Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0db4a61e-411a-3ae3-949b-83eabdf54c2d.roa
File:                     0db4a61e-411a-3ae3-949b-83eabdf54c2d.roa (raw, json)
Hash identifier:          P/tyO/f5aNSxpoe2+mlhCQYvCID9s/YF9Vci55uqcjM=
Subject key identifier:   41:EE:AF:2E:32:F3:C4:E6:16:F3:C6:0B:72:37:19:CA:97:2B:EE:DE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC2D7B31BE1CA3A6A41740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0db4a61e-411a-3ae3-949b-83eabdf54c2d.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        2601:449:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:2d:7b:31:be:1c:a3:a6:a4:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=46013dd4-a7ef-4468-add1-12134db78e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e7:c1:50:47:49:cc:bb:d5:8c:7f:f0:bb:e4:
                    74:b8:45:d1:f5:8b:82:4d:cc:c8:e7:6d:07:ff:de:
                    f1:7f:fd:d8:07:d6:c4:7a:ee:7e:b9:b7:41:04:38:
                    7d:96:9b:bd:0d:1d:9a:6c:74:7d:a7:36:ef:af:eb:
                    9b:3f:7f:cc:c7:b2:92:6d:d9:8e:fe:6c:6f:3d:f4:
                    b5:74:a1:1f:83:71:70:09:f3:89:be:d8:20:29:7a:
                    46:6b:e7:eb:14:35:fc:2d:f8:1e:7a:16:fc:b8:36:
                    ba:7e:11:9e:3a:7e:7a:82:d4:5c:d9:9e:69:92:33:
                    8f:f8:67:91:41:3f:17:39:ca:e9:b3:ba:20:b1:86:
                    81:2c:0d:c6:9c:86:54:b8:d1:f7:b6:b8:68:ed:73:
                    27:fb:4a:70:04:21:a6:cc:ff:68:f3:a3:ad:a6:35:
                    ba:30:75:8f:0b:3f:f7:20:89:57:ee:01:e7:f1:a9:
                    9a:f7:92:b1:cf:74:c2:d4:2f:2f:30:2b:65:78:80:
                    f3:35:64:77:09:2a:2b:b4:4e:a9:dc:62:4a:6a:76:
                    e5:e1:91:22:81:f3:6c:7b:af:d8:cd:22:7d:f5:1a:
                    b7:59:e8:2c:52:83:cf:a3:c9:a9:b3:c6:ad:cf:12:
                    59:71:7a:16:ce:df:4f:61:25:ce:9b:94:6b:db:00:
                    04:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EE:AF:2E:32:F3:C4:E6:16:F3:C6:0B:72:37:19:CA:97:2B:EE:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0db4a61e-411a-3ae3-949b-83eabdf54c2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:449:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:67:f2:e2:65:02:fe:05:32:22:d1:c5:d6:14:c3:28:29:72:
         0d:32:0e:22:cc:a8:46:ea:16:d2:24:2d:b2:a8:b9:11:09:e7:
         dd:57:27:d6:65:4d:8f:3e:fb:8c:69:32:55:8c:d0:7f:84:57:
         d8:f8:da:ca:69:66:80:0d:5d:15:6f:cf:65:03:17:c9:9b:f7:
         1c:ec:9d:a1:07:1c:0a:56:44:bc:ef:d5:fa:3d:ee:fe:4d:31:
         78:a6:8d:ef:9c:4f:f3:7c:76:4b:5f:d9:e0:3f:42:46:bb:15:
         38:24:01:9b:5f:72:b1:a3:9e:d3:99:74:88:25:7c:a0:80:cb:
         8a:4f:c4:74:a3:0e:7b:65:d2:55:43:90:f5:01:84:3e:c5:fa:
         31:39:9b:6f:16:64:70:64:a9:d3:9f:56:b7:d4:9b:89:ea:fb:
         f1:f3:c5:57:6b:c7:16:38:b6:3d:a4:69:30:e8:52:bb:79:b8:
         d2:ad:c0:cf:b6:f1:bc:62:de:b2:9d:39:6c:c6:00:f9:15:ee:
         d5:ca:b9:c5:13:40:2a:de:23:ac:95:b4:f4:fc:3d:1e:44:97:
         26:0a:dc:5e:45:70:fe:71:a7:18:34:61:13:8d:92:21:08:15:
         9d:90:78:36:c6:fa:27:cc:a2:6f:9c:57:27:9f:e3:66:2d:ed:
         0d:6d:40:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:43:49 2025 by rpki-client