Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/8aefadba-6c2b-364a-882a-231170fd640d.roa
File:                     8aefadba-6c2b-364a-882a-231170fd640d.roa (raw, json)
Hash identifier:          5w7Lu1IZg3nvB09Jw4aj7tlhqBOXH0cBI3eBIlxtTV0=
Subject key identifier:   D8:DD:06:2B:18:44:A2:06:BA:D3:29:89:54:7B:EA:BC:35:E2:08:3D
Certificate issuer:       /CN=969446db-6a2e-47bc-a33b-2dd883bfb899
Certificate serial:       010D0C9F4328584A5765CD938D33F7BDD3860300
Authority key identifier: 8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/8aefadba-6c2b-364a-882a-231170fd640d.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     26679
IP address blocks:        2620:112:e000::/44 maxlen: 44
                          2620:112:e000::/48 maxlen: 48
                          2620:112:e001::/48 maxlen: 48
                          2620:112:e002::/48 maxlen: 48
                          2620:112:e003::/48 maxlen: 48
                          2620:112:e004::/48 maxlen: 48
                          2620:112:e005::/48 maxlen: 48
                          2620:112:e006::/48 maxlen: 48
                          2620:112:e007::/48 maxlen: 48
                          2620:112:e008::/48 maxlen: 48
                          2620:112:e009::/48 maxlen: 48
                          2620:112:e00a::/48 maxlen: 48
                          2620:112:e00b::/48 maxlen: 48
                          2620:112:e00c::/48 maxlen: 48
                          2620:112:e00d::/48 maxlen: 48
                          2620:112:e00e::/48 maxlen: 48
                          2620:112:e00f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:cd:93:8d:33:f7:bd:d3:86:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969446db-6a2e-47bc-a33b-2dd883bfb899
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=4528ce70-06d6-470c-ab3c-7cd039427721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:bc:81:f8:fb:87:3b:dc:3a:bb:d4:92:7d:
                    7f:af:0a:d1:df:17:47:c0:37:9c:1a:6d:af:ba:63:
                    a9:de:eb:aa:47:70:db:e0:fb:38:a3:8c:76:02:e3:
                    8d:c5:c8:50:91:37:1b:f4:ce:b0:6a:6f:18:04:2a:
                    8d:33:0b:48:87:bc:ef:20:79:83:72:7f:47:a0:a5:
                    96:64:62:2c:56:1f:14:96:f9:b7:b6:7a:6c:78:48:
                    5d:51:e2:35:4f:17:37:52:5c:c3:bd:cf:d3:4c:05:
                    d7:ee:f7:40:7c:08:02:d1:93:ee:d4:b2:28:18:36:
                    69:6a:6f:c8:7e:f0:66:40:df:f9:67:84:fb:3b:b9:
                    11:32:ae:28:cb:f7:9f:e8:eb:c3:d6:b9:dd:62:a6:
                    fc:4f:c7:bf:b1:9b:65:ac:0b:a0:b7:ce:0c:74:20:
                    ac:ef:ba:bc:12:87:71:00:91:19:02:34:d1:91:a0:
                    9e:7c:61:c2:88:1e:5a:87:4a:2c:1e:8c:20:bf:88:
                    e4:8b:0b:99:99:b2:0e:75:ac:15:9e:a0:19:d5:0d:
                    c8:8d:d0:c9:cf:5f:04:db:0e:c7:24:33:19:c1:21:
                    0d:57:78:4d:31:c8:75:44:58:84:4b:f2:55:c9:fa:
                    0f:f8:34:59:b3:ed:50:e9:68:b8:81:7b:d9:4b:51:
                    93:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DD:06:2B:18:44:A2:06:BA:D3:29:89:54:7B:EA:BC:35:E2:08:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/8aefadba-6c2b-364a-882a-231170fd640d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899/969446db-6a2e-47bc-a33b-2dd883bfb899.crl

            X509v3 Authority Key Identifier:
                keyid:8C:4C:51:45:1B:97:18:EC:29:F6:65:EB:83:73:27:E3:84:C2:00:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/969446db-6a2e-47bc-a33b-2dd883bfb899.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:112:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:55:ac:3d:54:d6:60:d4:cc:50:d8:22:cb:d7:d3:88:8b:a3:
         15:ed:67:91:81:53:28:19:47:a7:a8:95:bf:ff:b3:64:9b:23:
         f0:32:74:e1:28:71:3b:43:8b:a4:34:80:26:70:98:72:4c:c8:
         be:c1:f5:07:44:31:46:61:86:88:c2:94:5f:ee:81:6c:9f:e7:
         6a:93:bc:96:1b:aa:92:6b:04:ee:06:91:c5:1d:98:24:9c:8e:
         0d:af:fa:71:dc:f5:78:96:5c:00:0f:f3:5a:83:e9:f6:b3:55:
         b7:e5:91:65:83:5c:69:b0:c3:de:98:c2:0f:4a:28:50:ad:d4:
         a4:8a:bd:2b:c1:17:15:ec:d7:14:04:2a:23:b4:c7:bc:bb:5c:
         c7:57:56:6a:7c:8e:a7:c8:b7:ff:bf:4d:ee:ec:44:df:08:53:
         76:3a:f5:78:6b:71:84:d7:bb:ba:95:34:f9:59:6c:44:e2:22:
         37:dc:ad:8c:9c:c9:e6:17:99:22:25:87:17:89:a5:35:dd:c0:
         d8:b4:5b:fd:9c:d0:1c:8c:46:2c:06:24:04:ed:b2:9b:19:6f:
         fc:58:4a:c3:b5:7f:10:f9:07:d1:25:4d:d4:9b:e2:ff:46:e5:
         8b:6f:29:84:39:33:95:ce:b7:0f:9f:36:0a:87:2c:a9:60:b3:
         7e:41:dd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:14:45 2025 by rpki-client