Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/6c989a56-e5a9-3746-80a9-ac480cc89704.roa
File:                     6c989a56-e5a9-3746-80a9-ac480cc89704.roa (raw, json)
Hash identifier:          Zhi0KuAmuXehRfZJqVzpMb8D0D/ElokW7k5ait4mc50=
Subject key identifier:   BF:BE:10:7E:93:DB:AF:7E:06:1A:F2:2E:7D:82:BE:01:F3:8C:FD:75
Certificate issuer:       /CN=2e4e9332-b3fa-4993-b1e0-b3204976405f
Certificate serial:       010D0C9F43285849E7BA77C70534885EB7311F00
Authority key identifier: 41:A4:3C:BD:61:0C:4B:19:7C:37:1C:1F:E4:82:A3:DE:78:0E:18:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/6c989a56-e5a9-3746-80a9-ac480cc89704.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     397388
IP address blocks:        2606:63c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:77:c7:05:34:88:5e:b7:31:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e4e9332-b3fa-4993-b1e0-b3204976405f
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=2cfabbf7-0bc0-48e9-ab9b-c98c936f7363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:c4:79:9e:52:5c:36:71:e1:56:67:21:d2:
                    34:22:bd:43:61:d9:1d:77:18:d6:c4:f5:5b:94:63:
                    c4:47:d1:ab:06:6b:4e:65:fb:80:fd:ae:f7:38:0f:
                    8b:70:b1:dc:97:50:56:b5:8d:74:54:25:fd:10:c5:
                    45:59:e4:0c:c0:12:9b:89:a0:19:d3:54:b3:17:13:
                    c4:1e:47:87:20:76:8b:e0:6f:35:58:be:6f:57:46:
                    68:53:03:af:fd:1f:15:a4:c1:cd:50:2f:32:28:17:
                    cd:11:78:c4:ba:8b:c7:4d:38:84:0a:ce:7b:bd:46:
                    f8:9f:13:21:b1:30:ba:b9:b8:33:12:5a:00:e9:a9:
                    fc:b5:e6:2f:60:7c:48:72:a4:4c:e8:5d:b6:cd:71:
                    fc:01:a0:91:ad:01:5a:4c:27:9f:c1:ab:bf:df:1f:
                    f2:a9:d6:3d:45:0e:35:a7:d2:57:55:a0:76:d1:d0:
                    c0:66:f9:b0:42:02:8a:78:b2:cb:0a:da:c2:e2:e5:
                    12:52:93:af:67:98:16:7a:e6:b3:a5:7a:a7:cd:b5:
                    40:bf:ed:12:de:b9:be:6c:d3:01:09:9e:1b:54:f7:
                    7e:db:5f:6d:40:fc:6c:e0:2b:fc:85:8d:ae:b3:f0:
                    67:ab:82:3a:65:69:21:ca:d8:99:e6:95:ad:7a:a0:
                    51:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BE:10:7E:93:DB:AF:7E:06:1A:F2:2E:7D:82:BE:01:F3:8C:FD:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/6c989a56-e5a9-3746-80a9-ac480cc89704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.crl

            X509v3 Authority Key Identifier:
                keyid:41:A4:3C:BD:61:0C:4B:19:7C:37:1C:1F:E4:82:A3:DE:78:0E:18:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:63c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:6f:6b:7d:da:88:48:77:5a:db:1c:8e:67:b7:44:1e:59:45:
         3b:13:f9:f2:6c:25:62:a6:6a:d0:14:29:cb:a0:70:9f:6d:8f:
         25:53:53:10:d4:01:29:f5:13:06:e8:b4:27:ef:c0:b5:d2:49:
         8d:dd:67:c8:42:0e:b4:99:ab:e1:86:7d:3e:63:1e:42:ec:26:
         87:95:53:09:58:ad:0b:c3:b5:f7:fd:1b:c0:d1:b4:15:2d:23:
         7c:f6:40:e6:b4:eb:8f:98:6c:a1:d4:ed:59:fe:3f:9e:2a:ff:
         27:5d:d4:c1:93:7c:76:2c:04:a1:21:47:35:46:aa:44:d8:7f:
         8c:3a:2e:e3:bb:a7:aa:3e:1f:c0:60:d4:4e:48:13:ab:23:f0:
         09:79:f4:31:f4:cd:91:90:9e:04:14:b4:2a:e4:84:c4:9f:9e:
         55:c4:03:b3:ae:4b:57:9a:b3:02:34:ee:3c:4d:ae:ed:8d:de:
         26:04:2a:8c:da:c3:ae:85:de:00:f7:0c:54:b8:bf:e0:cc:96:
         50:e8:6c:5c:68:12:5a:52:c9:52:72:5c:f1:0c:f8:62:2e:62:
         75:9c:3a:77:ac:31:9f:cf:ea:39:03:a6:bc:9d:80:c8:31:11:
         c7:12:11:31:54:94:5b:89:6e:5e:06:e0:06:e9:cf:6c:13:17:
         22:9c:b7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:05:07 2025 by rpki-client