Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c0451ff-a9d0-3d62-8b59-26b2b9ccab95.roa
File:                     2c0451ff-a9d0-3d62-8b59-26b2b9ccab95.roa (raw, json)
Hash identifier:          sRBweIIuuNgqlKJ8FKalW+rBcHmc8GhUvLUYaXE1lcI=
Subject key identifier:   46:31:98:DF:65:CE:D3:75:04:8A:65:92:06:B8:1F:BF:64:11:88:8E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C07AD9E5C39D6C50939DC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c0451ff-a9d0-3d62-8b59-26b2b9ccab95.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        2601:46:600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:ad:9e:5c:39:d6:c5:09:39:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=8c0efdbf-f34d-4980-b71a-1003a4400101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6e:0b:35:3b:e9:8b:96:9c:4c:b7:01:e0:ef:
                    5e:1c:9f:ed:24:75:37:4e:e2:19:73:0e:e5:8b:8b:
                    f1:74:e3:46:a7:fd:9e:d1:d4:17:19:4d:1d:bd:d4:
                    b3:77:07:9c:a6:3a:a7:7e:71:4b:c5:ef:6e:6a:89:
                    f7:7a:fd:1f:88:b8:6e:60:83:04:5d:25:8a:d5:d6:
                    0a:04:e0:50:0e:84:a8:11:e2:01:fe:ac:4d:f0:1c:
                    30:54:e4:ab:f8:a2:f0:28:39:96:22:86:01:39:df:
                    0d:67:99:36:06:35:15:af:53:59:4b:f7:84:d6:67:
                    9e:7e:53:3d:84:39:2e:6c:4b:a7:b8:70:e5:36:0a:
                    11:26:ee:70:7e:80:93:52:19:e3:64:c9:32:0d:1d:
                    cb:6c:f0:28:db:b7:6d:e1:d5:ce:01:e2:db:c9:9f:
                    c5:3b:86:54:e8:7c:59:e4:ef:5c:f3:30:c7:d6:51:
                    9c:fa:f6:cd:f9:0f:b8:9f:7d:ef:ec:c1:04:bc:77:
                    b6:c4:90:0f:dd:ae:e9:db:ef:99:58:50:fd:97:9e:
                    33:0f:55:df:15:06:aa:df:4c:54:3d:01:f2:87:9d:
                    f6:20:cb:12:2c:74:69:68:dc:3d:12:77:63:8b:5a:
                    3f:24:7c:7f:a0:9d:fd:e5:fd:3b:96:ab:88:c0:61:
                    26:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:31:98:DF:65:CE:D3:75:04:8A:65:92:06:B8:1F:BF:64:11:88:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c0451ff-a9d0-3d62-8b59-26b2b9ccab95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:46:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:29:17:4e:62:b0:61:49:0f:9b:8c:77:51:0a:14:71:15:53:
         e3:39:7f:55:35:43:94:2d:24:c2:20:97:40:38:58:49:b7:65:
         46:3b:72:b6:68:43:52:57:c6:8c:d0:4e:9b:d2:11:66:c8:dc:
         d7:ce:fb:46:dd:d5:fd:54:7e:b1:c1:ff:b5:50:66:e9:7e:2c:
         5c:df:4e:8c:e8:7c:2b:4c:45:6b:e9:2e:98:42:d5:06:68:d6:
         07:d4:ed:87:3d:8c:c0:0f:01:eb:14:18:13:2b:4b:3d:a4:2a:
         d8:cb:0a:db:c5:d8:5e:30:6b:49:1b:9c:0f:63:6a:f1:05:25:
         01:46:b9:58:58:84:74:35:31:6e:61:19:ef:bb:08:42:52:b3:
         33:b4:29:0a:b7:29:14:91:c0:f7:c3:07:14:8f:56:d6:11:13:
         c8:27:2a:fd:b5:5a:5d:b4:e0:dc:d3:f7:68:40:6c:2b:27:a4:
         44:9f:c9:2e:f4:16:ae:56:27:48:ab:36:7b:61:8b:32:22:4d:
         d8:43:a0:17:c5:67:98:96:cc:0a:b3:06:fd:7e:ba:4f:f2:1d:
         99:37:5b:a4:21:9a:5a:fc:31:48:54:9b:52:09:39:35:be:7e:
         dc:e6:14:80:b3:8e:59:94:0a:f6:cd:15:05:4a:02:04:8f:f0:
         03:22:d5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:23:52 2025 by rpki-client