Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78/bf5e6c0c-9b3c-3c62-989c-6f4fc5e4f81e.roa
File:                     bf5e6c0c-9b3c-3c62-989c-6f4fc5e4f81e.roa (raw, json)
Hash identifier:          vSebIROJLjTz6Qkc8worj2S7DIPCQOLj+asfnNQSE44=
Subject key identifier:   98:68:AB:9B:C5:23:5F:BC:5A:F7:04:72:CA:17:CB:FE:B8:60:6D:66
Certificate issuer:       /CN=d88eebee-785b-4505-a5a1-35be5246bc78
Certificate serial:       010D0C9F4328584A4C3B16CF7C2043D36A8629E0
Authority key identifier: 60:AA:B9:F9:CD:38:6B:0F:00:5F:5F:DB:57:B1:A7:2E:1B:8D:12:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78/bf5e6c0c-9b3c-3c62-989c-6f4fc5e4f81e.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     35848
IP address blocks:        2602:fab7:f0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78/d88eebee-785b-4505-a5a1-35be5246bc78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78/d88eebee-785b-4505-a5a1-35be5246bc78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:16:cf:7c:20:43:d3:6a:86:29:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d88eebee-785b-4505-a5a1-35be5246bc78
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=c7d7c85a-33c3-4bb1-9b68-a169d5dca1d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:d1:83:1a:6d:d9:d2:0d:bc:68:61:74:a0:
                    02:96:a4:3d:99:5c:07:ea:2e:db:9f:35:f6:14:c9:
                    00:93:d8:08:0d:17:ca:db:82:c2:11:68:6a:7d:64:
                    40:8e:b4:e0:b6:23:28:67:2d:f1:ee:d5:5d:e0:92:
                    9c:e9:8a:9c:82:cd:d2:84:30:a5:98:cd:79:96:9f:
                    17:b5:5f:92:13:f9:28:f0:ec:4e:82:bd:2f:5c:f2:
                    df:ad:24:19:21:c7:d4:ac:68:cf:8b:1a:04:63:39:
                    ae:50:e2:9a:ca:4a:8b:ad:44:d3:69:b2:49:e1:da:
                    d8:7c:e0:a2:3a:ed:f6:c2:87:80:a2:16:e4:03:12:
                    4c:8f:49:3c:36:39:c0:98:7e:70:17:92:9f:57:ab:
                    e4:98:e5:cd:0a:ea:68:5d:c5:95:c1:83:b7:b4:12:
                    7a:4c:b8:39:80:12:6b:6d:ff:53:cb:92:4a:19:e5:
                    42:37:6e:22:df:22:fc:bc:2b:8d:b8:46:95:40:58:
                    90:e2:d2:27:51:00:88:ca:e6:5f:50:28:65:be:35:
                    7e:b1:77:ff:14:69:80:86:2a:60:7c:57:58:39:5c:
                    55:95:f1:b9:15:e3:ee:1c:5f:79:e8:00:cb:99:0b:
                    3e:ff:29:1a:bf:38:30:98:56:75:9b:c5:52:67:fe:
                    26:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:68:AB:9B:C5:23:5F:BC:5A:F7:04:72:CA:17:CB:FE:B8:60:6D:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78/bf5e6c0c-9b3c-3c62-989c-6f4fc5e4f81e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78/d88eebee-785b-4505-a5a1-35be5246bc78.crl

            X509v3 Authority Key Identifier:
                keyid:60:AA:B9:F9:CD:38:6B:0F:00:5F:5F:DB:57:B1:A7:2E:1B:8D:12:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d88eebee-785b-4505-a5a1-35be5246bc78.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fab7:f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e8:21:d5:15:2b:e3:27:23:02:7b:69:75:52:7b:b5:1c:62:
         60:22:39:37:73:0a:2c:44:c9:ee:e3:10:13:90:cd:b8:9d:e4:
         79:74:f0:4b:95:fa:d8:d6:0c:5f:68:fd:ae:99:26:a7:5d:a2:
         64:2e:6e:46:ee:75:83:42:37:05:10:ad:10:01:3d:9a:0b:c0:
         b4:5a:d0:62:21:8d:7d:41:e0:79:f6:2d:d0:11:48:b6:3c:a9:
         cd:d3:db:e9:a5:7e:c9:9a:4c:6d:3d:89:60:bd:b8:6a:d3:bb:
         ec:fb:28:e5:d8:24:33:39:4f:5d:17:4e:b9:80:78:6c:ca:aa:
         17:90:d9:ae:4d:d8:a1:58:03:8c:9b:e1:a0:ab:57:74:82:52:
         75:b9:a4:01:e9:f7:3f:f6:66:56:d4:8f:8e:bd:bd:51:ad:fe:
         ce:f4:4a:57:7d:ab:ae:09:cf:17:3c:d5:84:46:af:b8:0d:e1:
         46:b1:cf:b8:54:d5:65:24:aa:f4:f5:b7:1c:bd:fb:a7:41:95:
         ab:85:db:49:7f:4d:35:63:db:52:3c:02:83:66:22:09:76:08:
         03:af:31:c7:e2:b5:c8:f2:dd:40:51:ba:09:1f:1b:60:85:1c:
         e8:41:4a:bb:3a:28:1a:09:5d:27:05:94:f4:30:71:30:f6:5e:
         98:4e:9b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:13:09 2025 by rpki-client