Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342/776fad29-e760-3f5a-a4d0-e0d8af27098f.roa
File:                     776fad29-e760-3f5a-a4d0-e0d8af27098f.roa (raw, json)
Hash identifier:          R+J+J5zSL5kkkI0LxWk4thqpH1QvGg33StKH6WvXMAE=
Subject key identifier:   D4:F3:72:F4:7B:48:41:A8:F3:43:49:32:54:30:A4:9A:B2:B4:C3:0B
Certificate issuer:       /CN=3e9ca003-d1bd-4848-a9c8-2b65aeba6342
Certificate serial:       010D0C9F4328584A2ABAD85DF632B6BE11DE5D00
Authority key identifier: 86:71:B7:E8:8F:DC:7C:88:5B:AD:20:88:49:E1:FF:04:19:E5:7B:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342/776fad29-e760-3f5a-a4d0-e0d8af27098f.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     394715
IP address blocks:        2602:80f:f000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342/3e9ca003-d1bd-4848-a9c8-2b65aeba6342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342/3e9ca003-d1bd-4848-a9c8-2b65aeba6342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:d8:5d:f6:32:b6:be:11:de:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e9ca003-d1bd-4848-a9c8-2b65aeba6342
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=c3a28d71-e530-491c-9c1c-af9c8aef8efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:f3:eb:d2:3e:14:e2:4c:c4:df:c5:af:cc:
                    97:95:37:ff:84:b8:f1:c8:03:99:f9:56:5f:a3:67:
                    25:25:42:e4:a1:a0:18:ea:0a:9e:8a:69:0c:1b:ac:
                    ed:6a:9f:f2:3a:98:68:43:5d:d8:be:19:b7:d7:35:
                    40:54:17:52:b2:39:eb:63:ac:e0:f6:cb:d2:fd:20:
                    9a:84:54:13:67:43:c0:e8:ec:a0:c0:dd:f3:79:7d:
                    c9:cc:33:84:af:f9:74:a4:89:63:24:a7:19:4f:eb:
                    cf:53:a1:af:d5:d5:10:11:e4:ee:07:72:40:76:53:
                    ea:94:6b:96:a6:b2:0e:ef:47:e0:a9:be:a9:39:eb:
                    e7:ef:0b:cb:20:3f:52:89:ff:b6:14:80:d6:fd:3d:
                    d6:95:dd:28:68:c9:1b:fb:dd:0d:0b:a6:b8:a8:ba:
                    22:ee:d8:34:bc:5c:40:97:69:c1:ab:61:da:39:62:
                    48:17:8b:d2:c8:af:15:89:d1:f4:e0:28:46:f3:e5:
                    c6:86:86:fb:c6:3b:ca:de:9d:e8:6f:d0:55:33:d9:
                    24:4f:ef:dc:cc:88:fb:f9:fb:29:d9:bd:06:22:35:
                    f2:af:e3:62:28:f6:da:e2:5b:b7:01:48:c2:5e:fd:
                    be:3a:94:ee:e4:c5:ff:6f:18:bb:5d:2c:81:fb:b3:
                    ea:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F3:72:F4:7B:48:41:A8:F3:43:49:32:54:30:A4:9A:B2:B4:C3:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342/776fad29-e760-3f5a-a4d0-e0d8af27098f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342/3e9ca003-d1bd-4848-a9c8-2b65aeba6342.crl

            X509v3 Authority Key Identifier:
                keyid:86:71:B7:E8:8F:DC:7C:88:5B:AD:20:88:49:E1:FF:04:19:E5:7B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80f:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:d6:8a:88:37:c2:76:a0:fb:cb:ce:96:42:ee:4e:f4:06:66:
         4d:d3:b4:90:54:1c:9c:f2:68:8f:6f:85:c2:56:2c:84:e0:15:
         ee:2a:19:ba:14:82:4f:a5:92:00:bd:67:b7:47:95:51:df:d5:
         31:f9:0d:e2:07:bd:1f:27:2f:a9:9b:89:c5:f6:0c:1a:f2:b0:
         7c:97:78:b5:28:14:f9:76:f1:ae:3a:42:80:ab:26:d2:ae:5b:
         a9:46:be:30:b9:5b:62:8a:eb:f9:ff:0c:ab:76:6c:71:c6:4b:
         fa:c7:79:cb:86:b5:36:3e:77:af:39:7b:45:68:b6:a1:74:2e:
         6a:66:95:f1:13:38:a3:6b:2a:a3:e8:82:2c:82:8f:a9:35:a8:
         f5:5d:2c:40:c3:ba:6d:b9:28:f3:30:38:6f:2a:20:da:6c:10:
         a6:cd:c4:02:e0:7d:17:4e:69:31:1c:f6:ae:4d:4f:9b:c5:08:
         46:cb:13:d1:47:74:a7:5b:bb:ac:4f:1b:18:c3:93:f4:20:55:
         6a:78:d9:05:ea:b0:93:f7:ae:29:3d:ff:bd:54:9a:05:3f:e2:
         b0:a3:b7:47:f6:45:f7:c3:d2:c7:cd:cd:fa:64:2c:fe:0c:fe:
         36:19:37:e6:51:ae:e3:75:eb:46:01:51:cb:f0:76:86:cd:76:
         01:2d:0f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:44:19 2025 by rpki-client