Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a26f50ea-202e-3aa7-90a0-bff3f88c6135.roa
File:                     a26f50ea-202e-3aa7-90a0-bff3f88c6135.roa (raw, json)
Hash identifier:          S4Z3aSA7spEN7/BqNbvX1t2cr+sHwJm38VhM+WYCGHk=
Subject key identifier:   92:3D:2F:6D:5F:C8:47:FB:56:BD:D8:D1:85:33:E0:9A:46:64:A1:08
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849D85F9D080591834E02EA8E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a26f50ea-202e-3aa7-90a0-bff3f88c6135.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     63949
IP address blocks:        2600:3c12:900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:9d:08:05:91:83:4e:02:ea:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=af911a6e-2e5d-4dbd-93ee-8e20d0eff59a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:61:38:a0:55:3a:72:12:cc:ef:53:01:58:76:
                    e3:df:9f:82:84:dd:9d:d1:3e:42:ed:c1:c6:62:8a:
                    51:b9:7e:06:9e:cb:e3:bc:28:82:1e:12:e8:36:10:
                    39:66:7e:d0:e6:a8:e0:92:4b:e6:89:b5:ea:52:17:
                    a3:30:59:5a:20:34:69:99:70:02:4b:1f:3f:f7:de:
                    f2:34:64:c3:ec:24:b5:90:ad:90:35:21:f6:f1:ad:
                    6c:26:36:51:24:06:3b:7a:ec:61:7e:1f:af:29:1f:
                    2a:bf:f2:b9:c3:df:34:ce:46:27:13:e1:fc:06:95:
                    61:09:56:54:8e:1b:79:55:5e:c5:8b:b1:bd:7c:51:
                    5b:4a:ac:ee:5d:8f:ca:25:ae:88:c9:0d:af:8d:35:
                    22:1e:aa:b6:0d:06:b0:9e:ec:d1:a0:96:cd:b4:25:
                    07:77:c5:12:3b:27:ae:90:50:11:7c:39:3f:50:fe:
                    68:6f:0d:ba:c9:fd:e1:71:4a:54:6e:87:b9:28:f3:
                    9f:48:22:af:11:af:f8:ec:c2:11:89:cd:9d:2e:a4:
                    01:26:99:a1:7b:90:dd:26:d4:4f:7d:3f:47:b9:5c:
                    76:b3:e4:25:6f:d1:70:8f:57:ba:21:c6:a1:1a:0b:
                    b9:66:17:e6:50:a7:76:a1:d7:03:72:2a:af:04:1b:
                    7c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3D:2F:6D:5F:C8:47:FB:56:BD:D8:D1:85:33:E0:9A:46:64:A1:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a26f50ea-202e-3aa7-90a0-bff3f88c6135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3c12:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:80:f5:f9:43:47:4f:83:5d:45:0f:ca:04:69:38:41:62:16:
         2e:3b:44:12:fe:01:c8:d8:82:c1:4b:ce:4b:9c:4c:f3:79:05:
         ab:52:94:7a:9d:31:4a:1d:6b:46:f4:b3:59:63:e5:45:5e:aa:
         9b:fa:16:a9:33:b6:84:40:25:60:a9:fb:cc:c7:86:3d:0f:76:
         07:3b:79:62:77:f3:22:bc:8f:58:2e:0d:53:6d:a9:ff:04:96:
         5a:62:bc:4a:24:4b:01:35:2f:e3:a0:2b:8e:6a:9d:ed:3d:14:
         8e:f2:ad:df:8b:3d:de:43:34:c0:e7:41:7b:5c:41:69:81:01:
         a4:aa:c8:6f:c4:86:5c:75:a0:8f:c7:4a:f8:a4:56:78:12:8a:
         42:a2:d1:0b:3f:44:34:63:fa:30:be:52:74:67:4a:ac:a2:22:
         73:d5:07:28:d1:7c:bb:5c:c6:f7:f4:29:7a:5c:bf:45:ea:24:
         c7:2d:1a:a2:8c:14:c7:4c:33:d5:67:6e:48:64:f4:96:49:ec:
         1f:94:0a:30:06:02:fa:11:58:39:9b:81:fb:91:75:e2:93:87:
         46:50:24:89:03:fd:d7:c7:57:97:a4:32:2b:39:00:89:e0:19:
         e9:7c:33:f0:94:41:f8:68:65:f6:bd:62:54:19:a4:b7:72:9a:
         ec:c0:4f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:24 2025 by rpki-client