Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/e1777d40-d5bf-3ff8-8658-d36946466b5d.roa
File:                     e1777d40-d5bf-3ff8-8658-d36946466b5d.roa (raw, json)
Hash identifier:          hpkmhncbVbbUWW+3MV0vry6zWgcfu+LEo1B0CgSIoiQ=
Subject key identifier:   D0:19:5D:91:14:A3:ED:00:30:42:43:9E:5D:02:76:32:BA:E3:84:3A
Certificate issuer:       /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
Certificate serial:       010D0C9F43285849EBEA55B5C350188D131A1E00
Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/e1777d40-d5bf-3ff8-8658-d36946466b5d.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     400928
IP address blocks:        2602:f961::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:55:b5:c3:50:18:8d:13:1a:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=0baefa2f-6b52-4f09-a8a4-a50e0b0118af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1e:5e:4c:75:4e:18:70:f6:e5:d1:10:de:ae:
                    a0:15:9b:a4:f0:2c:7a:d1:91:38:e7:d8:c7:45:a9:
                    56:5c:90:e0:e4:03:7a:af:e9:5b:53:02:ab:08:f3:
                    64:8b:ea:61:64:51:c2:a3:80:a0:0a:2a:bb:8d:c5:
                    16:87:5c:e3:1a:f3:d8:f8:d2:76:12:80:c9:8a:cf:
                    a7:24:0a:b3:46:87:77:5e:22:a7:9f:e6:8a:b4:9e:
                    18:fc:aa:64:12:6e:1a:82:8e:51:8d:f5:3c:ee:23:
                    7a:7a:7e:b9:84:9d:68:22:f5:60:df:a0:ee:aa:6b:
                    6e:11:45:d1:ea:1d:71:a7:a2:d4:71:1b:ad:38:d5:
                    78:3a:6a:c0:91:97:74:d8:62:c7:9b:23:2a:62:20:
                    5d:97:6b:fa:c0:1a:ec:a9:dc:ab:21:a1:e8:47:50:
                    06:4c:c6:d3:28:c6:99:fa:0f:2f:5d:e3:2e:ec:7d:
                    df:d6:ec:a2:46:20:f5:7e:91:9f:27:63:97:86:0f:
                    19:f5:9e:6a:36:b3:f0:b0:17:f2:c2:52:8e:56:6a:
                    a3:10:26:f4:03:64:2b:0e:81:9b:e7:5c:e3:a1:54:
                    a3:6a:4f:f1:43:50:6f:47:2e:c4:bf:00:72:1e:60:
                    62:ba:b9:1f:54:d7:6f:7c:cf:10:4b:ef:fd:a7:1d:
                    5f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:19:5D:91:14:A3:ED:00:30:42:43:9E:5D:02:76:32:BA:E3:84:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/e1777d40-d5bf-3ff8-8658-d36946466b5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl

            X509v3 Authority Key Identifier:
                keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f961::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:8b:3c:91:19:5a:5d:82:eb:6c:58:86:9d:3a:ca:08:ec:46:
         df:f5:62:d9:a2:42:fc:c2:a6:06:91:67:ab:94:83:b3:0e:89:
         f8:62:96:e5:1e:6a:03:47:c6:96:9f:ac:0f:8a:4e:2e:70:75:
         e6:f4:47:7c:5e:0e:66:e4:6e:1d:11:33:f7:38:dc:18:52:b7:
         fa:4d:09:bf:25:59:31:1c:95:3b:52:5b:49:b3:8e:56:bf:af:
         38:a9:65:03:de:a4:3d:a8:77:96:67:08:d1:ff:02:93:3d:4f:
         46:f3:c8:f5:c9:6f:a8:da:45:0d:8d:70:77:20:e7:20:4d:4e:
         17:47:a1:1c:0a:29:a0:37:ec:37:ba:c9:ac:bb:81:89:65:af:
         a9:54:dd:58:01:0e:57:90:83:05:7f:7c:bd:aa:d6:07:2c:8b:
         a5:89:eb:74:6e:d5:20:8d:27:2d:57:ab:e9:3e:fa:4b:df:4e:
         3e:cf:fb:64:95:59:59:91:78:e4:20:27:e7:13:6e:b3:57:76:
         18:2a:dc:a1:7a:ae:be:94:11:9a:3d:b5:42:07:0c:a4:d9:f9:
         c7:34:18:d3:d1:e8:4b:61:fc:e1:9d:ca:17:d4:93:fd:f8:c3:
         49:d1:00:19:5c:ae:df:fb:4c:f8:1e:2c:01:8a:dd:6b:99:e4:
         13:39:42:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:37:38 2025 by rpki-client