Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/8f5ea83f-dd82-349a-b701-754f1bf41217.roa
File:                     8f5ea83f-dd82-349a-b701-754f1bf41217.roa (raw, json)
Hash identifier:          sjhNm9XD3aYxKsi5eT186//D3XbvchT93hO5JTaDmF8=
Subject key identifier:   99:E2:D6:8F:25:C4:39:2E:3C:84:A7:89:F5:F0:C0:04:E5:74:54:0D
Certificate issuer:       /CN=6ad8d02c-4049-4deb-a840-4229a7010c02
Certificate serial:       010D0C9F4328584A3A158F795E647CDE3DB001F0
Authority key identifier: 74:FA:33:B5:F8:35:EA:5B:08:76:10:04:99:61:B8:67:68:6D:51:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/8f5ea83f-dd82-349a-b701-754f1bf41217.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     395544
IP address blocks:        2602:fb14::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/6ad8d02c-4049-4deb-a840-4229a7010c02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/6ad8d02c-4049-4deb-a840-4229a7010c02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:8f:79:5e:64:7c:de:3d:b0:01:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad8d02c-4049-4deb-a840-4229a7010c02
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=bd0fcad3-0198-40ed-b6b9-269609c83bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:34:34:19:be:3a:9b:83:0e:e9:d9:9b:b2:20:
                    32:cd:67:50:82:4c:18:e4:46:1d:37:ad:73:dc:c7:
                    c6:f7:07:1d:2c:4f:3f:4c:0b:c6:dc:d4:1c:87:13:
                    e6:cb:a1:cc:da:95:1a:91:40:92:2c:86:2f:45:d5:
                    96:ed:96:f4:30:6c:c0:5b:3e:78:88:82:2c:10:e1:
                    69:26:83:81:18:59:fd:b8:cb:35:fd:ae:e8:89:24:
                    1d:17:de:0b:e3:46:82:fb:4b:84:1a:c3:28:15:91:
                    5d:80:ec:58:3d:e7:f5:bd:c2:ae:a6:6a:f7:93:fc:
                    27:fd:72:62:94:4a:b6:09:2b:0d:59:4c:11:6c:27:
                    a0:b5:e4:ee:46:dc:9b:d6:1f:10:ef:9c:67:d9:e9:
                    db:db:da:e4:0d:9e:09:b8:79:61:e2:df:c5:d2:8e:
                    76:b3:bf:d5:0c:b3:3a:8f:13:90:fd:a0:28:3b:bc:
                    60:37:5c:e5:04:ca:25:31:5d:0d:71:5d:60:f3:0c:
                    a7:e5:59:80:79:30:d6:68:97:04:bc:4f:b9:5a:15:
                    2c:6e:f7:05:95:6c:e6:36:f3:3d:82:4e:3e:5a:51:
                    14:25:de:67:59:39:c4:30:92:1c:d6:96:96:6b:d0:
                    76:bf:ec:20:e0:b7:45:22:cd:4b:f1:62:5a:21:a5:
                    73:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E2:D6:8F:25:C4:39:2E:3C:84:A7:89:F5:F0:C0:04:E5:74:54:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/8f5ea83f-dd82-349a-b701-754f1bf41217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/6ad8d02c-4049-4deb-a840-4229a7010c02.crl

            X509v3 Authority Key Identifier:
                keyid:74:FA:33:B5:F8:35:EA:5B:08:76:10:04:99:61:B8:67:68:6D:51:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb14::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:69:10:45:c3:95:37:07:b5:73:f9:33:55:a0:a0:ad:e6:2d:
         6f:3b:0b:8c:32:f1:83:6e:83:5b:8d:38:3d:89:f5:40:3b:2b:
         87:e0:49:8f:ee:9e:8e:9e:f9:e6:0b:df:9e:42:d7:a8:e4:1e:
         ff:f4:2c:cc:c8:18:e4:5f:d9:b2:c2:8d:90:14:e1:7a:03:5a:
         3d:d5:41:9e:25:85:f5:32:ad:5c:be:11:f4:d9:e2:fa:c4:9a:
         c3:d3:2c:7d:99:21:bc:c2:f9:30:ae:d3:5c:b5:51:f7:93:53:
         3a:a0:6e:09:71:f7:18:bd:e9:f2:5c:79:ef:47:3c:0a:79:6a:
         9a:7b:ab:1f:d5:4c:46:37:d7:7e:2e:fa:c8:aa:da:40:f7:c3:
         d1:f8:f1:2e:3e:5a:90:d9:47:bf:65:f5:c5:a5:6e:a0:fb:d1:
         0d:9d:d6:28:a8:dc:17:ef:57:a6:f3:49:c3:5e:fb:b7:26:2a:
         62:05:3a:e6:4d:59:06:aa:1c:1b:b2:07:dc:27:83:34:8c:37:
         6d:84:e0:4a:ae:0e:59:3e:58:29:37:0b:e1:58:c0:b4:b6:59:
         b6:c6:3c:6a:fe:3a:eb:fc:c8:6c:be:0d:3d:4f:db:71:2f:1a:
         5c:61:16:4f:6e:68:f9:f7:db:d8:fa:1e:fe:87:5d:39:58:c3:
         32:ce:20:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:47:30 2025 by rpki-client