Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa
File:                     00815a99-a458-3091-a374-a6e5d843be86.roa (raw, json)
Hash identifier:          I2DcTQ1jlA/ScMS2SEgzei9FW0zXXofzFPetXx86gzk=
Subject key identifier:   27:D3:69:53:F0:1D:5A:D2:A6:49:F6:21:CF:AA:6D:E0:46:22:76:F0
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F4328584A6F207D90118F3801DC38E280
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     49
IP address blocks:        2610:20:6f97::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:7d:90:11:8f:38:01:dc:38:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=30d26558-9655-42ff-a7f1-be26f8b431ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d1:14:e3:70:c2:22:e7:e3:bc:0f:45:63:07:
                    a9:5b:0a:de:37:71:1b:71:7c:6d:01:7a:35:79:dc:
                    69:6a:60:40:5d:bf:6b:0f:d5:5b:63:74:cd:e7:bf:
                    3f:e3:26:72:5f:df:a2:c5:58:ea:cb:7e:4a:8a:18:
                    ea:8d:14:49:63:a4:db:66:d5:43:b8:bc:f7:24:91:
                    14:a0:36:5f:2d:05:11:4b:4f:25:4c:eb:d7:ae:2a:
                    8a:55:94:ab:fb:52:2f:7c:77:7b:66:df:c1:01:a2:
                    e3:7e:f0:a9:f7:45:96:37:5d:22:d2:ec:b7:9f:dd:
                    fc:d5:0f:6c:c6:84:85:a7:f9:20:5b:62:d6:a5:64:
                    3f:ef:53:d8:91:ca:c5:02:aa:97:90:6e:b7:bb:45:
                    cc:09:06:7d:c5:e6:d0:61:45:50:1e:83:52:df:58:
                    ff:4b:81:c2:a8:9b:53:6e:a8:cb:1a:61:1c:70:6a:
                    56:aa:b9:11:8b:44:91:f8:64:37:85:5a:93:04:c0:
                    17:96:d8:66:16:c8:1e:8b:58:9b:58:77:b5:25:14:
                    c4:5e:c1:52:bc:00:b0:26:2b:43:ae:2c:8c:df:15:
                    9b:2a:f8:4e:9f:62:c8:62:4b:17:34:76:9a:36:f9:
                    02:82:e2:12:33:53:4d:ad:62:c3:06:04:12:ea:96:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D3:69:53:F0:1D:5A:D2:A6:49:F6:21:CF:AA:6D:E0:46:22:76:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/00815a99-a458-3091-a374-a6e5d843be86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6f97::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:c8:72:c0:51:7c:03:4c:ba:e8:94:47:39:ac:80:b5:4c:85:
         71:4c:c0:67:56:f3:7a:53:67:85:2b:cb:f1:65:03:3d:a3:fd:
         81:17:5c:aa:47:bb:31:a4:14:3f:73:52:12:86:17:60:c8:53:
         6f:88:01:02:f9:12:5c:45:01:be:6d:bc:8f:d2:b3:98:df:05:
         aa:0b:ab:70:22:e8:a9:bb:fb:39:09:08:2f:0e:3e:14:08:80:
         8e:67:d7:5f:25:16:93:34:7f:19:4f:c9:09:35:b6:43:16:8a:
         d8:34:03:17:8b:12:db:b1:9e:c5:41:3b:3b:09:59:c4:30:18:
         01:53:82:e8:c1:99:0e:13:90:0b:6b:57:fd:7f:c5:62:c9:55:
         68:21:f4:3e:51:e5:88:68:57:b4:a2:b0:24:08:34:63:5a:a3:
         03:ef:5d:93:64:6d:f8:70:d7:63:92:ae:7f:80:66:6f:3f:05:
         ba:0f:b4:bd:13:1f:d1:01:07:3a:50:aa:2c:75:6e:ea:73:81:
         cb:fc:28:dc:f0:89:fd:11:94:e2:f4:43:71:45:a4:14:0a:44:
         17:76:62:97:8e:76:2a:42:48:5a:3e:82:57:7e:4e:25:91:c6:
         2a:ae:65:2e:30:7a:8d:86:81:ca:fd:f9:e4:e9:b0:de:ec:9e:
         86:76:4a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 8 21:22:22 2025 by rpki-client