Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3866755a-f1d1-3533-b44b-6b4f78cf51fd.roa
File:                     3866755a-f1d1-3533-b44b-6b4f78cf51fd.roa (raw, json)
Hash identifier:          F0k7lV4r7RflzoNRN+T9T9A99kv/d8UZVG2VxIszWQE=
Subject key identifier:   D3:FD:5D:DC:9F:A1:D1:4D:D4:1C:27:66:6A:5F:99:5C:3D:1D:0A:CD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C06D1B38753F4F961B826C8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3866755a-f1d1-3533-b44b-6b4f78cf51fd.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        2601:647:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:d1:b3:87:53:f4:f9:61:b8:26:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=aea9b527-3950-4b02-813b-76fee1227ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f1:0c:6c:fa:3d:3a:9f:08:be:fd:be:05:14:
                    74:d4:18:c2:f4:91:8f:d1:ff:88:b8:0d:ce:82:be:
                    11:ee:1e:50:fc:61:4b:06:08:b3:85:6f:fd:2c:84:
                    df:00:af:2e:05:5e:ad:79:98:0c:95:1c:77:0c:88:
                    33:a2:3d:6e:15:f3:0b:00:08:13:5a:b5:85:c8:be:
                    5d:f0:6d:66:25:51:db:f1:14:20:43:54:ae:ea:1b:
                    1a:ce:83:5c:38:8f:fd:e3:da:57:ea:53:a3:f5:49:
                    ab:de:7e:f5:a5:1d:9a:02:de:89:7c:2e:af:34:be:
                    ac:c8:e4:af:11:26:1f:50:a0:41:eb:cf:a5:c2:26:
                    d3:40:99:85:a3:26:a4:5b:2f:8e:77:79:3a:8e:8e:
                    98:86:a3:a4:5e:32:06:31:98:25:c5:e3:2e:2d:cd:
                    d2:a3:b7:a4:2d:80:c5:a3:36:aa:65:7b:26:c5:63:
                    a4:cf:76:c9:4f:af:26:f1:20:45:05:58:5a:ca:50:
                    02:47:54:29:c8:63:e5:5c:00:74:e7:f9:c0:c5:17:
                    ea:45:dd:bb:4b:96:7c:2e:c3:c5:89:88:47:4c:35:
                    af:73:73:9f:72:de:fa:d3:5b:08:79:59:dd:02:ad:
                    f0:4e:56:b8:eb:ca:59:ce:f9:78:ee:da:ea:fc:7f:
                    c8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FD:5D:DC:9F:A1:D1:4D:D4:1C:27:66:6A:5F:99:5C:3D:1D:0A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3866755a-f1d1-3533-b44b-6b4f78cf51fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:647:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:6f:7d:52:c8:c6:87:7c:27:56:4d:d8:90:9f:89:83:b5:24:
         0a:97:6a:15:4f:a1:c0:43:c8:79:39:60:ce:8d:9f:81:3b:0e:
         26:e0:0d:2f:90:06:a0:69:b9:87:6d:71:dd:99:6e:da:3a:d6:
         b2:8f:18:8f:45:e3:64:e9:15:1f:37:c7:da:56:1f:f9:70:4a:
         2e:c0:96:c3:c1:16:e7:10:5e:ee:59:15:d6:87:30:27:78:0e:
         d7:84:68:45:a6:45:89:c5:a3:78:bd:1f:a4:a3:34:45:39:4f:
         62:b5:22:40:41:c7:92:83:1a:85:52:6f:2d:22:02:1d:41:e3:
         b3:ce:af:3c:00:6e:80:07:dd:6e:8f:22:7f:4c:ac:01:fb:1a:
         ff:8f:06:5e:d4:34:23:2c:ee:16:a5:90:10:7e:46:69:98:3e:
         48:e9:99:35:6c:e8:a3:91:e5:0c:b7:d8:64:10:44:00:df:38:
         eb:a6:c7:26:44:43:72:ac:28:41:e1:ab:3c:0a:92:b6:f0:52:
         72:90:e9:a7:de:32:6a:35:90:09:f5:db:97:d4:41:78:98:25:
         0a:6d:ed:52:c1:5b:a3:d4:d2:ed:d0:21:78:ca:af:18:b4:84:
         9c:07:2c:b1:2f:bb:de:59:3f:83:3a:4a:91:3e:95:6b:a3:bc:
         6a:c0:dc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:43:06 2025 by rpki-client