Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/826ea22e-aa63-313d-a3e7-ec064cefcee9.roa
File:                     826ea22e-aa63-313d-a3e7-ec064cefcee9.roa (raw, json)
Hash identifier:          5DltVAm2suxUvTaVT1cAcNNl0Fy+r250gs8VchtvFh4=
Subject key identifier:   35:BC:4D:F3:F3:2A:E9:E8:5F:D6:FA:CA:81:5F:20:D0:C2:16:96:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4308540EBEFF55FFCDB5FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/826ea22e-aa63-313d-a3e7-ec064cefcee9.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33668
IP address blocks:        2601:405:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:85:40:eb:ef:f5:5f:fc:db:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=8e85120f-36ed-4757-9285-d44d5794ebd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:65:df:5d:36:ae:09:24:27:c9:2e:d2:6c:
                    a0:d4:f3:5c:4a:e1:6d:a3:99:8e:de:89:1f:67:00:
                    a0:da:e9:8d:10:62:d5:42:dc:d3:38:35:4e:92:6b:
                    98:53:86:2c:e3:3e:44:bb:d3:23:71:a7:b3:a5:4d:
                    cd:e7:34:6e:16:d8:42:7f:74:d5:ca:3e:98:4b:59:
                    83:0c:51:9b:13:b0:f9:96:01:fd:1e:bb:39:f2:6b:
                    6d:3e:29:ce:c3:9f:ff:45:fe:e0:e8:88:f0:4f:55:
                    36:67:a9:02:1c:a3:1f:b6:ce:38:0a:83:7f:e9:04:
                    7e:55:09:bf:16:03:ba:06:22:cf:f0:65:c3:5a:db:
                    3f:90:34:cc:93:23:e4:19:1c:3f:e1:b9:c0:08:2e:
                    35:11:98:e1:8b:75:ed:e5:72:bb:20:f6:2f:3b:49:
                    16:76:e7:d9:b5:0b:6e:16:74:24:ed:bc:48:38:ca:
                    0c:21:e1:6a:b3:68:5a:95:6c:02:fd:53:06:94:e2:
                    cb:7f:1b:76:ba:7c:fe:6a:11:a3:03:46:53:97:77:
                    38:c2:32:66:44:89:2e:1f:d3:03:df:05:04:65:f9:
                    13:01:cc:8d:de:27:b2:be:90:fb:b7:5b:2b:7c:09:
                    68:86:4f:e6:3d:04:d7:2f:f9:1e:24:85:7e:a2:a6:
                    33:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BC:4D:F3:F3:2A:E9:E8:5F:D6:FA:CA:81:5F:20:D0:C2:16:96:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/826ea22e-aa63-313d-a3e7-ec064cefcee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:405:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:9e:e2:8f:e3:8f:47:cc:c1:c0:18:cc:5f:7f:6b:56:45:61:
         a1:74:d8:71:82:2c:ac:1c:f5:09:1c:40:a3:58:38:34:67:1a:
         3c:47:5f:ae:b3:14:ac:f0:54:c3:8b:49:3a:6c:16:df:1e:06:
         31:73:12:c3:e5:65:3e:42:d9:ad:91:3c:7b:3a:9a:e0:45:1b:
         c9:fc:1d:ec:30:30:80:78:80:e9:6f:ab:8b:be:fb:a5:7d:23:
         6e:e3:ba:6f:8c:cd:39:f9:93:71:8a:5b:42:03:42:ed:31:e7:
         ac:85:a7:85:c5:cb:a4:ae:3c:7e:ba:9e:b1:cc:12:2f:29:91:
         28:e5:ca:39:18:71:96:ce:a7:ba:61:86:44:15:31:14:00:ff:
         b8:9b:4c:5c:10:68:a1:46:42:26:4a:01:00:3b:b4:66:f9:32:
         91:06:41:ba:57:b1:fb:5f:34:14:1c:ec:dc:a0:2f:2a:96:ed:
         cf:70:c6:4e:7f:c6:36:10:ce:9d:55:86:ca:1d:8a:6f:c5:7f:
         46:04:8f:82:7d:b8:e7:af:02:28:ac:52:4b:c9:58:1f:2f:81:
         b4:65:32:3d:ff:42:a4:a3:f3:9c:a0:b6:82:1f:6f:f5:10:14:
         32:8d:c3:7b:83:a1:d0:e6:0f:fb:06:19:a2:73:d3:ad:60:f3:
         e8:05:7b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:04:55 2025 by rpki-client