d8:97:81:a2:28:08:4d:39:be:d1:9c:9a:63:68:09:64:a3:83:
         97:24:a7:58:4c:1f:df:63:42:ac:02:cc:c1:6b:dd:31:87:90:
         ee:25:3a:85:28:68:73:bb:8e:10:0d:ab:f7:99:05:a2:95:14:
         09:54:29:62:c7:c9:54:88:28:5e:56:99:53:e1:8a:be:cd:78:
         31:de:df:b3:51:a5:ad:06:0b:05:1c:45:60:96:e5:7b:0c:d6:
         63:64:ef:3a:9b:12:1d:99:d7:c2:01:ee:8f:bf:12:23:98:4a:
         0e:84:fb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:05:50 2025 by rpki-client