Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/a1830fbd-80fd-365e-833e-215463a0658b.roa
File:                     a1830fbd-80fd-365e-833e-215463a0658b.roa (raw, json)
Hash identifier:          tnR9X4wzpgaofP6QaR0razVV0nk/oeOXE6t843KMU08=
Subject key identifier:   58:79:12:47:2C:CB:0A:99:22:E6:D8:C8:F2:9E:05:30:FD:33:9E:EF
Certificate issuer:       /CN=d7c75743-409b-41fb-b744-8345baaf599b
Certificate serial:       010D0C9F43285849BF3F64B29458A113F3AB5530
Authority key identifier: 62:33:C3:19:5C:3A:85:62:DF:B7:57:13:AC:7F:5F:AB:C4:CD:25:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/a1830fbd-80fd-365e-833e-215463a0658b.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     20373
IP address blocks:        2602:f939:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:64:b2:94:58:a1:13:f3:ab:55:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c75743-409b-41fb-b744-8345baaf599b
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=42374563-e507-48a0-ae8e-bd636e3016be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:29:c2:4c:ff:f4:7e:e2:a6:5a:c4:c5:25:53:
                    16:bc:52:8a:02:35:6e:d8:56:94:f4:57:ee:e1:90:
                    d3:b6:b4:af:c3:cb:ed:ef:9d:77:0f:38:1d:f1:ec:
                    78:76:71:41:f6:34:97:af:08:05:3e:d6:62:97:4f:
                    f2:34:89:95:59:4b:3e:ea:68:00:9a:b6:ea:91:ea:
                    24:a7:95:e0:5f:35:6a:50:4f:48:c9:4e:3b:e4:3d:
                    1c:5d:13:bb:6b:80:9a:ec:b4:9c:69:74:2f:42:ae:
                    b0:15:35:c1:06:5d:c7:b9:7e:d5:98:33:ef:30:40:
                    56:29:75:8e:08:9d:c8:64:0f:1a:f9:d7:a3:2c:f8:
                    1e:64:50:fa:5f:57:0a:41:c4:73:e7:19:fa:3d:5c:
                    a2:d8:55:6f:97:9d:12:c7:39:ad:55:99:1f:23:7f:
                    43:9a:52:b9:ed:7e:58:3a:ec:d3:ea:de:59:4e:eb:
                    e4:76:b9:22:56:92:25:88:d3:d9:72:f2:6e:2c:89:
                    0d:2c:8a:1f:da:cb:de:e5:d0:0e:44:e5:d6:03:d0:
                    c3:ae:ad:9f:62:6f:38:38:9c:2d:28:da:a0:83:3e:
                    b7:91:62:02:4c:03:c2:c8:80:23:6a:6a:0d:e1:ed:
                    24:ea:a8:d7:4b:84:38:32:7a:81:27:0c:86:17:2b:
                    72:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:79:12:47:2C:CB:0A:99:22:E6:D8:C8:F2:9E:05:30:FD:33:9E:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/a1830fbd-80fd-365e-833e-215463a0658b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b/d7c75743-409b-41fb-b744-8345baaf599b.crl

            X509v3 Authority Key Identifier:
                keyid:62:33:C3:19:5C:3A:85:62:DF:B7:57:13:AC:7F:5F:AB:C4:CD:25:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d7c75743-409b-41fb-b744-8345baaf599b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f939:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:1c:fb:56:53:f4:59:b9:1b:1a:a4:77:83:30:79:68:fc:f9:
         bc:d0:70:22:51:dd:9f:05:60:00:9d:49:0f:ba:fd:57:55:3a:
         bc:26:e4:42:c8:70:4a:8d:97:d7:58:70:19:e6:56:66:ec:c6:
         d2:b6:2d:9c:d7:c7:1e:aa:c5:ef:a2:0d:5f:75:36:d3:61:7d:
         8f:83:ac:60:dc:65:fe:84:16:09:ed:fa:84:ab:76:fa:c4:54:
         27:8a:2e:e5:ea:3d:90:1d:56:c5:1a:b1:5e:30:62:f2:91:3f:
         6f:73:12:62:d1:7e:1f:b6:86:d7:b3:5b:f7:31:d8:fc:14:4c:
         fc:ec:e7:a4:42:12:d5:48:f1:bf:a6:bf:4b:10:89:6b:9d:d1:
         b2:76:4c:ae:90:5d:2c:40:b9:c8:1c:d4:b9:fb:f2:bf:1a:d6:
         e6:c2:80:53:ca:60:35:1f:f9:5f:d8:6a:1c:be:d9:63:c3:06:
         77:bb:86:de:db:15:50:af:30:9a:39:25:93:df:86:35:29:52:
         fd:67:14:4c:ca:14:25:68:f4:7c:56:be:f1:49:98:a8:67:d8:
         26:72:d9:50:d0:7e:92:91:d1:2f:4b:a7:c7:f0:36:33:df:f0:
         57:e1:1a:d5:f0:b6:5b:43:7f:ba:74:7a:78:67:e7:7b:66:70:
         b5:d7:39:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:13:20 2025 by rpki-client