Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa
File:                     ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa (raw, json)
Hash identifier:          2w2M2y7PXKSNLIKp5VMZc/1jVw0xuNowSby22syQ/+g=
Subject key identifier:   4D:3F:F5:15:D8:2F:22:67:D3:F6:50:78:41:C8:40:7C:D3:9F:1B:10
Certificate issuer:       /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Certificate serial:       010D0C9F43285849A61F441285713D65FE22E018
Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     62494
IP address blocks:        2604:9440:2300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:44:12:85:71:3d:65:fe:22:e0:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=ba45c0f5-1244-462b-996a-3b264e70e400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:0a:c7:51:8d:9d:e8:7a:83:7b:85:53:a4:
                    97:54:24:f5:e4:b6:30:e6:36:cf:04:23:8d:4c:3e:
                    ef:13:e0:84:8c:d6:38:ee:6b:de:3c:ba:76:61:c1:
                    9c:8d:78:93:82:e2:14:21:ad:ff:b2:ba:ef:fc:99:
                    b8:48:52:07:00:95:56:a3:bd:b6:a2:15:e6:f8:43:
                    ef:e3:2e:94:ca:4b:5f:50:0b:99:e5:30:b3:57:86:
                    13:ea:97:c2:14:29:1e:76:71:30:32:62:9d:9a:8e:
                    f2:b6:08:4e:5c:f7:2b:ec:c4:c7:8b:32:94:83:ba:
                    a2:fa:a4:4d:61:cd:35:75:f8:21:2b:ef:80:bd:72:
                    8c:8d:8e:8e:8c:25:76:ca:19:ba:5a:19:23:b6:16:
                    10:41:c7:74:af:10:1b:12:fd:db:e2:d2:2c:b4:5a:
                    01:34:48:f8:9a:7a:bb:a1:a5:eb:5c:58:1c:43:7b:
                    8a:03:b5:a6:61:b2:05:53:86:1e:72:c1:84:2b:bf:
                    f6:54:84:ad:da:77:13:fb:19:88:ca:c9:a8:d3:a7:
                    21:f6:10:4c:57:4a:82:7a:8e:d2:90:8c:5c:c2:cb:
                    58:e1:df:39:d8:97:04:9b:31:09:39:61:21:94:a1:
                    ce:c0:af:97:22:fd:56:bc:80:3e:33:e8:3b:50:7e:
                    43:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3F:F5:15:D8:2F:22:67:D3:F6:50:78:41:C8:40:7C:D3:9F:1B:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl

            X509v3 Authority Key Identifier:
                keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9440:2300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:a4:e3:f3:a2:64:ca:64:0a:40:49:dc:69:3f:e5:0e:e3:0f:
         bc:1b:8a:a9:b7:f7:03:69:3f:78:ab:f2:a8:9b:b4:f9:6b:15:
         b2:cd:d3:88:36:54:90:39:ce:fa:dd:b5:8c:7a:d0:81:98:47:
         d7:54:2d:3e:e3:7a:b2:dd:26:f7:14:84:e3:ef:99:6e:06:f0:
         70:a2:e9:45:cb:ce:c1:47:d2:2c:19:7e:f4:01:14:cf:7b:a9:
         2f:c5:1a:8a:12:1f:33:7d:f5:64:35:e1:da:d1:95:e5:57:60:
         1a:1c:d1:36:14:e0:a1:0d:02:94:c6:0f:29:c7:59:15:2c:55:
         77:36:3b:9a:45:f7:88:1e:0e:80:c9:13:46:04:2e:31:c2:e9:
         1d:9e:3d:f0:24:11:17:99:f3:8a:e5:93:66:9e:31:8b:e4:b4:
         a1:1e:c8:13:0a:8f:67:31:4b:cf:d9:83:27:f3:cd:e6:bd:aa:
         e3:ec:b5:b2:55:ea:59:66:c5:e2:43:e7:ab:42:f7:7c:dd:45:
         29:e9:38:bd:e8:98:c5:dc:52:91:f2:3e:65:42:82:87:cb:6f:
         a3:2a:13:88:58:91:9f:1d:88:fa:04:22:90:e9:ce:3d:84:21:
         a0:39:d8:91:74:0b:8c:51:cd:ca:ce:95:37:23:a8:b6:e3:de:
         5a:b8:4e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:35:12 2025 by rpki-client