Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/64fe46c0-aa6a-30bf-9063-208fb215de39.roa
File:                     64fe46c0-aa6a-30bf-9063-208fb215de39.roa (raw, json)
Hash identifier:          A/cBR/9ZIcgK84EiGb707+C7jzMggNUy1O1hDWi3E9g=
Subject key identifier:   EC:AD:C4:9E:27:3C:14:3F:6F:0A:D9:83:A3:DE:F5:8F:95:5B:29:41
Certificate issuer:       /CN=22a89d78-807f-48bb-8913-4e15f4878bfb
Certificate serial:       010D0C9F4328584A0C0550939B56614A9D565300
Authority key identifier: 41:26:61:4E:B6:7D:B9:81:05:C1:90:B7:DD:5F:F9:0D:32:E4:20:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/64fe46c0-aa6a-30bf-9063-208fb215de39.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     13786
IP address blocks:        2605:4a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:50:93:9b:56:61:4a:9d:56:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a89d78-807f-48bb-8913-4e15f4878bfb
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=42a43412-e0c3-475f-a037-7e9b3b882131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:3f:c0:d3:14:53:4c:7e:3f:c4:28:17:95:
                    77:64:b9:e0:7e:6a:d5:86:c7:7d:ca:b1:a1:a7:b3:
                    ef:97:51:31:05:6d:a1:87:0a:94:3a:f1:c8:cb:c4:
                    4b:48:55:30:d9:f1:cf:46:49:fb:04:8c:02:25:b1:
                    69:72:f9:a7:0e:bb:f1:98:4e:e1:f7:de:b0:c9:eb:
                    f3:b4:7b:da:f7:a8:7d:3f:3d:07:5f:60:0e:56:e9:
                    a2:66:ad:6e:43:8c:e8:db:8c:2e:a5:14:6c:7a:96:
                    b2:d2:2e:d4:23:dc:c3:10:10:a5:a6:e0:08:bc:2a:
                    f9:f9:34:37:0d:08:d7:a0:1a:fd:61:fd:30:25:fd:
                    c2:41:aa:9e:9e:c7:ef:79:27:31:1d:d0:43:c3:1b:
                    d9:95:83:ad:7c:b4:86:c3:62:59:9b:32:6a:e2:90:
                    b7:f5:83:5e:cc:2d:a2:35:a5:66:f6:97:86:74:4d:
                    79:f5:fd:02:46:1b:02:c5:84:ed:75:f4:fc:21:54:
                    79:01:c8:c8:55:f8:c5:38:87:ed:b2:20:ec:3d:16:
                    52:38:72:b6:d6:17:fb:24:a8:d1:6e:95:80:75:36:
                    24:17:77:a4:96:87:5c:74:be:b4:c4:29:bb:c4:dd:
                    1c:9e:7f:98:3f:71:43:bd:b9:8d:a5:a8:09:60:22:
                    08:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AD:C4:9E:27:3C:14:3F:6F:0A:D9:83:A3:DE:F5:8F:95:5B:29:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/64fe46c0-aa6a-30bf-9063-208fb215de39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.crl

            X509v3 Authority Key Identifier:
                keyid:41:26:61:4E:B6:7D:B9:81:05:C1:90:B7:DD:5F:F9:0D:32:E4:20:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:5b:7e:47:89:7d:6f:de:c4:6e:18:5d:88:8c:45:4c:b1:49:
         14:48:5d:57:11:a4:29:5e:cb:88:04:16:b9:be:cf:91:85:9f:
         da:a2:c2:03:e8:84:ce:66:ad:fe:5c:c4:70:94:99:5d:92:96:
         e9:46:c5:29:c5:ce:f5:27:e7:37:23:3e:af:39:bf:ac:eb:79:
         a3:69:95:70:f5:47:44:7c:39:4e:5a:cd:df:f0:a2:95:27:f0:
         7a:2f:55:6b:7d:1e:0f:1c:79:3d:67:fd:fb:1e:27:64:36:7e:
         aa:78:90:37:3b:40:85:5b:2f:f7:e5:58:2d:ca:d1:80:2c:f2:
         b3:7d:94:91:6d:fa:2e:80:5f:c3:88:05:0d:6f:97:ce:46:fa:
         66:5f:9a:c3:99:74:3e:47:b7:46:6f:35:fe:94:50:f3:74:24:
         1d:54:10:97:c5:f6:47:cc:84:9c:9c:05:ef:e7:6a:0d:9c:95:
         21:be:a4:e9:78:a6:4d:58:cb:7b:80:43:e2:ea:91:80:c7:e2:
         92:b8:5d:a2:bc:d3:24:ce:19:92:0f:e9:78:ff:73:70:60:d3:
         e1:f1:42:7c:3e:bd:22:07:f1:a7:36:76:b1:c1:dc:55:90:60:
         e6:10:64:4c:c1:82:fe:93:9b:94:90:d9:09:e2:c7:92:c5:84:
         95:c2:8a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:18:33 2025 by rpki-client