Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38114677-479d-36c5-a493-a12ba20eaab6.roa
File:                     38114677-479d-36c5-a493-a12ba20eaab6.roa (raw, json)
Hash identifier:          2jmywBFUBoTDzlAdupeGg+vIm0AzyW7qz3W0kGvJoqg=
Subject key identifier:   69:4B:68:84:52:7A:B6:D8:09:54:62:DE:10:D8:69:5E:9A:69:3F:7D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849DF5A609651C62B02A3EC4180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38114677-479d-36c5-a493-a12ba20eaab6.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     35994
IP address blocks:        2600:1409:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:60:96:51:c6:2b:02:a3:ec:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=9dbffb17-5c56-45ea-95fb-c8c6b3cffee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c7:4d:dd:d5:29:f3:4a:2a:6b:87:b4:fe:75:
                    9a:45:1d:35:d7:04:78:0a:69:3c:fa:a9:e0:4e:bb:
                    57:10:05:f0:44:de:de:96:da:47:39:d6:9b:96:47:
                    b1:24:7d:0a:22:35:5a:cf:45:8c:ce:5b:95:f4:d9:
                    87:b0:db:b6:14:b6:fa:83:8d:e5:d3:7e:d9:21:e8:
                    e6:f4:f9:60:66:af:94:01:2a:f2:2b:b7:b5:76:72:
                    9c:76:c0:d5:b0:1c:a7:c7:59:3a:d7:6e:cc:14:7d:
                    34:f3:71:ee:9e:eb:fa:bf:5d:43:24:e2:83:dd:3f:
                    e7:ee:4a:6e:63:1e:7f:a6:a7:d8:95:fb:31:52:7e:
                    43:d0:93:4d:2d:48:4c:a1:34:cf:79:c5:d4:7e:32:
                    ba:d5:fa:73:53:e3:dc:0d:ec:60:27:24:4d:85:29:
                    33:62:a1:2e:a5:2a:b7:ff:28:e3:34:78:a6:07:c2:
                    73:51:5f:47:85:de:34:9f:81:26:51:91:5c:6c:94:
                    ea:64:f9:97:37:90:45:16:32:82:95:5f:a4:3c:98:
                    20:a3:2a:f4:68:f2:b0:bd:90:64:70:b2:89:90:8d:
                    2c:18:37:b8:23:1c:b5:03:96:8b:42:2d:0d:4d:d3:
                    72:3a:81:0a:77:4c:aa:85:6b:59:80:c5:29:98:74:
                    3a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4B:68:84:52:7A:B6:D8:09:54:62:DE:10:D8:69:5E:9A:69:3F:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38114677-479d-36c5-a493-a12ba20eaab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1409:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:5d:14:58:3e:c9:b2:1d:6a:bf:0c:e5:2a:94:1f:f7:7d:b3:
         a5:c3:f1:8b:0a:27:43:b3:f1:65:c1:cd:a2:c2:13:b0:25:87:
         30:65:9b:36:1b:ae:e5:43:98:a7:0f:cf:17:9f:15:6f:58:eb:
         bc:ca:7a:a9:42:92:29:11:68:84:60:f9:fd:e5:85:35:2d:a3:
         63:6b:d9:0d:61:9a:c1:ed:4d:f9:bd:76:1f:50:ab:0a:f6:8d:
         25:ef:9b:17:fc:45:0e:7a:20:73:13:d4:1c:90:de:e7:c7:e2:
         0c:1a:dd:79:b5:16:b2:2e:b2:19:b9:e7:b7:d0:8d:f5:b3:c6:
         00:63:97:00:8f:ba:e2:34:4d:ae:d6:56:d4:2a:95:54:66:09:
         44:55:58:e6:a1:4e:9e:65:d7:f5:68:f2:25:ac:66:26:0e:b6:
         66:5e:29:e7:29:7c:b8:20:7a:42:ce:75:44:60:ab:05:9f:24:
         77:9a:2b:70:3c:b2:6c:ea:40:b0:50:2a:38:03:6a:fb:6a:07:
         70:6d:90:b0:84:6a:ed:5f:6d:dc:c1:26:36:5b:53:81:20:45:
         3a:c5:8d:7f:3a:49:6c:92:23:04:77:1e:4c:00:29:75:49:29:
         8e:c8:af:de:8d:92:09:69:d3:7c:b5:eb:23:48:ee:67:e3:78:
         fd:00:bf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:47 2025 by rpki-client