Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/78061b29-d846-3107-a526-47fd5a8d4b89.roa
File:                     78061b29-d846-3107-a526-47fd5a8d4b89.roa (raw, json)
Hash identifier:          5Mn3Vsv4o6Jgdx7ToArqGxE2Su8ZaltyIfCoPvJoJP0=
Subject key identifier:   95:0E:8E:14:70:89:6E:1A:66:22:AD:9F:43:AD:24:42:F4:DE:D5:C5
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584A58CB07EA9874BCBE946E6900
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/78061b29-d846-3107-a526-47fd5a8d4b89.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     3423
IP address blocks:        2602:fbdc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:07:ea:98:74:bc:be:94:6e:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=2c194cff-d90e-4a83-a95c-f64a197c966b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:75:58:22:6f:f7:49:7b:37:a3:df:46:b7:c4:
                    22:3f:d9:a3:a6:05:6e:bb:8f:1b:eb:61:bf:76:fa:
                    43:22:a6:8b:f3:25:64:90:c2:69:fd:13:d9:58:dd:
                    f1:b5:ac:ac:2a:52:86:9d:dd:5d:04:0c:aa:9a:e7:
                    81:25:33:94:5e:6f:5e:c1:92:88:4c:65:bb:3d:d5:
                    8b:40:03:a6:2e:b2:fa:5a:eb:a4:b1:76:cf:60:72:
                    4d:a9:6e:b9:e1:20:6e:99:79:22:ff:0e:19:f4:0a:
                    b3:3f:96:6b:b9:b0:7f:ad:ec:f2:95:73:a4:31:32:
                    49:c0:ec:74:14:1b:df:31:84:8e:3d:44:61:3c:b6:
                    e6:23:53:d3:09:b1:32:dc:58:3b:dc:94:79:6e:af:
                    30:3c:42:37:e1:3d:73:02:77:5c:0b:29:3b:dc:3e:
                    35:7c:9b:55:5a:60:8b:3a:13:76:37:b8:9e:bb:ad:
                    9e:55:31:21:52:c6:c3:90:f8:e6:ae:3b:fb:80:5a:
                    67:89:0a:b8:77:6d:58:37:04:65:3d:8a:21:b3:da:
                    eb:f7:91:fc:8c:69:08:dc:99:9e:e9:ee:f8:3d:a3:
                    1b:f5:01:1c:09:b8:c9:08:0c:a0:4c:c2:e1:62:69:
                    66:08:0c:8b:bd:c9:56:6f:64:f4:62:63:aa:08:fa:
                    1d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0E:8E:14:70:89:6E:1A:66:22:AD:9F:43:AD:24:42:F4:DE:D5:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/78061b29-d846-3107-a526-47fd5a8d4b89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:43:7e:e3:5e:d5:91:13:66:30:ab:2f:2a:55:03:e2:be:0d:
         81:a3:01:ec:8a:09:04:b2:46:03:d9:73:59:46:4d:25:9b:20:
         03:cc:44:19:c6:76:00:4f:d5:35:43:7a:9a:7f:1a:99:2f:cf:
         fb:2a:49:cd:6b:a5:72:f8:c4:70:82:0d:8a:3e:2b:ba:40:e2:
         5c:5c:20:f6:fd:92:db:bb:55:ce:4d:b0:53:a3:eb:fa:1f:25:
         4b:f0:22:73:13:e4:92:99:72:1d:c5:08:75:55:3f:fe:31:ae:
         2b:07:1c:11:3d:5a:3f:ca:16:44:2e:d9:f1:ee:28:93:58:f7:
         a8:3e:bf:bf:76:6e:3f:15:a7:c8:f1:ba:6a:15:5e:c8:f7:1d:
         f5:46:36:8b:7b:ea:40:67:20:a1:02:76:1e:43:60:60:cd:48:
         2c:e8:66:17:c3:b3:46:43:72:4a:fc:a7:df:a3:d2:c6:fe:3a:
         f3:f9:85:38:a2:73:6e:47:b6:05:46:69:46:12:fb:dd:09:8c:
         43:04:d7:e1:8e:20:71:80:e2:c9:ee:1f:a8:9f:12:39:4f:40:
         5a:b5:2a:e2:9b:b0:d0:dc:7c:0d:56:c7:7d:d1:42:ea:79:81:
         7d:d4:01:12:f5:33:f0:28:7b:ac:c8:9e:01:bc:1f:1b:e9:05:
         66:e3:f2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:26:48 2025 by rpki-client