Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffa94837-b861-3a52-bfa1-4392ce1f4b6b.roa
File:                     ffa94837-b861-3a52-bfa1-4392ce1f4b6b.roa (raw, json)
Hash identifier:          iEcgmson1vP6mfBUVIjwSxERaxG5nXic609RI0r1b28=
Subject key identifier:   9F:06:2B:80:2C:41:EA:B0:CD:13:2A:74:61:EE:A9:B6:D2:3B:5B:60
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849EB379AB8E82F13210DE2D420
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffa94837-b861-3a52-bfa1-4392ce1f4b6b.roa
Signing time:             Tue 20 May 2025 19:00:49 +0000
ROA not before:           Tue 20 May 2025 19:00:49 +0000
ROA not after:            Mon 18 Aug 2025 19:00:49 +0000
asID:                     13335
IP address blocks:        2606:4700:2ffb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:37:9a:b8:e8:2f:13:21:0d:e2:d4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 20 19:00:49 2025 GMT
            Not After : Aug 18 19:00:49 2025 GMT
        Subject: CN=c22c25b1-5f45-4192-9541-8c8b6f29d538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:be:cb:c2:16:52:b6:e3:be:11:26:8f:d4:aa:
                    6a:93:b7:70:04:50:b9:a6:39:3f:dc:d4:25:2a:b8:
                    8c:77:df:d6:20:72:a5:17:64:b5:dc:d5:70:62:05:
                    96:d7:76:73:48:3c:db:5b:ea:fb:16:41:6e:d1:9a:
                    00:0f:5f:b5:bf:5c:11:cf:33:45:20:30:95:42:f1:
                    a1:61:a4:a4:29:40:dd:d4:8f:49:58:42:cc:99:0f:
                    89:15:87:38:e3:a8:19:f9:65:94:32:37:08:6f:36:
                    11:cb:c2:ff:5d:94:4b:57:82:82:76:2a:89:ee:46:
                    85:62:41:1d:97:46:f7:b4:b9:eb:fa:68:d9:fd:0d:
                    44:be:ef:68:16:d0:ec:84:d4:b5:ab:11:0c:66:c0:
                    68:9e:c6:52:92:b9:c0:6e:bf:79:7c:0e:fe:48:fa:
                    1e:63:a9:36:46:23:eb:f0:6a:e4:07:ed:99:00:ae:
                    52:c3:2d:fd:ff:b4:7a:80:7c:24:46:58:91:16:d8:
                    f3:57:db:91:00:6a:7f:a0:a9:3d:21:4f:1e:8c:3d:
                    ae:a1:db:02:70:bb:31:4a:ef:63:75:90:04:95:7d:
                    60:48:b5:ad:e2:88:e8:26:e2:1c:1f:2f:37:71:f5:
                    57:08:89:4e:be:1a:4e:96:94:f4:fb:33:f7:44:9a:
                    5c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:06:2B:80:2C:41:EA:B0:CD:13:2A:74:61:EE:A9:B6:D2:3B:5B:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ffa94837-b861-3a52-bfa1-4392ce1f4b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:2ffb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:47:2e:c1:17:6a:79:cc:49:60:e8:8e:36:40:2e:22:2d:76:
         4a:55:3e:2b:77:5d:e9:10:e5:1b:80:3e:e7:c0:02:5e:45:b5:
         1a:af:3a:db:7b:04:74:1a:e7:ca:23:8c:49:d0:ff:2b:f9:cb:
         0c:f9:e7:ce:f5:78:2b:33:49:f7:cb:44:d2:a4:74:07:db:27:
         ec:ae:9a:bc:b9:13:79:7f:df:ba:8d:db:b7:cb:30:d6:34:80:
         8a:b4:c4:83:3b:81:fd:23:1a:d4:17:9f:e2:82:ae:d1:90:f0:
         bc:07:22:b1:15:ed:0a:63:ea:3a:c9:39:29:ea:04:0f:f3:39:
         5d:9a:35:1a:1f:59:cb:7f:c4:a2:82:b4:82:dd:d7:da:96:e6:
         0b:12:78:4e:7d:ac:f4:8d:7f:b9:11:34:80:71:b6:95:f8:cd:
         9a:b2:11:28:ba:d7:ec:1c:5e:25:66:3a:f3:31:9c:61:ed:67:
         a2:14:4b:95:62:ec:9b:c2:af:8c:b4:82:73:c3:01:65:15:c6:
         de:14:f5:57:49:14:c9:1e:a8:71:0f:6b:ee:a4:ae:fa:af:c6:
         4a:68:b3:42:b0:ec:6c:1b:f8:c6:78:14:14:65:f3:b1:43:9b:
         05:57:0d:c9:01:d1:9d:83:65:c1:8c:5f:15:47:66:65:bf:aa:
         88:16:c2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:56:56 2025 by rpki-client