Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/11120825-5189-3b60-a824-409b27b06056.roa
File:                     11120825-5189-3b60-a824-409b27b06056.roa (raw, json)
Hash identifier:          RLJ9yCvfeahxM+WrwBB1a3ONU4/UlfVVKRN8SbbyrR0=
Subject key identifier:   59:DD:DC:8B:48:39:9A:2E:3E:4D:4C:BA:29:AC:D0:A6:7E:FA:A8:1B
Certificate issuer:       /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
Certificate serial:       010D0C9F43285849BC74AE90361FBA0E60636F20
Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/11120825-5189-3b60-a824-409b27b06056.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     14397
IP address blocks:        2605:c180::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:ae:90:36:1f:ba:0e:60:63:6f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=f73a5ecd-0a67-4695-b0ce-0244359765fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:5a:95:fb:86:85:95:c5:be:0b:6c:31:9a:
                    a2:b6:03:67:fa:ea:07:8e:f3:db:55:8d:2b:89:87:
                    c0:87:4f:ca:53:b8:bd:3e:c8:0a:4c:24:d8:34:2b:
                    d8:ab:c9:f6:1e:1b:67:21:2e:62:93:f1:23:98:33:
                    33:0d:78:1b:f3:cb:1e:06:6c:45:17:eb:58:ea:d5:
                    9a:12:f1:08:41:99:b8:bd:3f:b3:74:d6:61:ce:1e:
                    3e:fb:db:47:5e:14:d7:09:7f:cd:b0:5f:f7:72:e3:
                    d4:5d:5a:4c:95:0f:ce:ce:06:54:8a:58:83:8b:02:
                    93:1c:10:5b:d9:0c:ae:37:79:c7:96:19:53:5a:bc:
                    81:26:05:5b:b9:c7:d8:cc:18:f1:ee:da:0a:c2:ba:
                    97:99:ec:2f:51:93:2b:51:52:6e:f2:97:29:18:41:
                    41:86:e4:16:c8:e8:16:61:27:58:ce:53:9d:c9:f2:
                    17:de:a3:36:43:25:ab:9e:58:e0:8c:6d:59:b2:9d:
                    09:f5:94:8f:48:e7:43:ff:1b:3c:f5:ee:57:bc:92:
                    3f:6e:a7:e9:c8:13:fe:d0:a6:1a:98:a4:33:0e:7d:
                    17:61:0e:ee:e5:e6:e6:49:29:3b:8c:b5:04:1d:9c:
                    3e:bd:19:cc:87:d8:e7:e1:b4:2e:ec:af:df:58:11:
                    40:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DD:DC:8B:48:39:9A:2E:3E:4D:4C:BA:29:AC:D0:A6:7E:FA:A8:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/11120825-5189-3b60-a824-409b27b06056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl

            X509v3 Authority Key Identifier:
                keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c180::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:80:b3:ee:db:20:77:ab:8d:b2:6b:dd:24:13:02:ca:f2:8f:
         4b:08:90:0a:9e:3b:25:9c:24:9e:50:24:e2:8b:2e:58:bc:8b:
         04:56:07:b4:19:d2:74:b6:66:cd:bf:da:30:c9:da:d0:8f:12:
         b8:43:7e:9d:77:ed:81:28:b8:03:a8:4c:02:db:71:a0:a6:54:
         42:0e:26:bc:3f:a9:16:57:10:88:93:d3:93:b4:03:03:8d:bb:
         01:97:9d:d6:a5:3a:a5:b2:9d:98:5a:cf:59:8d:d0:a2:13:f4:
         c9:74:0a:40:2f:01:2b:21:63:a0:08:29:b6:e5:c4:2e:d1:41:
         2f:a5:f9:98:0c:57:0c:c6:85:94:27:67:28:cf:5b:04:f3:61:
         d7:01:a0:d9:58:aa:a8:2d:31:91:78:b8:36:62:3e:d3:e5:58:
         06:c2:48:1f:85:72:e0:d6:2d:36:28:42:67:5b:ba:8b:b2:01:
         83:00:6b:2c:0d:03:91:4f:38:cc:9a:44:57:17:cf:ce:00:b0:
         4e:c6:c0:e3:23:45:1d:32:db:e5:11:09:05:12:a9:b9:83:14:
         bc:17:0f:7a:14:72:76:d7:26:cf:76:1b:8a:6a:1d:7c:07:43:
         a9:1b:09:12:51:f0:6b:4f:cc:ab:dd:64:83:db:06:37:38:d8:
         6f:2b:b3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:52:48 2025 by rpki-client