Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/1e7f83e4-22dd-359a-b0d8-8e30ad66a171.roa
File:                     1e7f83e4-22dd-359a-b0d8-8e30ad66a171.roa (raw, json)
Hash identifier:          voN0YgfhM8x9DVBjN4EK5qczhBrzQsSP33Y3B7/jwLY=
Subject key identifier:   E7:7B:57:44:E9:91:C8:D3:28:FE:9C:2B:47:80:3E:E4:9B:97:A5:20
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F43285849F9DFE0A10242FCE487A160C0
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/1e7f83e4-22dd-359a-b0d8-8e30ad66a171.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     3423
IP address blocks:        2602:fbdc:d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:e0:a1:02:42:fc:e4:87:a1:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=5239c0b8-9b3f-4fa0-99ac-a4abee81315e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:63:fd:1b:ff:6d:fc:64:f8:63:91:cc:b1:dc:
                    52:c6:db:11:ac:0e:8f:d6:67:c8:27:21:d7:81:51:
                    b9:22:75:fb:71:d2:52:08:b5:aa:d6:a9:c9:2f:53:
                    36:b8:29:2a:a7:bd:04:1e:9d:11:ce:24:e3:09:bc:
                    14:88:cb:8a:72:f6:ba:0c:b8:8a:04:03:65:76:0e:
                    81:7d:78:bf:ed:07:81:50:f0:a4:7d:b1:e7:85:47:
                    d7:05:88:23:64:d9:77:34:b3:1c:ce:10:0d:b1:0c:
                    b3:5b:45:ce:1c:6d:a6:59:bd:c4:0d:26:b6:a0:44:
                    49:d3:08:a4:05:36:8d:f3:72:70:6e:62:fd:1a:53:
                    55:ce:31:51:b3:d8:44:37:47:21:f8:ca:8f:e9:28:
                    5b:ed:69:2b:05:95:19:20:f5:fc:36:51:6e:e9:9b:
                    af:04:78:01:d4:06:a4:00:3d:1a:9b:78:d3:35:56:
                    49:39:8e:6c:4e:ab:50:66:e8:6a:e1:b2:c8:c6:ca:
                    e5:2c:41:68:3b:51:41:d5:39:1a:6b:95:6d:af:a1:
                    72:46:75:d5:82:9b:91:35:7b:86:f8:49:f3:60:ed:
                    9e:c6:94:84:23:cb:83:f7:b8:77:65:e0:08:9a:25:
                    ff:54:2a:20:93:30:44:d2:7c:54:d5:61:9b:35:64:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7B:57:44:E9:91:C8:D3:28:FE:9C:2B:47:80:3E:E4:9B:97:A5:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/1e7f83e4-22dd-359a-b0d8-8e30ad66a171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:92:fd:20:5d:ad:29:19:89:4d:01:7c:28:74:72:ef:4d:da:
         ca:55:15:bc:46:40:72:80:9a:ac:78:fc:cd:65:d3:66:31:5f:
         d7:3f:f3:16:17:3e:89:a3:75:8b:f8:6d:68:72:31:20:09:47:
         ed:d2:27:92:20:93:fe:42:be:07:68:ed:3e:21:82:b2:0f:49:
         0b:c5:69:93:79:39:88:58:77:2f:09:5f:0c:40:f6:66:6a:bc:
         85:28:4f:8e:20:e1:cd:a9:8a:16:df:07:8e:f2:3c:a5:c1:19:
         43:20:70:ce:74:c0:a0:18:c1:35:f6:70:dc:c6:b2:df:fb:fa:
         9c:b1:12:13:44:b3:76:0e:cc:8f:75:15:61:c9:23:d2:2d:fa:
         bf:61:74:28:11:09:2a:71:18:92:ac:d7:9c:cb:ff:4c:6d:c4:
         13:ce:e6:db:67:e2:b0:b2:d1:10:60:e1:8a:7e:b0:30:7f:8f:
         9c:58:cd:1f:04:ad:69:c2:d7:35:3f:c2:14:2d:71:66:ce:97:
         f8:2f:f0:fa:25:5b:f0:2d:ac:f3:86:4a:8d:a9:cb:e2:25:84:
         73:78:a9:66:ed:ab:08:ec:8f:58:ed:ca:f5:f6:46:c2:9c:98:
         3b:ec:8c:e1:05:95:b6:88:32:0b:93:63:79:eb:2f:9f:7b:e8:
         ec:74:18:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 22:30:42 2025 by rpki-client