Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/6f574daa-e6d0-36d0-86a8-eebfed4aa3e4.roa
File:                     6f574daa-e6d0-36d0-86a8-eebfed4aa3e4.roa (raw, json)
Hash identifier:          C/Jik2Wbcd7lZi0CP/ImgwO8Oe+1CNjKvC9buk6q6ls=
Subject key identifier:   69:1A:C5:28:75:99:16:7D:80:D0:0D:F0:6B:E3:33:38:71:3A:8E:5A
Certificate issuer:       /CN=f0c5c989-838a-4504-9ec3-d2a149457243
Certificate serial:       010D0C9F43285849291ED2A29E3C0A5DCD12CC80
Authority key identifier: AB:26:F7:63:55:B3:02:0B:3B:78:5D:A4:CA:BC:A3:AD:5A:00:19:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/6f574daa-e6d0-36d0-86a8-eebfed4aa3e4.roa
Signing time:             Wed 12 Mar 2025 06:24:04 +0000
ROA not before:           Wed 12 Mar 2025 06:24:04 +0000
ROA not after:            Tue 10 Jun 2025 06:24:04 +0000
asID:                     35039
IP address blocks:        2604:5e0:1000::/36 maxlen: 36
                          2604:5e0:2000::/36 maxlen: 36
                          2604:5e0:3000::/36 maxlen: 36
                          2604:5e0:4000::/36 maxlen: 36
                          2604:5e0:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/f0c5c989-838a-4504-9ec3-d2a149457243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/f0c5c989-838a-4504-9ec3-d2a149457243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:1e:d2:a2:9e:3c:0a:5d:cd:12:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c5c989-838a-4504-9ec3-d2a149457243
        Validity
            Not Before: Mar 12 06:24:04 2025 GMT
            Not After : Jun 10 06:24:04 2025 GMT
        Subject: CN=3467829f-f165-43f0-a547-225d5d2f95dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6a:77:22:4a:eb:d1:99:9b:d0:f9:82:22:42:
                    a0:98:60:e6:17:d8:ca:0a:12:ae:ef:41:fe:f8:04:
                    eb:68:9e:49:6f:75:0e:09:4c:eb:75:74:4b:ab:cd:
                    f8:76:3e:2b:e1:ee:79:5f:3c:39:1e:7e:7e:9f:57:
                    57:22:4c:76:c0:1f:36:66:f4:f7:95:78:85:d3:7c:
                    87:be:f1:77:42:51:6e:7a:d7:4e:3c:c8:e6:70:d2:
                    43:5f:d2:63:ff:61:4e:07:a7:9a:14:9e:8c:5a:7e:
                    91:c2:90:b2:19:81:9c:86:96:a9:92:a9:cd:e6:af:
                    86:e4:6b:69:f5:38:aa:d4:b7:06:d8:ab:60:10:72:
                    16:b2:be:1a:f4:6a:84:82:ed:aa:b4:f0:6e:7a:56:
                    f6:ec:63:04:ad:e4:02:9a:a4:c8:d3:db:19:06:fe:
                    87:c5:bc:d7:fa:f0:0d:71:cf:7d:c3:82:03:07:c0:
                    3d:57:53:e5:25:8b:8c:9a:55:2d:e3:8f:e7:89:c5:
                    2d:7c:ac:9e:08:01:7f:08:55:6e:da:32:4f:9c:68:
                    7b:fe:e9:8e:83:6a:6e:8a:1d:38:e0:a1:19:ea:7a:
                    15:ea:46:43:ab:7e:12:bc:cf:f3:7d:27:bc:d4:47:
                    63:e6:98:05:99:5b:82:70:f8:ac:b2:56:2d:90:7c:
                    d3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1A:C5:28:75:99:16:7D:80:D0:0D:F0:6B:E3:33:38:71:3A:8E:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/6f574daa-e6d0-36d0-86a8-eebfed4aa3e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/f0c5c989-838a-4504-9ec3-d2a149457243.crl

            X509v3 Authority Key Identifier:
                keyid:AB:26:F7:63:55:B3:02:0B:3B:78:5D:A4:CA:BC:A3:AD:5A:00:19:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5e0:1000::-2604:5e0:5fff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:05:c3:5e:76:99:e0:a8:e1:df:9d:97:98:5f:8b:f0:dd:f0:
         80:7d:e6:95:ad:f4:53:4b:f4:be:64:fd:67:38:6e:13:ce:3a:
         95:fd:94:aa:6c:c2:2a:e4:98:88:3d:e2:a9:61:4e:b2:c5:d2:
         1a:e1:c3:c6:71:74:72:48:93:64:8f:13:30:df:36:9f:9a:93:
         de:df:a7:1b:ec:e5:c2:fb:10:27:98:6a:56:e7:35:2a:d6:e9:
         da:ec:ee:bd:08:c2:c2:65:22:ee:14:82:3e:56:f4:a9:8f:08:
         d9:05:05:eb:c3:2f:ab:90:6c:1b:38:55:cd:f9:9c:20:cd:42:
         74:5f:9b:70:04:62:c6:8e:c0:75:23:bb:46:78:19:cb:7f:69:
         97:f9:df:d1:40:37:7a:71:42:b8:59:42:e6:04:14:43:45:16:
         05:a8:80:13:3d:1d:5f:af:6b:51:59:a7:a0:8e:b9:58:88:e9:
         6f:89:24:a5:6a:bb:92:a8:b9:f7:56:f2:82:16:29:da:fb:f7:
         19:d0:a1:8b:c9:d5:d3:e2:26:8b:cd:be:3c:0e:93:c2:23:43:
         af:81:9b:50:07:53:83:84:e2:3d:2e:9a:70:5a:00:a6:25:01:
         6e:5d:99:e0:98:b9:3c:82:d1:07:23:97:8c:2d:ec:57:0b:d2:
         a4:b4:c0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:51:21 2025 by rpki-client