Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/64fe46c0-aa6a-30bf-9063-208fb215de39.roa
File:                     64fe46c0-aa6a-30bf-9063-208fb215de39.roa (raw, json)
Hash identifier:          AfuKKYxESthdNj9i0NNoXuqjWFhQao84eIOjtHE8yrk=
Subject key identifier:   03:32:E5:FE:CE:CE:DA:F4:00:86:18:93:12:AF:3A:EE:E3:70:D3:E3
Certificate issuer:       /CN=22a89d78-807f-48bb-8913-4e15f4878bfb
Certificate serial:       010D0C9F432858492CAE7DFE6FE5D91586BD6300
Authority key identifier: 41:26:61:4E:B6:7D:B9:81:05:C1:90:B7:DD:5F:F9:0D:32:E4:20:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/64fe46c0-aa6a-30bf-9063-208fb215de39.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     13786
IP address blocks:        2605:4a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:7d:fe:6f:e5:d9:15:86:bd:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a89d78-807f-48bb-8913-4e15f4878bfb
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=54e73b83-7f57-47a1-b585-395b4cee02cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:40:7a:1e:1d:b1:42:8c:c7:bf:6a:27:30:76:
                    96:66:e1:55:38:9b:f4:c6:72:68:f1:09:bd:01:95:
                    9a:0a:ce:1c:56:f9:de:36:3e:91:26:8f:7d:7a:3a:
                    d3:fc:8a:2c:99:07:5e:87:3a:1c:1b:82:38:99:bf:
                    23:39:1f:1e:79:03:b8:b6:c6:79:64:a1:75:1b:cd:
                    f9:7d:8a:47:9d:c3:44:b6:e2:e9:58:46:32:3b:ac:
                    f7:e3:2d:24:a9:a3:59:f9:8f:a7:50:1d:74:db:49:
                    44:54:61:27:1d:ad:44:4f:e5:04:30:07:cc:99:c7:
                    75:d7:32:7e:e7:e4:81:66:3b:94:02:ea:ef:26:6a:
                    38:08:9e:75:d7:a9:93:cc:dd:4b:c6:a8:aa:b9:51:
                    74:92:81:ee:79:61:cd:d7:e1:5b:58:d2:0b:04:94:
                    98:fa:bf:49:5e:42:69:b8:e9:bd:97:2a:e2:b0:b5:
                    93:39:a1:b8:4e:54:a2:a4:f8:ff:6c:28:6e:c3:ee:
                    85:a2:9d:6f:ff:5d:c8:ce:43:23:e9:12:20:f3:b7:
                    9e:60:38:68:a8:8b:17:1d:bb:a8:05:8a:7b:19:ba:
                    91:f3:29:90:67:d4:7e:5f:10:7f:07:37:22:a3:f5:
                    18:38:4f:dd:76:66:a1:da:16:0e:49:fa:ac:de:e9:
                    e2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:32:E5:FE:CE:CE:DA:F4:00:86:18:93:12:AF:3A:EE:E3:70:D3:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/64fe46c0-aa6a-30bf-9063-208fb215de39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.crl

            X509v3 Authority Key Identifier:
                keyid:41:26:61:4E:B6:7D:B9:81:05:C1:90:B7:DD:5F:F9:0D:32:E4:20:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:85:90:74:95:6d:ab:ae:a6:f2:d4:83:f6:70:88:6c:21:92:
         e8:aa:dd:d1:97:e1:40:97:36:1d:a3:f3:b6:a0:5a:cf:60:e3:
         36:54:b6:a7:54:c0:48:10:f2:1d:5e:d6:b4:bd:5a:0d:5b:d4:
         1c:f8:e2:bf:a8:5d:dd:5b:9f:96:0b:ba:98:1c:a6:23:7f:23:
         71:21:ec:1a:e7:e3:87:2e:26:61:b4:2c:a7:4d:72:8c:3a:3e:
         f8:21:83:e8:ef:02:de:0e:05:16:e8:82:bd:2e:bc:14:7f:b7:
         a0:48:57:f6:dc:89:d4:50:0d:14:92:d4:86:74:03:3c:02:85:
         a2:b7:68:fa:a4:e2:36:ef:c2:9e:fa:41:78:35:fc:fc:99:27:
         ce:15:e9:f8:00:24:cb:63:ec:b9:2c:de:43:a4:ff:a3:6f:70:
         b2:21:87:26:8d:21:ec:f3:10:2e:53:59:37:2a:57:22:66:fe:
         bd:40:73:f5:51:25:6a:2c:ee:89:7c:e7:77:78:55:78:31:d8:
         4e:2c:8d:75:49:cd:80:4c:e6:8b:93:89:d5:e2:0c:a3:4c:b0:
         69:c9:40:1a:b3:c2:7a:50:b6:41:96:54:8a:b5:fb:f5:97:1a:
         4f:b6:5d:6f:0a:82:04:a8:e1:0b:7a:45:b7:65:a1:a3:54:35:
         8b:c0:c9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:30:18 2025 by rpki-client