Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/9c02a2a9-116e-3bcf-b148-f1adaebe1ee4.roa
File:                     9c02a2a9-116e-3bcf-b148-f1adaebe1ee4.roa (raw, json)
Hash identifier:          xmX5ukqZvrx4wg9QqxqTM4upkcIjTr8JCjZW56AZKZw=
Subject key identifier:   60:CF:98:F7:B7:FB:8A:40:57:D3:74:75:2B:DF:92:0B:02:51:FC:EA
Certificate issuer:       /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
Certificate serial:       010D0C9F4328584A5765D1CFC95C45FF69734C80
Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/9c02a2a9-116e-3bcf-b148-f1adaebe1ee4.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        2602:fc88:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:d1:cf:c9:5c:45:ff:69:73:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=fcff850d-8695-4b58-9c79-f025160bafeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:a7:39:b3:aa:63:7f:4e:c0:f7:25:0b:15:
                    f0:16:54:f7:71:bd:28:4c:09:62:bc:40:99:2b:d4:
                    fc:4c:20:29:17:79:d3:bd:ca:6f:94:12:4d:de:91:
                    ef:d1:00:88:30:c4:e2:9f:53:85:2a:79:21:21:75:
                    cd:98:09:1a:d1:ea:cf:24:cd:2d:c2:dc:b9:1d:df:
                    1c:11:a0:56:48:98:47:f0:b2:79:e8:29:d4:1a:db:
                    cf:57:22:dc:eb:2f:ff:d9:9d:ce:d5:07:b3:c2:3d:
                    9c:f3:d6:84:9c:d5:b5:c3:0c:d9:38:7d:a6:c9:f2:
                    b1:c6:c3:df:6a:43:73:33:e8:4f:97:9f:9c:3c:e8:
                    a4:3a:7d:f2:88:31:1c:18:b3:5c:21:2c:14:3b:68:
                    78:c4:16:0f:cd:04:15:cb:7d:2a:18:66:34:40:15:
                    7f:b1:50:88:25:5f:a7:3b:75:7a:c0:ee:b1:b4:22:
                    f1:77:7f:42:9e:61:e6:00:cd:ec:28:3b:42:9a:46:
                    2e:e5:95:a8:c1:5f:5a:b7:5f:cc:2d:b5:db:b0:53:
                    7d:6f:fd:0f:cd:e8:a4:8e:dc:47:1a:f0:dc:d5:c1:
                    de:89:ee:98:35:be:cf:9c:b7:f5:1b:dd:0b:ad:5d:
                    31:f9:31:65:a1:a3:91:9d:a1:e9:45:c6:1a:5c:34:
                    0c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CF:98:F7:B7:FB:8A:40:57:D3:74:75:2B:DF:92:0B:02:51:FC:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/9c02a2a9-116e-3bcf-b148-f1adaebe1ee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl

            X509v3 Authority Key Identifier:
                keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc88:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:5a:d8:84:1e:65:b3:42:32:76:4b:f6:a5:e2:9c:1e:91:d5:
         4d:d8:fb:a7:07:7d:14:43:a9:5a:db:cf:f4:fc:46:15:af:e1:
         9e:b9:0b:77:c0:51:f6:6b:6c:6d:a8:69:01:92:0a:9a:24:98:
         09:e7:3b:53:13:80:ac:20:fb:11:3c:7e:fa:4c:48:9c:ad:c9:
         66:ac:6c:b1:b1:c8:ce:76:0e:7f:0b:64:24:a6:8b:18:a5:a8:
         83:15:7a:2f:99:55:2b:23:c9:33:04:f7:1b:7d:a2:79:68:16:
         3f:8f:48:b1:75:94:b6:1b:f8:9d:18:1d:ec:3e:8b:9c:e3:c9:
         e8:09:0f:2a:21:2e:70:4f:cf:97:63:8c:14:56:73:8f:f1:d3:
         63:9e:09:d7:9a:21:2f:d2:06:db:63:15:90:fd:45:d0:0b:16:
         5e:ea:8d:25:f8:72:80:10:42:4c:d5:07:57:7f:c1:2e:89:05:
         87:29:b1:6a:cb:08:eb:fe:5f:41:17:34:f8:ef:ee:71:2c:8a:
         fd:de:3d:2f:4d:2e:67:7c:b3:dc:bc:65:92:e8:b0:41:cf:21:
         d6:72:52:f8:51:f3:f8:b0:38:90:93:df:83:53:24:84:6a:19:
         aa:99:ce:fa:6a:88:33:df:3f:2e:a6:43:a8:f4:2a:97:a1:04:
         2b:94:a6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:25:29 2025 by rpki-client