Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/a02237c8-ae50-3044-82bb-f2b03181c5b1.roa
File:                     a02237c8-ae50-3044-82bb-f2b03181c5b1.roa (raw, json)
Hash identifier:          7AI9PmIvmxZVf2Ya1uB7e3RdM+LnQgeK+RBnjdTyD0A=
Subject key identifier:   CB:FF:20:BA:31:77:34:A0:10:7B:66:12:C2:7D:E3:0C:1D:A0:8B:F7
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584A103543D444227258AA6CBE00
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/a02237c8-ae50-3044-82bb-f2b03181c5b1.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     22192
IP address blocks:        2607:2240:800::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:43:d4:44:22:72:58:aa:6c:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=d8913c68-1404-4b37-b6f3-ee9b3e9a2d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c2:aa:ca:01:34:b8:59:33:a3:82:f4:a8:bb:
                    27:96:ba:e8:ed:8a:95:f7:d1:33:1e:92:9f:b3:7c:
                    8a:43:4a:f2:f8:70:33:13:32:1b:a2:16:24:63:0e:
                    14:e4:6d:44:e0:75:81:e5:ac:51:4d:6c:50:ef:6b:
                    13:24:65:18:b0:70:78:df:da:df:9b:53:87:da:ba:
                    2e:d7:51:b4:2d:e1:32:2f:21:36:c2:7f:52:26:91:
                    6f:3e:cd:66:a1:32:e1:22:b4:5e:6a:3a:f3:9b:91:
                    f7:6f:9d:df:e9:dc:ca:8d:e0:5b:2d:22:a0:98:d8:
                    67:1e:0a:31:51:95:a9:c4:1b:ff:c0:4c:f7:ea:47:
                    bd:a8:1c:76:c5:81:c8:46:0e:2d:b9:a0:a3:1e:5b:
                    91:64:d8:7f:8f:c5:42:69:74:c1:79:34:73:ed:46:
                    8f:fe:4b:a5:bb:3b:c1:df:1c:be:e8:df:39:76:e4:
                    97:2e:5c:6a:6d:3d:50:04:fd:31:22:bc:36:a9:45:
                    29:4f:fc:d5:5a:98:5c:21:e5:0e:11:ee:98:c2:78:
                    f7:f2:e8:bf:72:f5:70:40:60:ec:ca:9d:2f:5f:d2:
                    0b:49:5d:fe:90:59:29:3a:71:93:49:19:1a:91:a5:
                    dd:31:13:60:44:45:5c:44:f4:88:5e:3e:f7:2e:9f:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FF:20:BA:31:77:34:A0:10:7B:66:12:C2:7D:E3:0C:1D:A0:8B:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/a02237c8-ae50-3044-82bb-f2b03181c5b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:3c:a1:80:64:58:14:c5:e8:04:17:80:ed:3c:b2:59:cd:a6:
         0f:bd:5b:0e:0e:0c:73:96:2e:d9:ad:92:6a:7f:e5:e9:42:0c:
         34:3e:05:a0:49:be:36:6d:2d:be:e8:25:57:83:f5:74:66:b6:
         6d:8a:b5:74:32:57:2a:f4:70:a0:d0:b0:c9:b3:e9:23:b7:d2:
         bd:30:2a:54:aa:c1:ea:82:77:58:1b:f0:54:9c:a7:15:cf:88:
         b6:5f:1d:63:52:04:0c:bc:9a:ba:ea:04:42:b5:f0:b0:2b:89:
         d0:8e:24:66:3f:ed:e2:46:df:33:55:0a:62:b3:43:76:59:3e:
         80:9e:4c:6c:48:0a:bb:02:a1:77:b1:e8:5d:26:23:6d:14:51:
         8f:c6:a4:bd:a1:46:5d:0e:57:76:9c:ca:dc:7c:d4:de:a4:f4:
         3c:aa:17:b2:29:73:9f:8d:4c:4d:81:c4:bd:5b:48:97:80:36:
         bb:29:34:8c:e1:30:80:46:9f:b6:88:15:ba:be:60:80:0e:30:
         c5:28:56:23:38:c4:c2:06:ba:8f:a7:1d:a7:8b:2a:68:16:a0:
         7a:1d:ac:f7:ef:e0:4f:dd:64:eb:82:0b:d4:d0:c7:14:30:fc:
         ec:f9:f7:61:21:44:a7:e8:3c:ed:98:10:e7:16:cd:54:85:bc:
         36:f8:01:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:01:04 2025 by rpki-client