Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/4dbde640-83c6-3be6-b46f-2ae2a17ab41c.roa
File:                     4dbde640-83c6-3be6-b46f-2ae2a17ab41c.roa (raw, json)
Hash identifier:          jhd9iEK/lmStU0Tbt453+r0FsKU3n/J2KXRIXZXDZtc=
Subject key identifier:   EA:A2:5C:FB:7D:46:83:B5:CD:54:5B:7B:2E:04:71:D4:0E:B7:03:68
Certificate issuer:       /CN=33097e36-cef3-418b-a895-cacb797d1eeb
Certificate serial:       010D0C9F4328584A3B7AF629A3C199A00E24A180
Authority key identifier: F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/4dbde640-83c6-3be6-b46f-2ae2a17ab41c.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     10958
IP address blocks:        2606:7a80::/28 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:f6:29:a3:c1:99:a0:0e:24:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33097e36-cef3-418b-a895-cacb797d1eeb
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=36c8e38b-e91c-4599-a6c2-88f42eb4a4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cb:a2:75:99:e3:cd:85:a8:28:0d:7f:86:c0:
                    de:08:e4:60:c3:a7:d2:4f:fc:53:7a:19:38:50:7a:
                    23:4b:7e:24:51:13:fc:3a:40:db:7a:4d:f6:ce:e8:
                    e9:ec:71:19:7a:91:ac:bf:e5:ac:8b:99:a5:11:f9:
                    78:a7:23:2f:fe:b7:e4:3a:7d:92:f1:03:44:10:f8:
                    e1:51:f6:2a:5c:ae:f8:c5:bb:a5:50:03:a5:74:a1:
                    33:8d:2a:86:46:ec:b9:ff:32:b3:a9:32:6f:41:17:
                    34:25:6f:17:62:9d:ce:5c:4e:70:bb:04:8f:6e:93:
                    80:3c:de:94:c6:9e:2c:9e:6d:32:ea:13:b7:c9:69:
                    ca:00:91:d7:f0:a6:4b:72:d8:ca:60:43:1b:92:16:
                    2e:6b:61:96:f8:1a:26:e1:0f:e0:93:0d:64:53:fc:
                    63:9c:90:2c:5b:6e:53:c9:ac:12:2b:ad:73:b1:fe:
                    c1:74:48:a4:7f:37:72:be:1d:d5:de:7e:06:0a:5e:
                    8a:71:64:c4:a1:b9:05:a0:57:b1:8f:77:cc:cf:a7:
                    39:b7:b2:ec:e9:5f:d9:c7:f8:6b:bd:be:13:20:78:
                    44:f5:b6:ec:c7:36:4b:16:cd:7b:c6:4e:3a:e0:ef:
                    cd:48:5a:ca:23:ae:99:4e:d7:1c:93:40:2d:dd:29:
                    ce:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A2:5C:FB:7D:46:83:B5:CD:54:5B:7B:2E:04:71:D4:0E:B7:03:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/4dbde640-83c6-3be6-b46f-2ae2a17ab41c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.crl

            X509v3 Authority Key Identifier:
                keyid:F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7a80::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e6:a0:a9:97:08:ed:1e:2e:8b:c4:fa:dc:18:44:2d:ec:99:
         a3:3c:a8:08:79:38:35:b9:e1:02:80:21:83:12:fc:a4:59:84:
         9f:f5:81:16:a1:62:81:09:cb:bb:f6:2d:52:cc:8e:68:92:4b:
         ef:0c:85:7a:27:61:69:ed:10:39:67:c9:f5:b3:a6:d7:2b:70:
         f6:ac:d3:ea:e5:fc:12:8e:4f:99:2f:bb:ad:d7:91:59:e6:bb:
         ec:bc:6f:99:3e:f7:3d:ae:b6:ca:11:09:d3:14:8f:32:b9:60:
         18:8a:25:12:5a:35:74:ed:00:45:85:fe:5f:43:a2:df:89:3d:
         11:2a:6f:4e:7f:96:7c:e8:90:34:41:19:e0:ca:ed:45:e7:1b:
         77:3b:aa:a8:8c:bb:bc:36:78:92:1f:57:18:b0:cd:9f:29:5c:
         aa:cb:ce:da:15:fd:7e:9c:fc:18:4d:84:01:ab:df:5a:8f:6e:
         42:74:40:16:27:ca:2a:61:cc:80:46:69:b7:54:ea:fb:39:bc:
         93:3e:aa:81:16:ce:94:0b:fd:ab:b1:2f:ef:42:7f:59:10:e0:
         8d:54:1c:9c:c6:86:84:8f:dc:fe:2e:7d:79:9f:23:50:31:27:
         d6:66:38:e2:b0:50:d4:84:ac:4e:74:d9:98:62:04:79:03:83:
         0d:1b:e5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:54:12 2025 by rpki-client