Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f08a730e-ce0e-3b2c-b161-cf18ef26d118.roa
File:                     f08a730e-ce0e-3b2c-b161-cf18ef26d118.roa (raw, json)
Hash identifier:          dDe/HH65y1/0T9PmI7KQvAynzfzQ6UHz2rYvACJ6geg=
Subject key identifier:   57:55:BF:DA:63:08:22:CB:A0:9D:4C:EB:24:09:94:27:36:5F:A5:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF753343164B73FC8D7825C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f08a730e-ce0e-3b2c-b161-cf18ef26d118.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        2601:ca::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:33:43:16:4b:73:fc:8d:78:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=ceaeb790-1f65-4303-b253-7dda5e338a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:30:df:58:36:cf:81:55:c3:81:bd:22:5f:17:
                    d2:fa:0c:e4:d3:1d:e7:1c:1e:28:47:ac:47:b4:4c:
                    8d:8c:37:ad:21:08:ee:c6:f1:17:7e:d7:91:78:71:
                    e3:e7:4f:0c:32:a9:f2:84:57:eb:20:81:c9:f3:fe:
                    c0:32:a7:68:50:88:84:9b:11:81:f7:ae:0f:80:b3:
                    57:36:d6:c5:18:4a:9c:d0:24:4f:57:0c:b2:76:96:
                    0d:0b:ef:2c:d7:7d:df:8a:17:d9:3b:65:d2:69:68:
                    a2:41:d4:2d:2f:4d:f4:80:3d:40:b7:01:f6:99:e1:
                    e1:19:08:f4:ab:95:ee:e8:4a:d7:9a:f5:8f:80:0b:
                    b9:a5:af:d1:a4:db:fe:e8:35:45:87:57:2d:79:2c:
                    13:7a:e2:96:0d:6b:79:23:fe:d4:bf:a7:3e:56:d6:
                    65:40:f9:c1:a6:f9:01:1a:53:1e:31:bc:1e:99:5a:
                    55:66:29:7d:24:21:49:a9:f7:80:84:22:4b:f9:18:
                    93:d0:d6:82:0a:d8:89:71:68:39:fb:20:f3:83:8b:
                    86:9b:70:6d:7d:ad:9e:9c:ba:a4:35:3d:82:8f:65:
                    b7:29:c0:4f:59:97:ba:46:71:d8:f8:98:e7:f1:45:
                    6d:19:f5:46:be:39:55:7e:e3:5d:1a:18:82:70:d3:
                    89:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:55:BF:DA:63:08:22:CB:A0:9D:4C:EB:24:09:94:27:36:5F:A5:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f08a730e-ce0e-3b2c-b161-cf18ef26d118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:ca::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:25:3a:bf:db:0e:4e:df:1d:b4:32:e4:9f:af:3a:02:52:af:
         57:ef:93:05:ad:85:bb:c6:0b:66:41:85:dc:b4:28:05:23:50:
         0e:b6:6a:2d:eb:67:47:71:21:45:2f:5d:0c:c9:ab:12:e1:10:
         da:21:eb:2b:0e:65:53:30:0a:ab:8b:61:2b:4d:02:2f:db:74:
         4c:50:bb:c9:f3:2e:ba:cc:cd:cc:1d:46:82:5f:d5:a8:39:44:
         62:80:a8:37:42:01:7a:3c:67:fd:19:30:50:6c:02:62:61:78:
         c1:4f:53:c6:e2:d7:2b:94:67:e8:29:e6:af:10:72:08:7b:4c:
         51:66:11:7a:68:89:6c:0e:87:c0:51:56:8d:0e:99:e7:35:d9:
         d0:17:aa:9a:f8:34:d4:fe:69:49:8a:5e:91:6c:23:8e:34:f3:
         2b:6b:8a:7a:7c:b0:83:46:e6:cf:d1:2e:97:f9:9d:77:bb:0b:
         a3:9a:ef:ab:5d:3b:f5:e3:4e:40:64:a4:c0:d7:5e:72:e8:99:
         9a:9e:64:a0:3b:d6:8d:cb:61:78:d8:61:1e:3f:3f:36:0b:7e:
         4c:1a:b1:7c:aa:f7:42:dd:0d:55:a2:03:91:39:93:eb:a6:d7:
         a5:67:24:95:cc:b3:51:59:a6:f8:a8:b2:87:68:3a:40:dc:88:
         c5:e2:ad:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:03:58 2025 by rpki-client