Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/a2fab9d1-ce1a-3705-8dad-fefbad69d555.roa
File:                     a2fab9d1-ce1a-3705-8dad-fefbad69d555.roa (raw, json)
Hash identifier:          KSbSw/ECK/Yk/r2E4j+P2k/cDH9/gIs18EPFPAgn5YM=
Subject key identifier:   BD:F0:39:69:C9:BD:76:31:04:B7:04:C9:78:F5:54:17:0A:7D:CC:3B
Certificate issuer:       /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial:       010D0C9F4328584A3FAADD52DEB224042C273B00
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/a2fab9d1-ce1a-3705-8dad-fefbad69d555.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     30058
IP address blocks:        2602:fb1b:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:dd:52:de:b2:24:04:2c:27:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=f5114906-b191-4cea-8f2e-35923ecca5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0a:50:4b:0e:19:3c:7e:65:3a:6d:0c:e1:b4:
                    6d:ec:f8:f5:3b:fb:00:b8:7f:4b:09:d7:49:82:0d:
                    72:fa:fc:f9:48:03:00:75:47:8a:0f:68:34:cc:4f:
                    eb:ac:d6:84:4f:63:d1:cd:19:3d:2e:23:d6:f9:0c:
                    19:8c:cb:a4:6d:3f:5f:56:4d:e1:ac:84:63:4b:42:
                    63:6a:40:ab:2c:77:32:2a:78:f7:1c:5b:be:cc:07:
                    d7:bf:e1:63:51:98:ed:21:2a:45:4e:55:59:d1:96:
                    2e:c0:8e:a7:4b:73:eb:b3:55:8f:26:a6:07:ce:9d:
                    ca:a5:d8:f8:a4:1c:a0:e0:14:f1:3d:b0:94:9a:77:
                    c7:f3:b5:8a:05:09:c0:c5:80:d9:e3:52:6f:50:73:
                    76:5f:2a:fb:78:a4:54:e0:3c:60:39:5f:2c:2a:a2:
                    11:14:ad:60:d1:b1:d0:fc:34:3e:aa:52:ca:49:cd:
                    37:22:b5:f1:71:f8:af:52:20:d8:5a:40:80:f6:91:
                    9d:32:c1:32:cf:8a:b8:0b:bc:0e:ad:e1:fb:4c:11:
                    19:a6:c4:1c:28:2c:df:d8:91:49:56:84:f7:1f:8d:
                    d4:33:65:7d:40:3e:e6:cb:ab:00:f8:2c:2a:22:cc:
                    e7:e8:9f:6b:f7:eb:ba:3f:a9:2c:00:f4:98:a3:66:
                    08:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F0:39:69:C9:BD:76:31:04:B7:04:C9:78:F5:54:17:0A:7D:CC:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/a2fab9d1-ce1a-3705-8dad-fefbad69d555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl

            X509v3 Authority Key Identifier:
                keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb1b:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:09:c9:5e:51:31:0d:63:35:0f:88:33:19:3f:84:ca:b6:63:
         79:27:0a:c2:2b:dd:22:6a:2f:e9:1b:e3:48:24:53:3f:3c:47:
         c4:aa:c9:e7:4c:7a:d0:b5:7c:81:e6:83:61:c0:a5:09:d3:e5:
         8e:6b:5c:a4:dd:e9:ac:4f:98:f6:34:0a:4f:b8:da:38:3b:57:
         0c:5d:70:b3:47:90:ea:f3:8b:63:02:a7:52:9c:e0:1e:02:73:
         a9:d3:c8:10:a4:d6:10:b1:da:69:dc:8d:bd:ab:87:44:3a:3c:
         e3:5f:d5:53:bf:35:be:7e:e9:27:44:a2:ae:6c:1a:f5:be:7c:
         cf:4b:c6:5c:ea:07:75:98:a7:9c:53:f0:72:37:a7:cd:2d:38:
         a6:49:5b:0a:27:fd:26:bf:57:8d:f7:07:22:b0:50:7e:a2:95:
         75:ba:28:1c:fb:ba:ae:01:36:5c:f2:4f:1b:45:d4:01:fa:22:
         83:45:74:f9:d7:38:32:cb:18:b8:54:ee:8f:cd:89:91:4a:a8:
         72:af:ba:fb:be:a5:fb:c0:93:e6:7b:18:45:77:27:3d:80:06:
         73:e4:7f:2c:d2:d7:27:86:d9:9a:0f:ab:9c:78:11:ca:60:5e:
         4b:16:29:9e:fe:0c:3d:a4:72:0b:f8:00:cc:a6:ae:1e:de:a9:
         50:11:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:11:05 2025 by rpki-client