Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/447b1ccc-cfbc-3cb4-9759-12e0eca92a45.roa
File:                     447b1ccc-cfbc-3cb4-9759-12e0eca92a45.roa (raw, json)
Hash identifier:          4FyQ/B8FZufz8JqpehpdJ62cr05xZLqYzqXMYSc21mI=
Subject key identifier:   81:46:D1:AD:8A:0D:02:99:5A:C2:81:E2:4D:52:C8:AB:FC:4F:33:FA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C087F6850F45F0398F85720
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/447b1ccc-cfbc-3cb4-9759-12e0eca92a45.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        2603:2643::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:7f:68:50:f4:5f:03:98:f8:57:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=4595c0ee-6aa6-49af-a4f3-78df1ef59093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4f:43:10:57:97:f9:f6:e0:3d:19:7d:25:49:
                    4a:dd:df:02:72:8f:62:45:84:fa:93:ce:13:cd:50:
                    fc:43:67:e5:72:cb:92:20:3a:28:99:f1:7e:c7:54:
                    81:0a:31:db:7f:cb:98:d7:18:19:77:14:e6:e9:d9:
                    3e:d4:1f:e8:d3:7a:65:08:9f:6a:bf:ae:0d:9f:60:
                    ec:14:9c:9d:bc:c1:2d:81:64:48:8b:91:70:44:60:
                    a1:2f:19:c5:9b:db:29:15:08:d5:a0:82:a7:d4:d6:
                    f8:16:9b:cb:0b:8d:ad:fd:ef:5f:f1:00:ae:45:ed:
                    89:a8:e5:6e:6f:42:81:d5:26:5c:7c:98:88:11:f7:
                    5b:be:c4:24:cc:cd:01:43:ca:42:a2:c3:e9:62:b6:
                    41:d2:f4:1b:6e:7d:96:bd:29:df:2b:43:00:33:9b:
                    17:2b:42:6c:47:a4:c3:7e:e2:8c:3c:ec:69:7e:d4:
                    72:9e:32:d0:53:6c:27:4d:44:b9:51:fc:b6:ef:6f:
                    45:b7:c2:5f:50:b1:91:4a:b2:77:c4:54:cd:52:c5:
                    dc:0f:56:13:55:01:e2:fb:fd:8e:e8:26:a0:00:a1:
                    37:b3:ea:1f:07:fc:2b:fb:06:ab:fc:0e:1a:eb:d5:
                    c6:fe:e3:7b:aa:7c:9c:c1:77:11:a1:c1:54:69:94:
                    8c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:46:D1:AD:8A:0D:02:99:5A:C2:81:E2:4D:52:C8:AB:FC:4F:33:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/447b1ccc-cfbc-3cb4-9759-12e0eca92a45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2643::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:77:37:fb:47:63:88:65:81:fe:f8:4a:2e:99:93:35:03:1a:
         2f:e7:07:8b:01:4d:e4:fd:a9:49:3b:f5:40:03:ba:23:d4:85:
         bc:30:dc:20:b1:de:44:db:bd:ab:c3:3f:78:71:fb:ac:61:62:
         16:e7:9a:08:30:d2:ff:d1:ae:ea:ca:3d:55:18:75:5c:10:99:
         48:03:f9:bc:20:ac:92:e2:57:1d:fa:9b:58:82:d8:c7:10:22:
         3b:56:a2:eb:40:21:4b:4d:ef:5b:fb:3b:f7:2c:f0:28:20:2b:
         78:20:6b:6c:1f:65:9c:87:55:94:0b:2d:c7:ef:3b:3c:94:d0:
         39:1e:79:a8:3a:33:f2:3a:f2:58:69:7a:5a:88:f9:18:d7:4f:
         b6:be:0d:66:00:81:a8:67:21:80:6c:25:ec:b7:9a:cf:91:60:
         3e:e1:ba:e0:52:af:01:ee:a4:cb:90:48:3c:06:6a:ee:a4:43:
         64:fa:27:57:c0:f1:41:3d:44:79:d8:cb:89:86:f5:c5:84:05:
         70:21:a8:83:cf:ac:8a:31:a2:9f:e2:3c:04:32:e3:ea:67:c7:
         b1:06:3d:cf:31:f3:63:f0:ef:03:21:3c:f0:87:66:71:b7:c1:
         27:f2:3d:49:fc:93:b7:dd:a6:c6:1e:88:d6:67:78:2e:20:53:
         74:02:0b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:47:32 2025 by rpki-client