Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/06305f03-7eaa-39c7-9b71-ef3c00abbd6a.roa
File:                     06305f03-7eaa-39c7-9b71-ef3c00abbd6a.roa (raw, json)
Hash identifier:          /9oc622z2nGMNG+uXgo8qKYjpCTuFWHBpVfjnfXLiZY=
Subject key identifier:   5C:1E:37:6E:23:18:9E:3B:A6:8C:18:B5:25:B6:5A:18:49:CB:D3:02
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F43285849F2E529D002F9EC56E91D7C00
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/06305f03-7eaa-39c7-9b71-ef3c00abbd6a.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     55195
IP address blocks:        2620:10a:80ad::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:29:d0:02:f9:ec:56:e9:1d:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=56e9bc88-7a66-4978-abc1-cfea0faf7295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:70:82:8c:46:12:c4:2e:00:3d:61:55:aa:f9:
                    8e:78:39:d8:fc:ae:2d:1a:5e:aa:e2:c1:1c:cd:4b:
                    e8:41:b2:be:a0:f7:b4:37:31:40:bf:57:b3:0c:01:
                    9b:fa:34:2e:bb:4d:27:23:f8:a8:f7:f2:94:e9:71:
                    7b:ad:47:9b:95:a2:78:18:b7:74:62:f6:ed:c6:2f:
                    9b:ac:bb:17:6a:b3:5f:80:bd:ad:d4:8a:a8:38:31:
                    70:1f:9e:ea:17:d7:ab:6d:99:72:c6:69:7c:39:26:
                    47:2c:52:12:47:d2:1f:6d:2e:d4:8a:79:9b:81:2b:
                    a1:76:4d:99:2b:73:c2:b8:5f:a2:53:80:0f:99:d6:
                    e2:be:79:5e:2a:e2:08:89:20:b6:93:d6:32:f8:26:
                    74:b7:b0:9f:55:21:11:67:8c:a7:55:49:d8:ae:4c:
                    b9:07:69:4f:12:77:9c:d9:ed:81:96:b4:6d:87:65:
                    03:37:75:1d:9f:4d:4a:cd:19:fb:cd:05:ca:0c:eb:
                    67:84:ed:3d:d5:eb:fe:d4:95:48:3e:6b:93:49:cf:
                    39:6a:e4:57:95:5d:90:50:8c:83:fd:58:93:5c:44:
                    45:19:45:b5:35:01:f8:e7:1b:16:cd:5c:2a:a1:62:
                    49:5b:55:22:b5:69:c4:52:f2:24:dc:2c:50:0e:69:
                    74:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1E:37:6E:23:18:9E:3B:A6:8C:18:B5:25:B6:5A:18:49:CB:D3:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/06305f03-7eaa-39c7-9b71-ef3c00abbd6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:80ad::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:a4:3e:ee:39:c8:2b:c5:2b:11:5c:2f:94:b8:0d:a5:93:41:
         d2:4f:0a:e5:56:87:67:97:6a:ae:a1:cb:f2:82:1e:d3:69:08:
         01:8c:3b:bb:6d:74:a6:5d:81:2d:ce:a1:52:7a:12:0b:32:4d:
         2e:41:bc:43:4f:f2:d3:ea:49:87:98:86:e1:29:77:47:42:2b:
         2c:e5:37:7d:2b:c7:49:4c:45:f9:bb:00:0d:ac:98:3f:81:a2:
         fe:c4:be:ee:ae:e3:74:7b:6c:0a:ec:38:dd:ff:73:af:a4:5b:
         ff:eb:19:a6:9f:7b:d3:20:b8:f2:d8:19:bb:be:ef:2b:0d:cf:
         70:21:67:63:27:e0:08:ac:68:08:fe:9f:76:3a:7e:d5:e9:16:
         1f:ea:ae:df:eb:1c:f4:ec:6e:9f:00:4c:69:b1:1a:20:de:78:
         5b:bc:55:47:6c:59:d5:bd:f9:69:fb:f4:6a:ff:00:66:e3:00:
         e0:3b:54:cb:17:09:08:b0:38:05:8e:4b:3d:fb:d2:09:72:43:
         04:0b:11:a9:6d:fe:4e:33:ba:bd:d7:7d:95:9e:6f:4e:15:8e:
         91:d9:26:7e:03:fb:6d:1e:a7:b5:df:7b:5f:6a:b1:df:9e:2d:
         44:55:fa:99:35:c3:c2:36:94:d5:09:83:13:42:51:db:df:22:
         7d:54:e2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:37:09 2025 by rpki-client