Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/4df008ac-91b7-379a-aa5f-326dc986cbe8.roa
File:                     4df008ac-91b7-379a-aa5f-326dc986cbe8.roa (raw, json)
Hash identifier:          RGHIHmvJsuUoBJFU4jGil6k+mnp6VDztSc0XuCKJ4zA=
Subject key identifier:   87:4C:B5:D7:86:D1:82:92:3E:C4:CD:E3:C6:18:E6:0A:D1:A0:FF:8F
Certificate issuer:       /CN=f0682b49-784e-4da6-8c82-9a4562d0b08c
Certificate serial:       010D0C9F4328584A331AEBE8A6CE9D3EAFEBD680
Authority key identifier: C3:76:B5:48:78:AD:92:A1:DA:19:D5:D4:9D:0D:28:22:AA:E7:47:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/4df008ac-91b7-379a-aa5f-326dc986cbe8.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     19382
IP address blocks:        2620:13c:e001::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:eb:e8:a6:ce:9d:3e:af:eb:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0682b49-784e-4da6-8c82-9a4562d0b08c
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=05978e2c-176e-486c-82e2-1f988cb8dab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f5:4d:52:e1:e9:56:af:5b:a8:c7:b2:79:ca:
                    55:7b:c5:a9:d2:27:7e:b0:b5:85:71:4a:44:79:9b:
                    8c:0d:94:3a:36:ed:9a:11:e4:22:c4:a5:36:b0:b3:
                    90:df:7a:26:c3:fa:a4:49:9b:02:6e:58:7d:84:37:
                    29:c7:70:b7:2c:20:52:24:3a:b9:e1:5b:e9:00:ec:
                    d4:06:1d:59:cc:4a:a1:95:b6:ef:97:1b:d0:82:af:
                    2e:52:98:f6:2c:fd:97:cf:7e:bc:9e:1b:de:06:76:
                    25:9e:22:e9:84:ae:ef:9a:71:51:48:b5:22:16:36:
                    e3:3c:a7:9f:d1:bf:33:d1:72:29:d7:be:ea:98:e5:
                    ab:7d:38:c0:b1:fa:b2:4c:a5:b5:ea:fc:f2:ba:3a:
                    99:71:10:c8:04:f0:88:82:c0:ac:ef:04:93:f3:38:
                    4a:23:eb:39:16:f0:2a:93:84:ea:26:01:34:7a:87:
                    1a:d7:e5:7f:37:0b:61:76:6b:d6:85:87:db:ff:0c:
                    ce:5f:d9:6b:6b:f3:cd:e0:86:8e:d7:83:ab:a8:5a:
                    76:5c:3c:f0:3d:24:6a:a1:7c:f1:ef:3d:a1:de:85:
                    18:f6:0b:81:de:8f:d8:eb:f6:b6:d7:6d:10:58:17:
                    52:f6:60:e4:69:45:cc:63:5b:c4:b7:53:d1:70:34:
                    06:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4C:B5:D7:86:D1:82:92:3E:C4:CD:E3:C6:18:E6:0A:D1:A0:FF:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/4df008ac-91b7-379a-aa5f-326dc986cbe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.crl

            X509v3 Authority Key Identifier:
                keyid:C3:76:B5:48:78:AD:92:A1:DA:19:D5:D4:9D:0D:28:22:AA:E7:47:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13c:e001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:7c:d9:55:46:74:a2:bc:82:03:97:78:93:76:3a:b3:8e:f6:
         4c:60:c4:49:25:f1:79:37:1c:8a:e9:5e:53:45:5f:82:56:01:
         b0:df:ff:0f:20:48:3d:42:68:57:34:0c:8f:f9:f9:d6:85:8b:
         d3:96:03:aa:69:36:7f:8c:a0:79:25:06:e1:40:c9:a7:b9:d6:
         57:08:2e:45:62:55:81:7f:59:c2:dd:91:22:52:03:d9:3c:f5:
         84:fa:bd:44:50:7a:ec:bf:a0:5d:2c:a0:15:82:e4:42:64:0f:
         f1:1f:e1:82:6b:a5:02:4a:ba:37:19:a7:c0:22:d1:53:7e:a5:
         e1:07:90:87:45:0e:67:d4:d3:38:c3:b9:5c:d7:d0:bb:b8:a0:
         b6:f1:80:6d:f6:32:9b:f2:28:a0:42:fc:cb:a8:80:37:d9:2f:
         66:98:e6:20:7b:f0:c6:18:b3:81:68:f5:87:77:0f:67:1e:13:
         2a:cc:f7:0e:48:e7:89:b5:f8:73:4b:d3:6e:85:96:f1:a8:28:
         3c:ba:80:98:cd:c5:64:a2:eb:a7:e6:1d:7b:84:70:23:34:76:
         12:a0:2c:22:05:cd:c8:8a:2a:e5:7a:9b:ac:76:81:91:a9:14:
         e6:d5:5d:30:6c:d4:d7:cb:4e:91:2c:05:1c:b0:aa:f0:20:66:
         3b:f5:17:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:32:22 2025 by rpki-client