Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/90f541f6-d068-3fd7-881e-02e73edc9f1d.roa
File:                     90f541f6-d068-3fd7-881e-02e73edc9f1d.roa (raw, json)
Hash identifier:          y+EmRdM13EUwk0acQc2Y1dozfUJbxFA7yp77h1hZDIk=
Subject key identifier:   A8:C8:C9:03:EE:73:6E:FD:F6:26:A0:38:82:AB:59:BC:A0:00:B1:03
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F43285849BDDA182D1888AB8739E2EF00
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/90f541f6-d068-3fd7-881e-02e73edc9f1d.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     54994
IP address blocks:        2607:3f40:ff26::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:18:2d:18:88:ab:87:39:e2:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=c28e391a-69d3-47fe-a6a6-72c0614535d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:80:e7:43:76:46:b9:e1:48:eb:72:cf:00:32:
                    94:b5:c3:a9:96:82:e8:3a:e6:32:be:8c:ba:93:37:
                    2f:9a:80:03:92:d2:f1:57:16:e0:9f:1e:85:e9:3a:
                    f5:78:42:a2:e3:3e:ac:0f:b8:27:00:f9:0a:97:d7:
                    5b:d9:f7:e9:29:c4:59:8b:5d:0f:0f:66:f6:18:7c:
                    89:4d:be:c1:d1:e5:75:83:34:64:26:cd:8f:70:28:
                    2c:28:48:00:42:51:8b:16:d8:18:11:73:99:27:d8:
                    db:7d:13:75:65:27:bd:c3:82:f7:10:81:a6:c1:69:
                    b9:1d:d3:23:12:35:9a:b4:8a:7d:28:0b:e9:ed:5d:
                    97:68:49:00:3f:c9:48:6b:1f:b3:2f:1d:41:88:04:
                    20:39:7f:24:f9:ff:db:4e:6b:67:22:32:ca:36:93:
                    25:a0:d0:e7:45:4b:42:50:b1:ab:58:4c:c8:db:98:
                    da:7a:7d:6a:ed:b9:31:74:a2:c0:77:71:9c:2b:46:
                    f7:83:51:d7:bb:75:48:92:27:19:73:2b:a0:13:c9:
                    d6:48:03:d7:f6:da:b2:e8:03:1d:9d:e4:80:1c:1d:
                    c2:76:3f:ef:1f:81:d7:59:c3:4d:79:72:f5:2d:a8:
                    f2:56:89:f1:74:b3:14:fa:ed:7e:fb:f4:eb:b2:ac:
                    ba:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C8:C9:03:EE:73:6E:FD:F6:26:A0:38:82:AB:59:BC:A0:00:B1:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/90f541f6-d068-3fd7-881e-02e73edc9f1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3f40:ff26::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:1c:04:a3:b8:f7:6a:4f:27:53:ce:f9:18:8b:f1:61:3e:4a:
         44:9d:bc:4d:a1:39:bb:7a:31:3f:3b:ca:14:28:a1:52:41:5a:
         de:33:38:02:f0:fa:ef:17:1d:64:27:02:45:b7:63:53:ca:36:
         a7:f0:6d:ca:c3:6f:93:56:88:76:ca:84:67:b9:d3:de:47:09:
         b8:d6:13:7a:48:07:0a:94:81:d7:86:d0:33:19:70:6b:15:c7:
         95:c3:f8:f3:83:ce:8d:b9:43:af:0c:6f:4d:fb:12:af:ff:81:
         96:e8:57:f0:e0:f7:0a:d2:e7:7e:d2:3d:19:69:3e:64:ab:ad:
         c2:6d:d2:50:4f:0c:2c:67:5d:64:76:7b:1d:9c:4a:60:77:40:
         d8:29:ac:32:ae:21:88:34:e0:49:6e:1f:55:68:bc:ef:4d:94:
         e6:56:44:8b:73:0d:27:6d:b0:17:9d:c1:32:43:72:97:7e:a2:
         33:77:57:a1:70:24:f1:6c:0a:8c:42:82:a9:3f:e1:fd:ca:de:
         3e:4f:5f:cc:76:09:d3:61:db:c7:1f:47:31:33:20:af:fb:20:
         ef:a6:00:63:61:4d:03:70:b2:e5:65:c5:c6:19:fe:62:2b:a1:
         b2:09:27:50:bf:3f:5f:5c:42:63:41:ae:51:92:78:d9:5d:5f:
         02:29:e2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:22:36 2025 by rpki-client