Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/84c608c5-ec08-3ffa-a8b6-111b04e19418.roa
File:                     84c608c5-ec08-3ffa-a8b6-111b04e19418.roa (raw, json)
Hash identifier:          V9tg4oys453xxa2wtrH0R4CDntEUBQgydVv0VFboVr0=
Subject key identifier:   90:D1:05:AF:59:2A:EE:86:44:1A:EF:5C:2B:E5:B7:BA:2F:6A:DC:EE
Certificate issuer:       /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
Certificate serial:       010D0C9F43285849D6FA4D26BFC559EAD6924640
Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/84c608c5-ec08-3ffa-a8b6-111b04e19418.roa
Signing time:             Tue 13 May 2025 13:01:02 +0000
ROA not before:           Tue 13 May 2025 13:01:02 +0000
ROA not after:            Mon 11 Aug 2025 13:01:02 +0000
asID:                     198949
IP address blocks:        2605:9a00::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d6:fa:4d:26:bf:c5:59:ea:d6:92:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
        Validity
            Not Before: May 13 13:01:02 2025 GMT
            Not After : Aug 11 13:01:02 2025 GMT
        Subject: CN=fb6e5698-fc1b-403c-8475-311479ab4320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5e:50:60:4b:3c:7c:99:4e:58:1a:27:b2:ed:
                    94:1f:67:25:bf:90:0a:8f:b3:42:23:81:65:f8:b7:
                    e9:d4:f0:26:9c:ca:53:c5:a2:c0:63:f5:14:e8:71:
                    d3:9b:6d:3d:1e:16:21:bc:15:12:82:10:8b:b1:69:
                    33:de:81:6c:44:c5:8e:95:f3:f6:3a:10:0f:c0:e6:
                    f8:ec:87:bf:12:04:a8:c4:27:0e:a1:69:38:d4:fb:
                    b6:de:51:5d:c2:3f:18:e3:ca:84:54:d0:47:16:02:
                    ba:b4:6a:fb:18:34:84:5a:18:95:7e:c3:6e:da:b3:
                    ec:f2:53:43:bc:da:16:87:0c:cc:ce:f7:cf:e7:06:
                    3b:0d:f6:51:ed:68:45:6d:bc:b7:60:5d:28:61:d6:
                    0d:7f:52:8a:c2:73:5f:48:c2:2a:8b:81:60:40:41:
                    83:09:e6:0c:4c:3d:a8:9c:53:2e:0a:d0:9a:b9:57:
                    e5:5d:74:6c:c6:3f:53:b3:bc:5d:39:87:42:cd:f4:
                    5e:22:d2:bb:77:74:0e:ab:cc:6b:dc:53:5f:c9:15:
                    57:d8:50:91:21:c5:a6:c0:9d:4e:89:03:d4:4b:52:
                    48:d0:8f:bc:c7:e2:59:bd:64:4a:ac:90:f8:68:e7:
                    53:b2:e7:a2:42:19:7a:41:f5:66:2d:0d:b4:b4:2b:
                    60:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D1:05:AF:59:2A:EE:86:44:1A:EF:5C:2B:E5:B7:BA:2F:6A:DC:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/84c608c5-ec08-3ffa-a8b6-111b04e19418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9a00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:72:9e:a0:4b:8d:71:f3:66:08:0e:d3:1e:0c:0b:ed:0d:4d:
         f4:18:e0:1c:da:55:ee:63:ac:d0:a6:16:07:50:e8:71:c6:0c:
         8c:c8:cc:a0:41:d4:c8:35:18:3d:27:a5:b6:a0:70:fb:e8:d4:
         fe:f4:bb:b1:80:6e:8e:3b:91:f4:08:cf:bd:66:b8:54:1c:e2:
         92:55:86:93:13:bf:98:1d:d3:5d:ad:db:37:d4:01:19:c8:ec:
         a1:31:05:4b:91:2b:a6:43:a2:53:61:ff:b1:fc:bf:ae:eb:96:
         a8:5b:bc:ba:0f:62:81:1b:68:c0:bc:38:4c:f9:99:ec:d2:32:
         c4:81:03:29:7c:dd:d6:c9:40:66:57:5c:e3:c8:22:4a:00:1d:
         a9:ee:ed:89:0a:44:b0:48:3a:a2:91:b1:13:2d:08:0c:9b:40:
         ed:cf:7a:33:31:8c:66:de:c5:d1:6f:53:2d:74:3d:b9:d2:55:
         f7:36:81:f1:92:22:55:27:8b:95:35:28:0f:8e:01:4c:14:21:
         e6:c7:48:48:47:3d:73:c2:c3:70:c4:1d:ee:f0:a2:5e:53:97:
         1c:f3:27:a7:ba:9f:12:ea:dd:3d:7b:c6:bb:5f:08:ac:60:82:
         6f:9e:55:f4:25:a4:ce:e1:49:26:21:c5:4a:77:67:c4:0e:0b:
         56:bb:11:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:34:28 2025 by rpki-client