Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/287e6020-09d8-31af-b2a4-640aa96ac4f7.roa
File:                     287e6020-09d8-31af-b2a4-640aa96ac4f7.roa (raw, json)
Hash identifier:          aaFrMMSt1u2myGDfvwKW95DFs+0x8ClA3uLQdohuTB8=
Subject key identifier:   27:F7:CB:E0:90:C3:CA:B8:5A:1F:0E:A3:96:12:36:25:36:E0:2B:CF
Certificate issuer:       /CN=2006709a-3f5e-4b81-aa75-7ca3ed5d03e0
Certificate serial:       010D0C9F4328584A3A158D23FFBADCA5B691BD40
Authority key identifier: 10:B1:44:E9:AB:83:E2:F9:53:8A:7C:58:6E:61:9F:BC:AE:C1:D2:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/287e6020-09d8-31af-b2a4-640aa96ac4f7.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     397945
IP address blocks:        2602:fdb3::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:8d:23:ff:ba:dc:a5:b6:91:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2006709a-3f5e-4b81-aa75-7ca3ed5d03e0
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=96ce4db8-54f0-4c15-a210-4b4c604e01b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3c:59:be:1c:89:29:70:58:02:ab:61:64:34:
                    c2:fc:56:44:33:b7:5a:5c:70:26:4a:fb:ef:62:a5:
                    6d:cb:da:9b:16:79:ac:81:99:84:09:04:4c:e4:35:
                    aa:39:43:9b:58:6d:9b:e9:70:0f:d3:94:a0:62:8d:
                    a4:5c:5a:6f:88:22:a2:e4:03:11:be:49:22:bf:e7:
                    32:3d:4f:7a:00:f0:4b:2d:99:94:6e:e3:ef:33:74:
                    7d:2c:01:63:5c:a7:84:4e:43:7b:b1:58:ef:24:c5:
                    92:ce:9b:f3:09:16:09:bb:5b:4c:36:c2:e0:85:ae:
                    d5:96:c4:2d:d3:99:c1:5e:a3:e5:45:c6:52:8a:d5:
                    ea:24:5b:b0:e3:e3:ad:54:ab:9b:c1:5f:e8:23:8c:
                    fe:bf:1b:6e:9f:c9:f5:71:0a:27:d5:e4:fa:16:2c:
                    80:ac:28:ad:65:9d:64:a3:49:7a:94:b2:50:98:d8:
                    53:8e:fd:65:29:b0:00:ce:1f:52:5e:05:94:40:ad:
                    17:a2:1a:e2:1f:80:f4:7a:e3:43:24:15:bf:60:a9:
                    fa:02:b4:e8:9a:c9:d8:53:63:f5:22:96:5b:24:b9:
                    82:27:1e:d7:dd:25:3f:e8:c8:d7:14:d2:ec:24:f9:
                    2a:9d:7b:9e:cc:85:51:47:0f:24:06:fa:e1:54:e2:
                    ce:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F7:CB:E0:90:C3:CA:B8:5A:1F:0E:A3:96:12:36:25:36:E0:2B:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/287e6020-09d8-31af-b2a4-640aa96ac4f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.crl

            X509v3 Authority Key Identifier:
                keyid:10:B1:44:E9:AB:83:E2:F9:53:8A:7C:58:6E:61:9F:BC:AE:C1:D2:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2006709a-3f5e-4b81-aa75-7ca3ed5d03e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdb3::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d7:53:2b:c0:bb:18:ee:fa:4b:5c:44:22:1f:08:70:9f:9e:
         f4:81:72:4f:e1:46:69:98:08:7d:70:3c:ce:0b:4a:29:e8:c1:
         b7:5b:01:77:7e:08:f8:ee:4b:f6:c8:ac:9a:05:80:2a:ce:4b:
         0f:22:b7:e8:fa:f7:c4:c3:f3:1a:93:51:2f:bc:f7:76:93:c8:
         10:13:78:45:0a:55:34:dc:6d:2a:ab:83:7d:ea:13:ab:87:4c:
         3c:6e:40:63:17:ec:2a:49:9a:dc:6f:45:d5:ea:ce:25:b4:26:
         82:a5:c6:28:95:d1:bc:00:6e:10:35:6b:fe:91:21:35:cb:10:
         d0:6a:85:89:00:8e:36:02:f2:bd:d5:18:ce:14:92:5d:66:1a:
         b4:9b:30:4e:cd:9f:1d:ff:07:99:91:64:eb:10:51:e6:1d:e6:
         bb:36:df:5a:a3:4e:15:20:1a:97:8f:40:5d:46:87:df:c8:4f:
         56:7a:10:fe:e4:d3:0f:72:ca:7a:38:8b:c2:e0:c0:10:38:75:
         7c:a4:7b:a1:8f:fa:ad:e3:f5:53:3e:d9:67:dc:1b:86:16:64:
         9f:a6:d8:22:88:df:e3:10:f6:84:c5:64:6a:05:6b:a6:6b:d1:
         a1:e0:45:67:8f:d2:c7:ec:a7:6b:46:18:08:4a:ad:63:61:8a:
         ca:56:18:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 12:15:03 2025 by rpki-client