Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/90ba2bc0-c849-34c5-8725-37b3fabe1056.roa
File:                     90ba2bc0-c849-34c5-8725-37b3fabe1056.roa (raw, json)
Hash identifier:          m6FoBKdU8L71Xh4/xAWC6bBDEdJWppJvWpiPs0vtcCU=
Subject key identifier:   F1:22:C0:E4:BF:7D:1A:CD:0B:7F:6A:8B:33:87:C0:5A:F8:15:27:12
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F9F097E36F22E4CE35380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/90ba2bc0-c849-34c5-8725-37b3fabe1056.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2605:a401:810f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:9f:09:7e:36:f2:2e:4c:e3:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=e27f8d17-7d27-4c37-bce9-9a45f1319ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b9:84:f4:ab:64:b8:f0:db:8d:26:b4:82:fd:
                    5b:a3:e8:43:14:36:91:07:5e:1e:79:8d:27:4c:ca:
                    a5:e0:0f:ff:9b:e3:6a:81:bf:ec:64:5f:8b:96:9e:
                    d5:95:20:1a:f0:05:e0:88:f9:d1:88:81:bd:c9:e3:
                    61:50:c3:7f:3a:cd:2a:5b:3f:ad:de:f3:cf:b8:e4:
                    97:85:94:44:43:ea:e0:e0:1d:4e:30:1a:a2:d7:97:
                    1f:9e:d1:3d:89:00:57:14:cf:f7:5c:25:ac:bb:de:
                    3f:dc:51:48:10:9d:83:54:15:6b:c5:e9:25:d4:54:
                    cb:13:20:33:53:c2:6d:99:c1:92:5b:12:c7:63:2e:
                    26:da:23:2b:74:9b:19:82:40:ad:05:7e:f2:a3:aa:
                    25:b9:6f:42:a6:dd:45:b1:5f:8c:7d:78:cd:3d:19:
                    09:b1:33:36:2e:3b:35:dc:16:38:de:ab:75:23:1b:
                    34:86:35:4f:ec:45:0a:34:cd:ad:8d:2b:87:00:e3:
                    2d:6d:49:c1:9f:da:4a:b7:41:1d:61:65:e0:d0:67:
                    2c:af:0d:5d:5c:cf:56:12:5b:90:7a:33:46:55:b6:
                    20:87:eb:22:04:da:5a:bb:d2:74:07:4c:9a:ee:c7:
                    9d:23:86:c4:29:cb:a9:82:35:48:22:75:66:0f:28:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:22:C0:E4:BF:7D:1A:CD:0B:7F:6A:8B:33:87:C0:5A:F8:15:27:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/90ba2bc0-c849-34c5-8725-37b3fabe1056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:810f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:5b:1c:44:d0:9e:25:e7:d6:29:55:31:4b:96:ac:7c:8f:90:
         cd:08:1a:30:aa:0a:85:f8:93:30:a1:19:07:a8:49:3d:c8:2a:
         a2:de:6a:ed:b8:87:b7:fe:e8:fa:83:51:80:17:e5:e8:88:75:
         2e:67:95:e6:a7:0e:d7:36:44:07:c1:ba:59:06:a0:e6:da:d0:
         e6:2d:d5:58:01:8a:d1:e7:89:a2:45:15:21:8b:a1:5b:78:2d:
         b7:2e:ad:a5:88:b4:b5:44:90:43:2d:4c:12:09:5d:4e:8d:fd:
         91:c5:e1:18:c9:db:27:39:04:13:c0:73:35:13:af:88:1b:40:
         e9:22:82:2d:09:46:8b:9e:0e:ad:a4:e9:fc:af:18:d2:45:e6:
         6c:8a:f3:69:39:e3:ca:3d:b2:8d:bd:61:0d:bc:d1:21:96:05:
         2f:6e:ad:a2:c5:9b:b9:65:1a:11:84:71:67:93:b4:4a:06:c5:
         bd:55:f0:30:60:17:24:cb:0b:6b:3e:c3:cd:fe:45:cd:81:a6:
         3a:64:ed:c9:3d:31:31:5f:fa:fb:6d:4a:d8:2b:41:f8:78:7b:
         7c:9e:f3:62:5c:34:b9:ba:24:60:5a:6e:83:74:cd:91:24:03:
         bf:21:ce:c4:06:85:15:6c:91:93:cf:d8:14:18:ae:92:2a:52:
         81:35:0e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:39:22 2025 by rpki-client