Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/37b8d5e9-e0ca-3007-aef4-0b5e92ab7807.roa
File:                     37b8d5e9-e0ca-3007-aef4-0b5e92ab7807.roa (raw, json)
Hash identifier:          J4ae5BqJDkEb97OOky8NUdRcCQw+x/WHmLTvz/97xcY=
Subject key identifier:   AE:7F:68:FB:FC:02:E7:10:4B:58:43:32:C3:7E:4C:A2:B4:E2:37:44
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFD71E701A6CB8CE352140
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/37b8d5e9-e0ca-3007-aef4-0b5e92ab7807.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        2001:4c8:1020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d7:1e:70:1a:6c:b8:ce:35:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=d6dc639e-4c25-48ea-a08e-e86cba46e3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e7:9b:80:0f:cc:cb:11:a1:a9:fa:09:e0:21:
                    e9:ca:98:e0:f8:31:12:c6:f6:18:ca:ae:7d:44:44:
                    d6:62:ce:c1:f4:1b:8b:e1:bb:d2:c0:a7:ea:df:81:
                    11:48:35:48:ae:da:9f:5b:e0:4e:01:f5:0a:3e:60:
                    df:f6:1e:0c:96:58:17:3a:3b:f5:0b:a6:0f:ee:e5:
                    c2:7a:99:c9:b1:9c:88:e0:5b:3b:43:10:f9:1e:fa:
                    df:dc:f8:53:a7:7b:aa:57:f3:11:ef:36:b5:7e:45:
                    b4:d4:0c:0c:b5:6b:c9:32:eb:dd:c9:36:13:ff:d9:
                    1c:d9:1d:34:25:84:6a:16:7e:bb:16:49:cf:0b:15:
                    9e:6d:5f:ac:24:24:95:29:eb:c1:fc:c0:97:64:53:
                    c9:80:8e:c5:9b:b5:18:da:17:33:d5:55:50:5f:cf:
                    e1:1b:17:86:77:1a:b9:c5:01:31:6c:9f:80:a5:b6:
                    ed:1f:7a:23:97:fc:f7:d8:8d:05:98:d4:e4:72:da:
                    ca:72:97:38:fc:4c:cf:53:c9:58:77:d6:60:77:9b:
                    67:5a:2c:a7:f0:3c:e0:85:4e:e5:b9:c0:16:0d:54:
                    96:76:e0:eb:c0:cb:8a:68:0d:96:bf:c6:cc:61:27:
                    e3:73:42:c4:f4:a6:94:ad:84:0f:df:e4:27:26:8b:
                    09:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7F:68:FB:FC:02:E7:10:4B:58:43:32:C3:7E:4C:A2:B4:E2:37:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/37b8d5e9-e0ca-3007-aef4-0b5e92ab7807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:bc:71:93:cc:72:6c:c4:1d:ea:40:5c:ee:f2:84:18:1c:5f:
         df:f4:7c:97:80:b8:90:24:2c:36:d0:04:17:2d:96:65:80:9e:
         fd:d5:bf:53:ba:e0:6d:16:9a:9e:fb:d3:a4:07:62:79:54:2d:
         b8:0a:bd:3d:f9:c0:3a:99:d0:ff:7b:c3:3c:91:87:f6:75:41:
         cf:b8:66:12:e3:99:ef:b0:62:25:96:8d:bf:1f:94:87:24:cc:
         00:e3:a2:dd:48:2c:9b:b3:de:3f:4b:7e:0f:0a:98:ad:e9:00:
         2e:98:f7:93:7b:41:0c:c5:d4:a5:03:76:c3:00:98:fa:19:21:
         1b:d0:95:a2:fa:a7:cc:4d:9c:67:23:6b:09:10:e8:f1:43:bc:
         9e:5a:7a:9b:95:c5:2f:6b:15:47:71:9a:e3:ac:6f:11:8b:05:
         98:3a:36:4b:62:a9:67:cb:c0:df:a8:22:2f:5a:d2:26:60:c8:
         18:bb:a1:1b:6e:09:ee:8c:3d:ae:64:4e:6b:9d:46:3c:fc:7f:
         d9:5c:5c:08:9e:83:49:ea:a4:7f:9a:5f:0c:f0:54:64:e7:42:
         c7:94:5d:fe:3b:c0:62:7c:2f:9a:e4:50:73:eb:50:fe:3d:fd:
         d2:c9:d7:95:39:f9:26:87:5a:12:64:5b:c3:fb:c5:61:a2:5e:
         16:79:d7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:31:51 2025 by rpki-client