Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/a6a9d896-2d48-3ca0-a293-3e1eb74a3c32.roa
File:                     a6a9d896-2d48-3ca0-a293-3e1eb74a3c32.roa (raw, json)
Hash identifier:          8OAJnqa5Kz/AzDfeqRTWRm1Pm4HbSClLNgCcABTbnkk=
Subject key identifier:   05:3E:10:91:86:DC:86:8C:56:18:65:1D:BC:9B:E7:EC:74:C4:06:4A
Certificate issuer:       /CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
Certificate serial:       010D0C9F43285849C20A1F56963CE032CDDACE00
Authority key identifier: 0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/a6a9d896-2d48-3ca0-a293-3e1eb74a3c32.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     36001
IP address blocks:        2605:bbc0::/32 maxlen: 48
                          2606:3d00::/32 maxlen: 48
                          2606:ab80::/32 maxlen: 48
                          2607:580::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:1f:56:96:3c:e0:32:cd:da:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=cd9d9e0f-9521-4e92-83f4-4d568f69fb87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:6b:9b:f1:8b:d1:ab:94:1b:45:17:36:8d:
                    65:89:31:ca:3b:5d:2b:a6:11:a9:5e:6f:40:46:c0:
                    3f:a5:35:58:da:81:19:77:a6:53:6c:3d:5a:8f:cf:
                    3c:14:4a:0c:7b:fd:ba:1e:3c:a2:49:3c:6d:a5:eb:
                    0a:09:e5:71:39:b2:a0:28:09:15:0b:03:9e:77:6f:
                    cc:8c:bd:fa:69:45:60:79:05:0f:a6:ae:4a:1c:e3:
                    3b:e9:e8:1e:d0:1b:43:8e:31:5c:05:4f:3d:60:46:
                    46:8e:2f:9e:5e:d2:4e:25:4c:84:47:b0:69:bc:fa:
                    c0:f1:95:2a:29:b6:b0:83:2a:a6:2b:01:9a:58:9a:
                    82:2c:e2:1c:de:86:64:b6:23:8c:8e:2b:53:81:3e:
                    78:d9:a4:70:8d:e9:f7:21:b2:e3:72:f7:73:6f:ba:
                    06:8c:db:a6:5d:5d:e0:55:44:15:13:9e:25:41:07:
                    41:f2:d0:ee:6c:57:14:16:ac:93:e3:99:6e:15:6c:
                    6e:db:08:88:35:3c:70:17:d7:0c:f3:a9:2f:9b:22:
                    7f:91:08:4a:6b:8b:a4:4c:c5:0c:c6:63:5f:40:6f:
                    84:5e:57:fb:86:90:51:02:d2:67:fd:e6:7f:86:48:
                    e3:38:23:b5:ea:f4:a5:f2:59:53:a5:40:ae:8e:72:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3E:10:91:86:DC:86:8C:56:18:65:1D:BC:9B:E7:EC:74:C4:06:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/a6a9d896-2d48-3ca0-a293-3e1eb74a3c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.crl

            X509v3 Authority Key Identifier:
                keyid:0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:bbc0::/32
                  2606:3d00::/32
                  2606:ab80::/32
                  2607:580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:6f:8d:af:07:77:65:49:ec:1c:d3:d7:9a:13:6d:0a:db:b8:
         9e:61:15:e7:40:47:4f:6c:6a:03:2d:4c:5f:24:14:36:1e:57:
         c1:ef:84:50:20:7b:61:b4:b8:02:10:61:aa:37:a0:11:5c:33:
         8f:1d:71:fa:27:e2:39:3c:b9:0e:d8:12:fc:9f:67:9e:37:c1:
         b0:a8:ad:90:3b:e9:f5:f8:2b:ca:7b:c7:e9:11:f5:bb:ee:cc:
         55:4d:e1:11:da:bf:cd:89:bd:cf:3e:e7:42:04:a2:d9:2c:67:
         21:c6:dc:80:c7:a5:5c:87:68:7d:85:78:fd:8d:33:d4:16:5a:
         f1:86:83:0f:52:38:6f:c8:e9:7b:58:1f:ad:40:17:b1:b8:6a:
         6e:4a:38:2b:b8:3d:a0:76:e8:77:1c:d0:43:f3:fa:d9:f3:b4:
         af:75:35:3b:2f:16:de:74:0f:75:09:89:ec:1e:be:f6:ed:f9:
         9f:16:fb:92:14:61:90:9d:a0:48:23:65:06:a5:a3:92:52:d7:
         24:1b:b8:cb:60:c8:5d:98:c0:eb:fa:9c:aa:a6:5d:81:55:bb:
         eb:01:1d:30:9a:0f:ea:17:4d:bd:47:07:42:fe:c3:d1:18:f7:
         27:8d:2b:19:63:9a:e7:81:01:29:f0:c6:c3:da:d8:66:ea:77:
         b3:9a:53:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:45:16 2025 by rpki-client