Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/e8b30198-1ebd-3d3c-ab4a-ac93c730621e.roa
File:                     e8b30198-1ebd-3d3c-ab4a-ac93c730621e.roa (raw, json)
Hash identifier:          Qtul6aYdcm4BiIwSBEaIF7T6Q84TVm6trimWFwdZJKo=
Subject key identifier:   CF:6D:B9:FA:DC:17:E8:52:E1:57:6F:3C:25:4E:5A:4E:68:D5:92:87
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584A4C3B1E584B122395BB33D740
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/e8b30198-1ebd-3d3c-ab4a-ac93c730621e.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     63150
IP address blocks:        2602:f988:89::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:1e:58:4b:12:23:95:bb:33:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=b23f48f1-58fc-456b-b68f-4aeb6cc121f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:33:d6:2d:1b:c7:d1:be:7d:f1:07:6e:2c:
                    24:7c:f3:cf:45:5f:b1:93:34:cc:60:da:40:36:60:
                    b6:00:1e:da:75:82:c2:32:8e:30:f2:ec:19:65:0c:
                    ab:c6:9b:4b:fa:42:6d:3f:64:ed:f1:37:62:ef:a5:
                    e5:bd:f7:84:fc:ae:05:1b:05:de:76:4d:7b:71:73:
                    c6:61:9b:e3:fe:91:08:bf:20:5d:56:7f:48:26:68:
                    1f:56:62:0b:53:0c:94:90:3d:1d:f6:e1:e4:a0:53:
                    85:29:98:24:49:5a:09:18:dd:ea:cb:c7:43:b8:e3:
                    35:a0:6e:9c:7a:05:13:d5:d5:cf:cd:07:21:7d:f8:
                    12:d0:c0:c3:b1:30:3a:b4:5e:cd:7c:0f:18:88:26:
                    82:99:d5:ec:03:d4:54:f5:c9:e6:6d:71:14:e4:01:
                    41:40:c1:8b:76:b9:30:86:ab:dd:6b:15:8c:2c:01:
                    d1:08:8c:81:b4:1a:b5:1e:b4:da:b4:38:d0:5d:e7:
                    6b:97:76:b2:92:44:b3:a6:23:11:87:5d:c1:02:10:
                    f3:8d:09:a2:db:f1:e7:6a:65:5b:96:c2:f2:2e:4b:
                    10:e6:04:f0:eb:fc:87:6f:dc:30:73:fa:58:31:2d:
                    33:5f:15:23:ea:4a:99:c5:ca:09:4b:40:9e:0e:ee:
                    3e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6D:B9:FA:DC:17:E8:52:E1:57:6F:3C:25:4E:5A:4E:68:D5:92:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/e8b30198-1ebd-3d3c-ab4a-ac93c730621e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:89::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:a6:19:d7:b1:77:98:47:20:7a:74:03:a5:55:ca:89:fd:04:
         be:7d:ae:56:6e:5a:10:a6:47:a6:b6:e1:50:25:fb:c7:81:c5:
         b4:89:ec:93:59:c9:54:f1:d3:01:ce:5f:12:16:ef:7d:3a:61:
         63:eb:69:be:80:50:97:50:1c:d6:b9:48:80:3d:15:10:a4:cb:
         30:ac:f4:28:e2:d7:fe:3e:7b:89:34:93:e3:38:b3:ac:ad:cd:
         87:a5:59:0e:61:7b:f5:fc:cc:da:22:07:9f:1c:13:0f:b6:c7:
         32:b2:2f:53:2f:de:b1:6a:f7:92:b7:f9:51:0d:88:fb:df:c0:
         66:f1:83:15:d5:9d:16:fb:7a:2d:b8:5b:b3:66:91:97:57:56:
         5d:be:14:06:01:1e:50:9d:b7:5f:ac:83:ce:96:b2:c6:f3:05:
         f9:49:5e:fd:ff:cd:80:32:fe:f0:01:8b:89:6b:b9:91:a8:82:
         55:ef:b7:af:10:6d:01:da:ec:9e:cf:ef:fe:c0:f3:19:10:8f:
         54:7c:f6:d8:4c:4e:16:8d:99:f6:cb:1d:2a:7c:0d:ef:a8:0c:
         40:47:9d:ca:63:ca:34:62:80:d7:d7:50:33:14:36:55:bf:3b:
         f8:e7:fe:2a:0f:8e:c5:ce:fa:47:e5:dd:c5:0d:88:60:0f:96:
         6c:4d:9d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:09:46 2025 by rpki-client