Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ae4f761f-213c-39c7-8fc2-ce4c55aca182.roa
File:                     ae4f761f-213c-39c7-8fc2-ce4c55aca182.roa (raw, json)
Hash identifier:          iN2pc4vB5GuStZG8MkAbPzf05cfof1m54q0a5vLqhWY=
Subject key identifier:   C6:EE:34:DF:55:65:F9:80:2B:5B:F6:99:A5:06:57:F4:5F:52:BD:06
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B072635E35F3230C12A80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ae4f761f-213c-39c7-8fc2-ce4c55aca182.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        2620:11a:c004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:07:26:35:e3:5f:32:30:c1:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=612e2236-bc91-4fe5-8e64-441612bc33b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d9:b7:9c:f6:0a:65:32:9e:35:6f:10:74:dd:
                    45:84:18:d5:f8:fe:31:ab:f0:00:af:5a:34:f6:02:
                    ff:c6:f2:69:59:ef:48:a1:21:99:f3:36:12:79:f0:
                    6b:5b:30:f1:1b:75:6a:cc:05:20:20:a3:88:59:4d:
                    a8:05:1b:96:cd:02:63:d6:ca:b3:85:c0:16:a0:11:
                    12:f7:53:fb:bd:6e:33:af:2b:3f:b6:0a:fe:a2:96:
                    56:84:3d:f7:6a:7c:67:c0:1b:82:6c:cd:29:2c:58:
                    4d:f5:4d:ca:b0:0e:f4:1b:d4:a2:2b:9b:a2:84:4d:
                    94:ad:cb:51:74:ee:9b:7b:d5:49:6d:d4:6f:94:48:
                    ee:2e:a7:01:ca:74:68:92:87:e0:c2:22:64:de:5a:
                    a0:55:2e:ff:61:b1:46:fc:2e:03:ee:a7:66:00:31:
                    5d:0c:b8:13:cf:d7:85:0a:22:08:69:28:3b:38:77:
                    af:89:3a:be:8a:39:0a:ac:7f:60:4f:f0:b7:2e:5e:
                    71:70:98:c3:14:35:a8:1e:1b:71:bd:5d:74:ec:15:
                    83:4d:11:c7:d1:9e:30:c8:ec:45:a6:d1:f7:4d:8f:
                    f6:e1:94:68:f6:e4:42:7d:5d:49:41:7f:85:40:a9:
                    29:7f:38:ed:ea:0f:3b:f4:2a:e9:0b:66:60:0b:91:
                    92:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EE:34:DF:55:65:F9:80:2B:5B:F6:99:A5:06:57:F4:5F:52:BD:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ae4f761f-213c-39c7-8fc2-ce4c55aca182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:d9:c3:15:be:b4:3f:8b:9e:39:10:09:15:f0:d4:36:de:6b:
         84:70:59:93:a8:96:5f:db:b8:cb:fb:0a:5f:ee:c8:47:c8:cc:
         54:09:79:33:1f:74:f6:0f:0d:0c:85:e2:56:52:82:08:1a:0c:
         42:f5:49:9b:b2:40:92:d8:63:78:20:e3:ec:ae:73:98:ee:dd:
         33:87:4b:1e:51:76:2e:4d:56:59:8d:30:91:86:18:05:b3:29:
         4f:8c:72:41:a5:ec:a2:d0:03:5a:d7:6f:2f:39:79:a2:31:95:
         cf:15:49:0e:37:68:06:76:7a:79:f5:f9:4b:dc:f0:94:d6:57:
         45:85:58:71:0a:8f:4d:f0:b9:74:88:11:1f:b0:f0:0a:91:1b:
         aa:31:59:af:47:30:e1:1d:83:d5:1b:9e:ab:03:81:86:3c:e1:
         61:3d:4d:3e:75:4c:42:1f:eb:63:0f:79:e3:29:6d:b5:ff:d6:
         12:ff:dc:f5:56:8d:31:93:d3:fe:9b:35:41:22:a5:e5:31:11:
         5b:3a:cf:2c:68:25:2d:04:53:a7:f4:1a:96:65:28:5c:49:fd:
         59:47:7f:37:55:b6:cd:8c:5c:e6:fd:4a:d0:eb:d3:11:b8:16:
         ff:70:b7:8e:2f:88:4b:66:e2:04:39:e3:ff:df:77:4d:11:4b:
         26:9b:1a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:57:10 2025 by rpki-client