Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/10cbaa41-ffe9-398a-b7f4-d3d4f6ce17b7.roa
File:                     10cbaa41-ffe9-398a-b7f4-d3d4f6ce17b7.roa (raw, json)
Hash identifier:          y4m7u00QIdmxex7d38aQVrzhDTlhyTXEBJ45bHXa8kE=
Subject key identifier:   43:AB:D7:9C:66:5D:0D:A6:0B:C3:63:5C:59:C1:89:9D:53:14:E1:45
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584A735095764AC2B8988807C880
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/10cbaa41-ffe9-398a-b7f4-d3d4f6ce17b7.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     32491
IP address blocks:        2604:4000:2000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:95:76:4a:c2:b8:98:88:07:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=ab1ba323-b2c2-4865-9537-41bf0d0eb9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:98:d6:60:be:52:76:1b:6a:e8:0c:49:a1:a1:
                    9b:f5:b3:71:1e:e3:ca:c7:73:fb:3f:28:1d:89:92:
                    19:1f:91:7f:c9:60:c2:90:58:2d:59:04:1d:58:bf:
                    6a:d5:4b:39:db:17:d2:ef:26:15:67:de:59:f3:4a:
                    41:60:88:4b:a9:a7:9d:5f:2c:b7:a1:d2:89:e6:a4:
                    66:14:d0:90:54:79:68:32:01:05:fe:ae:9c:e8:43:
                    fe:4e:61:08:c5:db:6c:66:0e:42:74:c8:48:34:86:
                    a5:69:e9:20:7d:3f:67:1f:8c:4e:44:62:43:4a:c5:
                    17:97:de:df:ad:ca:8c:36:af:88:6e:57:8c:bc:bd:
                    d0:e1:b1:ab:59:41:47:fe:f3:73:2a:d1:60:15:52:
                    79:29:84:d6:d7:c0:b3:57:07:00:0f:be:65:03:77:
                    33:20:d9:cd:b1:51:73:54:01:bb:e5:31:af:54:62:
                    f3:c7:d4:e1:cd:ca:15:b2:e2:47:da:37:9e:f8:20:
                    2f:62:e3:5a:c3:5d:2d:8c:ed:93:42:33:92:37:25:
                    e1:cc:92:69:23:a2:40:5e:0c:36:e1:38:1a:28:0a:
                    51:c5:5e:65:df:16:e9:fe:16:c8:c9:b8:5f:bf:df:
                    7c:03:3c:c5:2d:28:bd:7b:63:c6:83:cc:ac:9e:8c:
                    eb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AB:D7:9C:66:5D:0D:A6:0B:C3:63:5C:59:C1:89:9D:53:14:E1:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/10cbaa41-ffe9-398a-b7f4-d3d4f6ce17b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4000:2000::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:98:63:99:f6:23:0c:d8:d1:86:50:1c:c8:db:e6:a9:e2:e1:
         c2:a1:68:16:68:6a:3e:2a:4d:ed:cc:ec:d8:11:bd:34:3c:c3:
         6f:a2:67:e2:25:7a:c7:df:67:36:cc:e7:ff:05:f0:d4:7a:12:
         dd:c1:49:75:84:03:4b:03:b1:c3:7a:7e:e8:97:0a:38:33:75:
         b5:80:fe:85:83:dd:10:f6:46:a6:54:5c:fb:d9:cb:a5:65:65:
         e3:43:1f:6d:5c:35:b5:86:39:37:d9:f9:91:c1:bc:5f:c7:16:
         fe:af:31:15:b4:3f:42:cb:76:23:77:df:ab:24:5a:a0:b0:fd:
         c8:d8:fd:77:a9:07:86:4f:d2:ed:93:e7:69:26:8c:82:61:33:
         b4:9b:54:12:92:7b:84:b5:50:99:ea:71:d9:7c:38:2f:a6:d9:
         ee:59:bd:d2:e3:f9:11:50:60:d7:d3:60:37:4a:d7:bb:cc:4f:
         45:f6:69:75:84:f5:78:bb:72:ba:c2:40:f8:db:67:e1:f9:fe:
         c2:32:f9:4a:0f:11:e8:4f:3a:1c:ca:55:2a:67:fd:43:10:c2:
         00:9c:ec:85:f6:55:15:ed:e4:81:db:03:99:ee:1e:86:f9:cb:
         95:7b:79:b0:fe:23:cc:4b:52:db:25:64:24:d9:6c:a4:22:ea:
         b1:ad:50:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 00:33:46 2025 by rpki-client