Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98b70e13-87e2-3bc9-bf99-5ba103fc50f8.roa
File:                     98b70e13-87e2-3bc9-bf99-5ba103fc50f8.roa (raw, json)
Hash identifier:          i404/88mTKCyriVQd5fxvME7xYZzMtrEQxWZI5BJmbU=
Subject key identifier:   FA:38:07:BA:B2:F7:CA:2A:50:94:59:A3:17:8C:80:0A:5B:15:CD:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D1655D7DF58F06CD00A78980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98b70e13-87e2-3bc9-bf99-5ba103fc50f8.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     7016
IP address blocks:        2603:301f:1a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:5d:7d:f5:8f:06:cd:00:a7:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=ebd35bb4-973c-443d-9cde-a4c1de48f602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5d:76:ba:ae:5e:ba:dc:e8:70:b7:77:21:16:
                    61:3e:5f:3a:f5:91:43:db:6e:b1:a2:8d:4d:0a:45:
                    90:f7:b5:d7:85:5b:5b:f9:68:51:33:59:36:61:5f:
                    de:d6:bf:ff:d1:91:69:33:80:60:c8:ac:64:de:45:
                    eb:4e:e3:64:ed:ef:ad:3f:73:01:2a:0d:31:aa:9b:
                    c8:03:d1:e7:da:2f:6f:1f:b6:8b:69:7d:a9:24:f3:
                    7a:08:ef:c2:5a:0a:bf:85:6d:37:91:02:26:0c:ed:
                    bd:b1:b4:6b:0b:fc:55:80:96:ac:b0:09:9e:c6:9c:
                    a6:c3:36:52:83:60:83:9c:4f:dc:9b:93:f0:ed:fa:
                    16:48:1c:10:ac:02:1c:12:8c:c3:d3:d9:ad:7f:12:
                    ad:36:87:83:2e:88:98:0c:9d:61:01:c4:dc:bd:9d:
                    5b:71:32:68:14:dd:10:fd:d0:c6:bf:e5:bc:ec:32:
                    8f:2b:f8:fb:4a:04:95:6c:ae:dd:93:01:27:ea:fc:
                    b8:e2:90:98:69:bd:f3:c3:4f:5f:45:24:5a:90:ea:
                    1b:21:92:fc:3f:0f:77:ee:c4:80:87:5c:0d:af:48:
                    56:3f:d7:2e:64:7c:59:0f:10:f2:15:e8:19:38:6b:
                    7a:e3:c7:0c:d4:96:86:52:72:22:84:cd:72:af:90:
                    70:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:38:07:BA:B2:F7:CA:2A:50:94:59:A3:17:8C:80:0A:5B:15:CD:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98b70e13-87e2-3bc9-bf99-5ba103fc50f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:301f:1a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:d8:43:fb:ec:e4:b7:03:95:42:46:82:89:f9:3a:b3:e0:84:
         4d:20:8f:ef:d0:61:6c:ef:29:d5:7f:bd:66:1b:45:f5:ca:26:
         d4:8d:bb:a9:db:ee:db:d0:03:1e:f9:75:04:02:97:ed:59:71:
         cd:88:0f:50:51:82:06:c8:f6:6e:24:3b:9a:de:f6:a9:89:b1:
         5a:de:16:0b:86:c7:d8:ca:cc:7c:a4:ed:17:47:5c:56:78:10:
         e0:5a:31:c7:b3:e9:4c:f2:c6:ae:f3:f5:1a:0f:24:18:a9:11:
         f2:d2:be:b2:8b:3c:77:4b:16:4a:23:f8:31:ef:72:8d:2e:a1:
         13:10:b5:f3:63:5a:d6:75:14:c7:69:04:aa:4c:9a:bd:65:c6:
         a8:a7:ed:5d:dc:30:b3:6b:a9:26:9f:10:c4:a1:c5:27:98:89:
         07:2b:d9:83:0e:2e:18:32:fc:94:1e:c7:09:79:00:68:04:df:
         91:d1:21:34:83:e3:ed:88:ea:6f:d6:26:d1:c6:73:ee:7f:86:
         e0:7b:bb:0e:88:9a:16:01:71:b1:0a:c7:43:f1:5d:e3:da:c3:
         81:b7:13:ba:7e:aa:f8:a3:fe:14:90:f2:ad:a7:8e:e2:d9:33:
         21:1d:82:04:e1:33:0b:0c:09:f8:db:3a:b4:dd:9a:7b:d1:dd:
         d5:44:94:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:58:25 2025 by rpki-client