Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/fd4deffe-6f36-3083-b387-f5ec48e98c94.roa
File:                     fd4deffe-6f36-3083-b387-f5ec48e98c94.roa (raw, json)
Hash identifier:          P7ovWCn+Wy9GInxYCiKrMQiiB1vOiA7eWdU6GYw1pek=
Subject key identifier:   86:61:84:58:AA:DE:67:07:CD:24:82:47:7C:CD:07:51:99:DA:A2:4E
Certificate issuer:       /CN=39993af2-98b1-47da-a218-47109f41cb97
Certificate serial:       010D0C9F4328584A28ABD34835BF016E1BBA3340
Authority key identifier: 12:D9:FD:69:DE:67:DD:AB:84:4D:8C:72:61:39:2F:F6:D2:4F:76:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/fd4deffe-6f36-3083-b387-f5ec48e98c94.roa
Signing time:             Wed 11 Jun 2025 19:19:18 +0000
ROA not before:           Wed 11 Jun 2025 19:19:18 +0000
ROA not after:            Tue 09 Sep 2025 19:19:18 +0000
asID:                     4150
IP address blocks:        2605:2580::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:28:ab:d3:48:35:bf:01:6e:1b:ba:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39993af2-98b1-47da-a218-47109f41cb97
        Validity
            Not Before: Jun 11 19:19:18 2025 GMT
            Not After : Sep  9 19:19:18 2025 GMT
        Subject: CN=447925fe-8aaa-48e6-8761-7174dd5ba06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e3:b9:79:a0:8a:b0:7c:11:9f:df:8f:2e:f2:
                    e0:c0:95:dd:63:36:33:17:02:2a:0e:70:9a:a6:79:
                    ef:4c:13:b5:b3:1b:2c:9c:60:33:c6:a2:79:6e:0f:
                    84:b5:01:c9:47:c8:ab:90:70:db:07:ba:b6:8b:dd:
                    a7:10:96:42:a3:36:46:4a:72:96:c4:33:fd:80:ca:
                    48:e4:43:71:6d:5f:1e:e1:3f:8d:d7:66:ca:36:ce:
                    35:a6:b6:11:e0:d8:bd:4f:7b:20:e9:23:60:99:e1:
                    7f:a3:cc:b4:ee:26:00:60:08:af:6b:07:5f:6f:09:
                    da:0f:23:65:b9:b8:92:a8:48:2b:55:b9:5a:e9:46:
                    84:f9:a4:d3:92:b5:a8:7d:16:2a:7e:a1:91:42:0c:
                    58:d3:ac:1e:d9:6c:28:b5:a7:15:7a:d6:ab:db:41:
                    8b:03:ff:e7:08:30:97:83:82:9f:0b:66:12:27:ad:
                    dc:0a:21:ec:e4:fe:73:a2:5f:1b:c3:62:ed:d6:4b:
                    35:3e:83:83:26:11:37:66:fa:2a:dc:c0:68:5c:73:
                    b4:a0:fc:89:a8:09:93:5f:3f:66:50:6c:94:d6:8d:
                    1f:33:8c:00:bb:3a:54:2e:b8:24:d8:d6:1c:c0:f3:
                    38:b0:33:71:5d:5f:41:2e:ce:bf:e2:67:62:84:36:
                    ed:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:61:84:58:AA:DE:67:07:CD:24:82:47:7C:CD:07:51:99:DA:A2:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/fd4deffe-6f36-3083-b387-f5ec48e98c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97/39993af2-98b1-47da-a218-47109f41cb97.crl

            X509v3 Authority Key Identifier:
                keyid:12:D9:FD:69:DE:67:DD:AB:84:4D:8C:72:61:39:2F:F6:D2:4F:76:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/39993af2-98b1-47da-a218-47109f41cb97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:2580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:61:84:ed:41:e7:2a:50:7e:16:62:3b:62:5b:c2:1e:0c:3c:
         96:5a:e5:13:02:e5:b2:26:76:f0:fe:03:40:22:b9:bb:e8:74:
         d8:72:79:65:db:f9:2e:ce:21:ed:df:c7:d2:50:01:53:b9:4b:
         e3:2b:d9:6e:12:07:c3:65:ff:48:cd:58:f3:68:64:10:9f:f3:
         68:52:5e:dd:12:a2:ad:e2:c4:e1:4d:9a:d6:39:0f:ec:f9:e8:
         d6:4a:46:a4:ae:13:62:b9:c5:46:97:b8:6a:05:86:97:13:f4:
         7d:4b:37:be:bc:7e:15:1a:e0:8b:f7:7a:5f:38:f9:12:da:eb:
         41:af:78:a0:d6:2e:43:ef:62:a6:10:a3:67:eb:5e:90:af:8d:
         2f:97:a5:3c:62:33:5a:46:1f:34:f5:9e:e2:da:24:ad:bf:7d:
         0d:e0:04:29:06:9f:1a:6e:8c:e7:49:02:47:cc:40:1e:47:4d:
         af:5d:5a:2a:c0:03:75:03:6b:de:9c:ba:2e:12:75:d7:97:b3:
         d3:d2:1f:4b:bb:da:50:a9:2e:c7:b8:70:8e:8f:9c:67:d4:a3:
         62:20:8d:b7:f5:9b:74:2e:a7:86:0c:fa:21:05:b0:c2:bd:3f:
         78:58:68:5f:e2:99:f6:fb:fc:58:2b:f3:c7:06:9f:b5:fe:b6:
         be:08:8c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:33:15 2025 by rpki-client