Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/34f989d0-e7bf-31f8-907f-6a2bc2d1097e.roa
File:                     34f989d0-e7bf-31f8-907f-6a2bc2d1097e.roa (raw, json)
Hash identifier:          AxN5O47liZVMTYDuLRWSCb5ANygnjXXRMJEssVwj3Gs=
Subject key identifier:   50:C3:72:7D:85:01:C6:44:43:C6:A2:1A:26:51:00:8C:B2:E5:5C:24
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584A3A159C8659363F3BA6C0FD20
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/34f989d0-e7bf-31f8-907f-6a2bc2d1097e.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     36040
IP address blocks:        2620:11a:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:9c:86:59:36:3f:3b:a6:c0:fd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=78967fa4-fdb4-4cb4-bed3-45661e33f9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f4:4c:de:1c:cd:db:e7:cf:13:81:dd:a4:ff:
                    36:f0:cd:9c:4b:aa:7a:f1:21:12:bc:89:6a:0f:d8:
                    f2:1b:7c:68:b9:de:9b:e2:38:b2:0c:ce:0e:2f:95:
                    8c:7c:62:2d:91:92:bf:d5:67:89:6d:74:37:6a:a4:
                    10:77:ad:e8:53:c8:f1:38:47:18:23:3a:85:82:bb:
                    75:23:1e:d5:a8:69:1e:90:8d:6c:e6:2a:7f:e0:1e:
                    82:81:3b:2d:37:fb:d8:ea:0f:c4:4e:b0:87:ba:79:
                    1d:d6:f0:40:f3:c2:12:d6:c1:63:4d:90:58:0d:f0:
                    97:f0:2a:e9:2f:fb:de:78:4d:1c:7e:9b:69:29:ca:
                    78:a7:5e:ec:05:51:8f:16:09:8f:ee:10:4b:7d:3b:
                    19:83:3c:95:5c:4a:63:13:17:d1:b7:33:39:35:95:
                    b8:5c:85:05:08:69:7c:e9:7c:fd:d6:8b:b9:8e:ac:
                    c9:30:ea:89:b3:37:09:2c:d9:39:14:d0:80:72:ab:
                    42:bc:53:ed:f6:e2:6f:5b:9b:95:3f:f6:c5:50:97:
                    94:f7:5d:50:8f:cb:c2:47:d8:6c:b1:c9:c9:8e:4b:
                    32:96:ef:90:ca:2f:1d:b8:17:8d:92:7f:df:ad:0c:
                    b6:4b:09:4c:e7:a1:2b:f9:a7:2c:99:d3:9a:65:55:
                    93:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C3:72:7D:85:01:C6:44:43:C6:A2:1A:26:51:00:8C:B2:E5:5C:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/34f989d0-e7bf-31f8-907f-6a2bc2d1097e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:07:8b:48:a7:6d:4a:17:df:18:ce:f1:d4:1b:20:6d:a3:a3:
         d6:03:a3:07:36:f5:33:d2:7f:c3:54:27:1c:07:c6:a9:d4:08:
         f0:22:de:cb:e0:80:2a:f1:28:b7:dd:03:66:34:78:da:b6:92:
         f4:66:d4:89:20:67:32:ff:dd:6a:8d:82:17:98:c7:e2:08:6f:
         ed:66:eb:38:ac:5a:e1:51:98:6e:48:ca:d1:f1:b7:1c:1d:ae:
         e1:c5:dd:0c:26:f3:e3:f2:56:5d:20:91:b3:23:31:d8:f8:dd:
         2d:23:ea:a9:cb:b3:1d:6a:8a:63:a4:8c:3b:c7:75:a6:b3:45:
         b4:02:86:ad:53:06:7a:49:5b:f3:3c:88:3c:cf:5c:46:84:b9:
         5c:79:f8:8b:17:27:2d:22:9a:b7:15:8d:e9:f1:22:06:27:ac:
         53:14:f8:26:7e:12:cb:5b:94:63:d8:3d:5f:d0:98:a7:8c:8b:
         fb:e5:37:26:9a:2e:f1:5b:89:84:2e:5c:3c:bb:4e:2a:62:eb:
         02:35:5e:96:0b:89:d9:10:a5:31:4d:9a:df:a0:ed:77:db:fa:
         a5:16:1c:32:45:8e:8e:2f:45:ea:aa:89:b5:e2:c8:e7:0e:d4:
         de:37:4c:85:40:e9:b1:e1:9e:52:01:c3:e6:56:0a:28:04:89:
         64:22:39:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:47:37 2025 by rpki-client