Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/155a6452-86ab-3797-b141-df30cc5c28ef.roa
File:                     155a6452-86ab-3797-b141-df30cc5c28ef.roa (raw, json)
Hash identifier:          ly5+jyPNy0ZAeVzpUyBIgbfneZuB3vw2XEW2iSuIJ4s=
Subject key identifier:   3E:EA:E8:E6:B4:D4:6D:14:64:30:46:2C:C8:6F:F1:A9:C2:6B:CD:04
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584A10354A3C1576E87014A49C8C
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/155a6452-86ab-3797-b141-df30cc5c28ef.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     62989
IP address blocks:        2607:2240:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:4a:3c:15:76:e8:70:14:a4:9c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=26787ba2-851f-4deb-94cb-7291c56ae8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1a:00:e8:e8:54:e2:91:be:5d:cb:e6:c0:de:
                    e6:8b:37:91:54:72:f1:d2:65:cb:17:81:c8:44:75:
                    90:55:43:89:6d:a0:a7:16:53:53:35:a4:9f:b7:56:
                    de:d8:41:13:90:9e:91:8f:45:a7:39:0b:04:90:4f:
                    1e:13:8c:be:0d:df:e0:8b:eb:5d:dc:8a:f4:97:55:
                    08:85:4d:3a:ca:99:28:d7:d5:82:5c:d2:aa:75:27:
                    b2:7e:70:ea:6e:78:c6:4a:fb:de:27:ad:d3:07:e1:
                    d8:e0:01:1a:43:d3:6f:ae:6d:80:b6:37:ca:1c:99:
                    a5:c1:8a:dc:81:ea:a5:e2:ee:71:e3:e9:0d:01:1a:
                    70:a4:3e:18:4e:99:09:97:0b:ae:04:00:ac:59:9d:
                    81:c0:86:5e:d7:41:a9:ad:b8:cd:7d:22:5b:52:49:
                    13:d1:81:05:16:66:c5:c6:d1:e4:2e:f1:39:b0:02:
                    dc:57:5e:0d:33:bc:54:b8:89:74:53:72:d5:71:82:
                    d0:0b:b6:20:d1:58:32:19:29:e3:9c:00:e3:9e:5d:
                    2d:c1:e1:6e:88:01:b4:00:81:60:63:97:f7:e9:32:
                    71:c7:0e:44:a6:fd:7d:9e:67:03:6e:70:f1:51:14:
                    71:da:8b:e4:72:67:32:d5:fb:0f:43:f9:2c:c6:87:
                    c0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EA:E8:E6:B4:D4:6D:14:64:30:46:2C:C8:6F:F1:A9:C2:6B:CD:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/155a6452-86ab-3797-b141-df30cc5c28ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:c1:1b:8b:c7:47:73:79:b0:83:77:f0:8e:fe:d6:6b:83:e8:
         bd:5e:6b:08:86:c3:09:24:6b:39:fc:a9:d1:64:47:af:90:a0:
         e4:43:fe:94:9d:42:7e:f2:e9:69:ec:dc:b5:48:2f:53:7b:86:
         01:b2:58:70:f2:92:82:9b:7c:41:91:af:95:32:ff:56:04:73:
         bc:94:97:ef:34:37:0a:ab:91:88:a8:61:59:9d:00:da:61:e9:
         ba:3d:fb:7a:da:12:ec:96:2a:72:fa:a8:17:08:8e:fe:9b:25:
         36:1f:34:b5:c3:44:b3:00:f2:f7:c2:27:66:16:77:55:e2:a4:
         eb:fd:45:e7:03:cd:cb:f5:e5:31:92:9a:33:58:63:0e:97:e4:
         51:c7:25:8b:51:4d:3d:92:7e:f8:c8:c0:b1:c4:b2:26:65:0f:
         2a:1d:2f:d2:fb:b9:8e:39:03:1b:dd:36:b6:05:6f:bb:f2:b6:
         c8:36:06:35:f0:2c:af:80:f1:49:37:83:dd:5d:40:42:df:a0:
         cd:66:a7:37:ff:4c:ab:5e:0f:ff:29:ab:8a:40:e1:55:e4:83:
         68:31:91:2b:3c:3b:c9:90:2c:51:24:c2:d0:29:09:08:5d:f1:
         8b:ee:0d:ec:e3:f6:b2:f1:24:12:7d:42:1b:0b:e7:38:19:5b:
         f9:bc:28:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:40:54 2025 by rpki-client