Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68a3d127-7733-3285-9a6f-e58b5d5240a3.roa
File:                     68a3d127-7733-3285-9a6f-e58b5d5240a3.roa (raw, json)
Hash identifier:          yG/ASQ3ha/VeZk7n4gTzDoSMV86qJZgIvUMiVe5XmzM=
Subject key identifier:   9A:AD:0A:29:1C:00:83:02:E7:59:E6:4D:A0:FB:B6:8A:34:F2:88:B7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75327ED6CAB66D67705FA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68a3d127-7733-3285-9a6f-e58b5d5240a3.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        2601:c3:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:32:7e:d6:ca:b6:6d:67:70:5f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=71d089dd-1f20-4005-8e6d-2f8f29d0c4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:be:a7:3d:43:fc:40:48:f1:53:60:0d:54:76:
                    20:1a:26:73:ef:48:df:71:b3:22:f6:d8:15:b0:08:
                    91:29:7a:7b:8e:89:02:8b:8d:30:0d:ec:53:08:f7:
                    08:75:76:6e:a1:d2:de:83:51:c2:14:1b:0a:87:d3:
                    bb:05:bd:5b:19:2b:19:2d:be:0f:68:0f:aa:eb:95:
                    71:9c:da:dc:4f:27:5c:7a:5d:d5:c0:d9:df:54:1a:
                    2c:4c:ca:d4:47:d9:bb:73:c0:4a:8f:32:01:e8:cc:
                    cf:29:0d:2f:5f:fb:1b:5d:0f:b1:ac:f6:00:ca:9e:
                    22:32:e3:4f:35:d6:cd:8d:6e:3b:63:8c:d9:5e:90:
                    55:05:3d:6f:e8:55:fc:b3:aa:04:7a:68:e3:c0:1f:
                    20:71:3f:6a:84:1a:b5:3c:0f:28:c9:d4:4c:52:c5:
                    2d:82:00:2f:ac:a7:85:ba:03:d8:aa:ad:96:bd:ad:
                    d3:87:6f:04:10:ec:f8:e6:45:ea:90:02:f1:75:0f:
                    49:98:18:36:9f:a6:f3:27:fe:2b:22:35:85:23:79:
                    d1:7e:3f:fa:b3:5a:de:9b:cb:14:14:a0:bc:d8:7f:
                    1f:71:f2:40:b7:64:f5:3f:3e:2d:79:a0:43:71:19:
                    a2:80:4e:08:5f:52:ab:94:f8:8e:f0:93:a2:fc:4f:
                    7e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AD:0A:29:1C:00:83:02:E7:59:E6:4D:A0:FB:B6:8A:34:F2:88:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68a3d127-7733-3285-9a6f-e58b5d5240a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:c3:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:06:55:58:3b:7a:ae:ba:5f:c6:28:7d:be:37:a9:9f:25:d6:
         c2:4b:66:41:30:77:72:8c:58:4f:6a:0c:c9:3f:54:a2:4d:b3:
         36:a1:f7:0e:7e:c9:e6:14:00:1a:82:89:44:b6:e3:12:c7:0c:
         03:ad:87:36:ea:cd:1d:be:4f:7d:42:71:94:1e:bd:0d:32:bd:
         64:12:b6:50:bc:17:1c:f1:bb:3d:b7:8c:70:73:b0:d1:a9:c6:
         31:2b:36:ad:39:3f:7e:1c:65:b9:96:b4:81:46:fd:3b:a5:3c:
         23:ce:03:0d:95:8c:df:06:42:c6:06:cb:6f:68:53:bd:75:77:
         fd:3d:66:12:34:a8:1a:f1:0c:7e:de:4e:1d:40:fa:dd:3c:c7:
         ef:b2:d7:b4:f4:3f:0c:14:8f:95:64:fc:5f:c8:0d:f3:13:b2:
         72:8f:80:0f:d7:56:c7:94:1d:ee:39:4f:ac:57:79:a2:78:a3:
         f2:1a:38:a0:9e:60:b2:93:2c:5d:28:8c:4c:d6:86:51:a3:46:
         90:c7:94:81:11:18:db:82:de:98:29:90:15:e7:71:09:fc:bd:
         cb:4b:a4:ea:37:08:74:1e:0a:3a:b2:c4:79:39:29:83:25:7d:
         46:c1:a6:e1:b2:ca:03:4d:58:5b:90:1e:83:ac:e0:cd:a4:7f:
         52:3b:b6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:47:38 2025 by rpki-client