Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/a29d5ba2-6995-3c9d-a08c-28b666cd1b84.roa
File:                     a29d5ba2-6995-3c9d-a08c-28b666cd1b84.roa (raw, json)
Hash identifier:          fq5xXSj1MB/OzXLRw691r2HCpnms//n5OhM2CPp1Yro=
Subject key identifier:   E6:14:56:A2:09:87:A7:59:A9:73:93:55:1C:D3:75:BB:8B:E1:F8:B7
Certificate issuer:       /CN=03a7a8d3-26fa-4915-bacf-2848f9754758
Certificate serial:       010D0C9F432858498339F3056FADFB0707BB5640
Authority key identifier: 53:99:8A:12:01:32:65:4D:FD:B5:26:2B:D5:F8:28:BC:E6:EF:7B:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/a29d5ba2-6995-3c9d-a08c-28b666cd1b84.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     400326
IP address blocks:        2606:3f80:b000::/36 maxlen: 40
                          2606:3f80:c000::/36 maxlen: 48
                          2606:3f80:e000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:f3:05:6f:ad:fb:07:07:bb:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a7a8d3-26fa-4915-bacf-2848f9754758
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=6994679c-9237-4896-9907-2ede1b95f036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8f:d9:3b:75:be:c8:fb:37:a6:29:c4:13:48:
                    d3:30:fa:6d:2e:d1:29:ce:2c:35:69:12:0e:4d:59:
                    ef:58:60:01:62:dc:ec:aa:cb:4d:49:cd:d8:db:28:
                    f3:ab:f2:25:a6:a5:09:3a:5d:85:eb:a8:6f:c3:1e:
                    b7:b9:ce:c0:f9:33:26:5a:aa:39:1b:5e:1b:67:91:
                    53:24:d6:45:56:00:46:15:1d:57:54:7c:d9:f1:1b:
                    91:b6:5c:34:cf:cb:fc:3b:4e:d1:f8:70:85:b4:5a:
                    b0:a2:52:e2:71:56:1a:68:0a:ea:1c:81:aa:4b:47:
                    d7:5c:f7:74:26:64:38:04:ac:20:1f:71:46:13:fa:
                    f6:8e:c3:0d:55:d8:64:83:ba:ae:05:bd:00:32:2c:
                    63:12:93:f7:59:07:54:52:37:02:16:f0:0a:67:27:
                    47:fa:e6:54:42:51:40:39:9d:43:21:2e:6c:8b:ea:
                    c0:7b:0e:c9:28:de:01:1a:3d:0f:ac:2b:06:c8:dc:
                    88:0d:83:37:36:3b:1a:62:b1:a6:f6:59:99:d6:23:
                    cf:40:a8:8c:bd:f2:55:27:f6:32:b4:82:80:07:76:
                    9c:10:0b:eb:0e:d2:bd:0b:30:78:ee:62:b2:ae:b6:
                    8b:c6:3b:4c:a2:25:de:9f:b0:d8:05:5b:12:63:ad:
                    f9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:14:56:A2:09:87:A7:59:A9:73:93:55:1C:D3:75:BB:8B:E1:F8:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/a29d5ba2-6995-3c9d-a08c-28b666cd1b84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.crl

            X509v3 Authority Key Identifier:
                keyid:53:99:8A:12:01:32:65:4D:FD:B5:26:2B:D5:F8:28:BC:E6:EF:7B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3f80:b000::-2606:3f80:cfff:ffff:ffff:ffff:ffff:ffff
                  2606:3f80:e000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:84:45:62:ad:fe:be:f8:d8:8b:18:8f:90:12:e8:64:e1:b5:
         7b:0a:9a:1e:51:2c:dd:67:d9:11:f1:d5:5e:03:f4:e0:04:67:
         7d:dc:b6:eb:37:c2:57:ce:51:70:37:f7:e5:0d:66:e8:a7:e3:
         fb:b9:bd:b8:c1:0a:be:ac:f6:b4:50:a5:3a:69:21:b7:fb:cf:
         a2:c1:7e:f6:80:71:f9:5f:04:84:62:3b:1e:02:57:7e:54:eb:
         75:19:c2:74:bb:fd:32:ad:64:f4:a8:f3:87:04:a7:33:d6:26:
         6a:d3:7d:09:e7:0f:63:6d:f4:70:d8:d2:21:6e:66:f8:08:4c:
         f4:66:24:01:75:f3:79:cc:3a:e0:51:4b:7c:5e:50:0d:89:d1:
         1c:e0:94:31:08:91:d7:92:68:b1:86:9e:65:56:b1:cc:c7:8c:
         d2:5f:3e:ee:42:77:76:7b:74:7f:7f:d4:60:65:ff:21:a7:e2:
         66:11:45:a6:64:09:94:97:c7:b6:72:7d:a5:04:01:20:bb:b4:
         87:cd:ad:16:1f:c7:f5:3f:16:8f:21:b5:cf:7a:9a:ad:5f:61:
         48:52:f7:31:a2:bd:b5:5c:09:bf:be:6f:7d:13:cd:b9:d0:8b:
         44:bb:3a:88:4c:fd:2b:d8:c0:93:2b:58:77:01:bf:88:8e:93:
         bc:cb:cc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:59:42 2025 by rpki-client