Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4a42fb5f-b644-37be-b039-55b5dbcabadb.roa
File:                     4a42fb5f-b644-37be-b039-55b5dbcabadb.roa (raw, json)
Hash identifier:          97kwXg7/gx/weakxqMmaMMbhPq1rC/P8urhB84au5j4=
Subject key identifier:   27:CE:C5:DF:80:DE:49:1A:A8:3C:4C:47:15:27:BF:23:1E:2C:91:5A
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F4328584A6F207D394D9B3DF6F300A100
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4a42fb5f-b644-37be-b039-55b5dbcabadb.roa
Signing time:             Mon 07 Jul 2025 01:00:50 +0000
ROA not before:           Mon 07 Jul 2025 01:00:50 +0000
ROA not after:            Sun 05 Oct 2025 01:00:50 +0000
asID:                     2648
IP address blocks:        2610:20:6b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6f:20:7d:39:4d:9b:3d:f6:f3:00:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Jul  7 01:00:50 2025 GMT
            Not After : Oct  5 01:00:50 2025 GMT
        Subject: CN=db5ed931-f7e0-46ba-b14b-19c28074bb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:53:ce:70:be:51:f6:40:55:69:24:50:b9:ef:
                    a3:4b:d9:e8:f6:3c:a3:a5:3f:46:80:91:ac:38:c6:
                    66:bd:05:42:ac:9f:c4:ae:0e:31:b1:cf:d7:29:ae:
                    d0:d2:90:43:44:5f:49:e9:9a:15:cd:ac:59:62:9d:
                    94:1f:76:d0:77:c1:8d:46:47:34:43:5d:69:ef:d3:
                    47:14:0a:e1:21:6f:be:36:fa:00:58:99:33:e9:19:
                    d5:71:35:e0:09:81:09:bb:6a:4e:f6:d4:2a:28:f0:
                    e5:f1:ec:ba:4c:a6:ba:bf:ba:16:06:ff:3a:4a:ab:
                    3c:2e:48:db:04:ec:6e:1a:b8:e5:f9:cc:c8:c0:62:
                    91:b8:9f:54:71:06:84:ea:d8:94:39:a2:37:d8:f5:
                    8f:56:e7:fe:a1:d3:6a:ca:9d:c4:ae:d6:c3:05:bc:
                    6c:5d:d3:fb:09:13:91:ce:a0:9d:06:8e:53:79:cf:
                    fd:76:18:7f:32:bc:90:1e:9f:e0:72:a0:59:56:34:
                    ee:c5:d3:3f:01:d3:dc:b3:75:23:be:32:13:5e:a1:
                    0f:43:fb:0e:12:5f:b7:21:09:71:80:20:d3:71:b4:
                    db:c0:1c:f3:e9:2c:10:12:2e:03:ca:9e:79:9f:4f:
                    f1:44:3c:e6:10:ec:c5:22:d6:10:64:0e:9b:f5:da:
                    9e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CE:C5:DF:80:DE:49:1A:A8:3C:4C:47:15:27:BF:23:1E:2C:91:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4a42fb5f-b644-37be-b039-55b5dbcabadb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:bd:c2:b6:65:a0:ad:10:58:69:b8:59:cf:93:8f:8e:5e:00:
         5e:80:b5:d5:50:34:5a:0a:32:8c:83:3d:a2:09:0c:36:89:bc:
         23:55:0b:12:cf:da:fc:9f:2e:cc:ef:12:51:0f:22:16:a4:fc:
         a6:ee:ad:d8:4d:f1:5d:fe:c6:0d:63:23:cd:99:70:bb:57:0f:
         22:f0:cb:e2:fa:ce:50:35:b2:ca:b8:41:47:2d:66:4a:28:b2:
         10:10:ad:64:14:b6:0f:f7:89:2a:b0:3e:2a:a2:5a:30:84:31:
         15:9d:1e:d4:e6:5f:61:8e:3f:59:f6:53:74:f8:d5:82:2d:23:
         ad:cd:bb:c1:82:6e:a7:2e:e1:5d:d3:da:d7:cb:74:55:05:52:
         e8:ff:a5:ee:b8:66:f4:95:86:07:3f:ee:57:b5:41:66:cf:d6:
         a4:3b:93:0e:27:0b:17:6b:5a:84:da:f4:2f:16:7e:5c:77:70:
         c5:45:07:1b:dc:c7:74:4e:3a:99:fa:8f:4c:e5:ca:94:d7:d4:
         87:b6:45:04:89:a1:32:21:23:81:11:ae:ca:77:da:f0:40:9d:
         c8:54:2c:47:a2:fd:f0:07:c0:14:a0:93:2d:4b:d1:f1:0c:de:
         a4:8a:8c:53:cc:6c:cf:8b:81:3a:06:89:7f:25:9a:5b:01:ae:
         aa:da:fe:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 8 21:44:38 2025 by rpki-client