Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/1434977d-ec30-378c-a9e6-319334f0b01d.roa
File:                     1434977d-ec30-378c-a9e6-319334f0b01d.roa (raw, json)
Hash identifier:          Uiv2/WgsnzlTS85ywO7xvqK9gfYEPZeCdY+Dyi+/Kno=
Subject key identifier:   06:83:05:EA:05:00:17:64:20:08:1C:AF:D2:61:17:E8:8D:2C:96:98
Certificate issuer:       /CN=6ce95cb2-398f-4574-bae0-522b74e03f71
Certificate serial:       010D0C9F43285849D16505F37D1974F9441B8880
Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/1434977d-ec30-378c-a9e6-319334f0b01d.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     31915
IP address blocks:        2606:3840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:05:f3:7d:19:74:f9:44:1b:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=0c0451e2-bc45-4286-a28f-ff8a9e54a912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f5:00:c4:fa:56:1e:dc:5b:77:02:2e:a2:ff:
                    b7:e7:7e:1d:e1:3d:92:e6:f9:0c:11:0d:5f:0c:a4:
                    6e:5d:b7:c8:be:7a:84:be:e9:5c:71:7a:c3:c9:91:
                    8f:3c:1f:dd:ea:7e:6a:26:41:3f:d5:72:a1:4b:ff:
                    eb:b2:17:e2:d5:57:7d:7a:f9:69:5d:de:ed:b0:9c:
                    b3:da:06:37:27:c9:87:ed:b4:48:ae:b8:98:95:0d:
                    23:19:82:5e:70:4b:e7:5e:01:a7:1e:a1:11:50:99:
                    ff:6d:90:63:fc:74:6c:b6:54:d3:02:8c:7f:f4:ba:
                    f8:f9:de:0b:4a:0a:22:58:e7:56:0a:60:a4:e8:c0:
                    5c:94:6b:4b:bc:25:fc:f5:2a:6d:fa:19:63:d3:e2:
                    28:41:e2:7e:97:35:bc:79:aa:d9:a8:db:5d:dc:61:
                    3e:6d:26:c9:f3:b1:cb:c1:c1:74:2f:18:30:97:00:
                    41:b2:7a:23:70:4c:c8:14:a7:b2:cd:2c:9a:0b:ad:
                    9e:11:21:4b:6b:42:0a:ae:91:c0:f3:6e:fa:19:0b:
                    68:c3:a9:98:b4:f8:5b:98:3b:47:84:d4:da:3d:6f:
                    f4:5a:85:76:59:05:74:cb:4e:e2:f2:ef:9e:d8:4a:
                    1d:eb:2c:37:cb:df:2f:86:41:58:18:b1:7e:2c:72:
                    c6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:83:05:EA:05:00:17:64:20:08:1C:AF:D2:61:17:E8:8D:2C:96:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/1434977d-ec30-378c-a9e6-319334f0b01d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl

            X509v3 Authority Key Identifier:
                keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:2e:e5:a8:13:84:3e:a5:2c:82:13:4a:ca:c1:41:a7:ee:cb:
         0e:fc:9f:eb:76:12:47:32:19:d5:d1:72:d6:d6:63:5a:48:92:
         dc:1a:62:b3:6b:14:39:9d:d5:b6:57:b6:fc:4b:94:5a:b0:31:
         3b:a0:e6:29:b2:d6:01:af:f9:0e:13:7e:e9:40:a2:c6:87:40:
         3d:63:28:93:66:02:08:b5:ce:bd:e4:d9:42:36:ed:bb:0d:1b:
         a5:39:33:c8:e6:d1:39:fe:d5:75:91:f0:8e:0d:fe:63:2a:f1:
         f0:43:c2:2d:a5:15:ef:54:2f:8b:45:57:12:d9:da:17:75:26:
         ab:dd:f4:ed:1c:fa:29:d0:78:cf:4a:27:d4:d7:3b:4c:0f:3f:
         9a:89:15:37:df:23:43:82:0e:12:02:63:34:16:ef:45:6c:3d:
         bb:ab:84:ef:9b:23:62:fa:1a:96:fe:b7:e4:bd:31:6b:6e:99:
         06:ac:64:fe:47:84:55:f7:70:4b:0a:9f:61:b6:82:a5:c8:64:
         6d:b5:6a:03:ea:d0:19:a8:b5:52:5d:b2:d0:f6:05:ba:37:21:
         2d:0b:88:7f:e5:96:40:f2:f0:07:32:4a:0f:4d:0f:f1:8d:48:
         d4:b8:6b:5b:b2:14:62:0d:30:b5:ac:d0:63:51:9c:ad:f9:15:
         97:2d:4a:cc
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnRZQXzfRl0+UQbiIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmNlOTVjYjItMzk4Zi00NTc0LWJhZTAtNTIyYjc0ZTAz
ZjcxMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
MGMwNDUxZTItYmM0NS00Mjg2LWEyOGYtZmY4YTllNTRhOTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/UAxPpWHtxbdwIuov+3534d4T2S5vkMEQ1f
DKRuXbfIvnqEvulccXrDyZGPPB/d6n5qJkE/1XKhS//rshfi1Vd9evlpXd7tsJyz
2gY3J8mH7bRIrriYlQ0jGYJecEvnXgGnHqERUJn/bZBj/HRstlTTAox/9Lr4+d4L
SgoiWOdWCmCk6MBclGtLvCX89Spt+hlj0+IoQeJ+lzW8earZqNtd3GE+bSbJ87HL
wcF0LxgwlwBBsnojcEzIFKeyzSyaC62eESFLa0IKrpHA8276GQtow6mYtPhbmDtH
hNTaPW/0WoV2WQV0y07i8u+e2Eod6yw3y98vhkFYGLF+LHLGFwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAaDBeoFABdkIAgcr9JhF+iNLJaYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5
NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJiNzRlMDNmNzEvMTQzNDk3N2QtZWMzMC0z
NzhjLWE5ZTYtMzE5MzM0ZjBiMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmNlOTVjYjItMzk4Zi00NTc0LWJh
ZTAtNTIyYjc0ZTAzZjcxLzZjZTk1Y2IyLTM5OGYtNDU3NC1iYWUwLTUyMmI3NGUw
M2Y3MS5jcmwwHwYDVR0jBBgwFoAUzKkX+OZFOjFthwb20W42PmyEf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJi
NzRlMDNmNzEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgY4QDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBzLuWoE4Q+pSyCE0rKwUGn7ssO/J/rdhJHMhnV0XLW1mNaSJLcGmKz
axQ5ndW2V7b8S5RasDE7oOYpstYBr/kOE37pQKLGh0A9YyiTZgIItc695NlCNu27
DRulOTPI5tE5/tV1kfCODf5jKvHwQ8ItpRXvVC+LRVcS2doXdSar3fTtHPop0HjP
SifU1ztMDz+aiRU33yNDgg4SAmM0Fu9FbD27q4TvmyNi+hqW/rfkvTFrbpkGrGT+
R4RV93BLCp9htoKlyGRttWoD6tAZqLVSXbLQ9gW6NyEtC4h/5ZZA8vAHMkoPTQ/x
jUjUuGtbshRiDTC1rNBjUZyt+RWXLUrM
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:48:41 2025 by rpki-client