Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bb2b634-7a49-3456-b822-97d24de16ace.roa
File:                     4bb2b634-7a49-3456-b822-97d24de16ace.roa (raw, json)
Hash identifier:          JG1wrc3aRDti3Q2qZ7zxrzi6UYtjd+2m03mD7zZfE8k=
Subject key identifier:   92:CE:91:D7:0A:73:8D:84:82:00:D8:22:04:E1:0C:A3:EB:2A:86:CE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF759EAF5C60874B5D05C400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bb2b634-7a49-3456-b822-97d24de16ace.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        2601:c7:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:9e:af:5c:60:87:4b:5d:05:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=0fd66ef3-783a-4c17-bdf8-4475e643475b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:46:22:fc:63:a1:08:3f:f8:32:4b:df:11:6b:
                    5a:1c:a1:f1:fe:f1:b2:2e:42:94:78:4d:c6:f7:07:
                    2f:b9:3e:d5:e5:9a:72:2f:ee:84:9f:16:58:bf:02:
                    de:cb:33:90:53:55:36:91:d7:fb:c5:0b:07:e3:11:
                    7c:ba:27:8c:40:7e:48:f1:07:df:94:38:1b:54:8a:
                    23:41:a6:77:cd:6e:37:94:21:a3:a2:03:c7:74:84:
                    55:05:2e:28:c7:2f:93:65:de:72:ec:a5:55:d3:e8:
                    47:3f:41:4a:a5:e1:a9:c3:66:4c:97:90:47:1a:9a:
                    23:92:c8:8b:d0:e4:2b:61:60:80:5a:83:0a:69:51:
                    1d:00:9e:8d:83:29:cb:74:8b:f5:d4:ca:24:c2:b3:
                    39:ef:52:90:a2:65:f3:13:94:64:c8:25:4a:3f:de:
                    c3:01:4f:0b:c8:a0:72:bd:e4:f4:5f:da:ae:8f:54:
                    18:f5:e7:c2:3d:9b:1f:fc:0a:47:d2:b0:78:1d:d1:
                    14:d0:e1:18:f7:25:3f:b3:63:40:36:d8:80:ef:3d:
                    92:cb:d9:85:64:53:d3:1a:e0:81:e2:83:fd:d0:7d:
                    0c:b1:98:91:58:e5:5c:13:a4:ad:1e:e5:68:1d:a5:
                    79:41:f3:ef:9c:88:e1:b0:86:6f:3a:16:c8:dd:2f:
                    72:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CE:91:D7:0A:73:8D:84:82:00:D8:22:04:E1:0C:A3:EB:2A:86:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4bb2b634-7a49-3456-b822-97d24de16ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:c7:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:83:06:9a:61:4a:71:11:e4:e6:04:f0:2f:fb:27:14:8b:79:
         d7:e0:2b:6e:5f:42:8e:e6:51:fd:aa:79:c6:ab:ad:66:3e:21:
         61:dd:ab:34:48:ca:3d:cf:da:fa:7f:34:ce:bf:01:b0:6f:3c:
         f0:cc:e8:65:0e:24:a7:e3:c8:b3:1c:91:8b:31:e8:ee:10:1c:
         c7:db:a4:47:cb:cf:5a:33:00:af:85:53:25:02:5a:d7:29:9a:
         3a:75:ca:9d:57:ba:79:89:01:c4:f3:12:76:6e:a2:84:97:7f:
         96:91:b3:a3:77:bb:dc:28:28:a2:e9:b4:b0:c9:1f:2a:43:ee:
         83:db:4a:f5:f3:8c:e8:f1:65:8a:4e:3f:dc:3a:1f:66:73:23:
         b2:66:00:8a:2a:d5:55:54:05:53:31:e0:b5:c0:a5:a6:3b:6a:
         5c:19:45:f6:28:3e:62:74:9e:5d:c9:02:26:52:f7:a8:46:7c:
         92:85:26:ed:62:0c:19:d0:32:a6:a6:b4:9b:1e:b2:90:8a:72:
         70:6e:a8:2e:cb:1d:f3:6f:9f:17:6b:84:82:a6:09:b3:b6:41:
         4f:b5:8a:ec:4d:3f:9e:10:57:de:2e:d8:88:ca:fd:0f:ab:16:
         fb:4c:76:05:79:3c:67:f1:73:e9:15:77:b5:fa:0b:ef:4b:3b:
         63:e0:e4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:14:46 2025 by rpki-client