Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/43aa77de-9b48-39e6-802d-8a9a94c7551e.roa
File:                     43aa77de-9b48-39e6-802d-8a9a94c7551e.roa (raw, json)
Hash identifier:          6fPx3VolkeF+P32xtc6in+VE1hMVQ0vmUfOHD6EVDe4=
Subject key identifier:   79:F4:E1:34:6A:D9:2E:F6:8D:4B:32:B2:4B:ED:C7:7B:5A:BB:04:27
Certificate issuer:       /CN=1a319486-03d5-4fb1-997e-228350330847
Certificate serial:       010D0C9F4328584A549B23A29887E47FAC31C180
Authority key identifier: A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/43aa77de-9b48-39e6-802d-8a9a94c7551e.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     14618
IP address blocks:        2602:815:3003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:23:a2:98:87:e4:7f:ac:31:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a319486-03d5-4fb1-997e-228350330847
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=4f906c10-6703-4c28-b4fa-b80b0f021c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:64:83:9b:29:c8:ab:19:ef:b6:80:8e:d4:87:
                    79:30:5b:6e:1a:8b:83:ca:71:14:32:42:7b:9e:cd:
                    92:89:51:d9:d3:8f:7c:0f:93:41:01:f1:b0:6f:25:
                    4f:f5:72:bf:ad:f1:86:6d:a4:00:0c:0c:fa:4b:27:
                    0c:b0:81:a1:fe:28:89:5b:45:85:b5:db:41:e6:ce:
                    40:37:15:b0:23:5f:48:76:b8:27:ab:be:b8:ac:ce:
                    db:84:eb:9c:6e:aa:ae:9f:71:3b:3a:20:ef:67:92:
                    84:fa:8d:d7:97:97:b4:a1:78:e9:39:bc:c9:49:ef:
                    5a:4d:04:75:ab:95:96:db:b3:a4:de:a2:ef:e2:bd:
                    89:f1:05:8e:ae:df:1d:e2:4f:96:3b:c0:ac:36:e4:
                    d0:da:6c:40:52:03:0a:38:a6:de:1b:42:4d:29:40:
                    85:2a:83:7f:02:ca:77:0c:9c:ec:1a:42:26:22:48:
                    25:69:5f:b7:8a:4d:da:ba:f5:f9:3f:c9:80:4a:33:
                    0e:4e:f7:bf:09:bf:1c:1d:d1:33:f3:b7:d7:bf:7f:
                    69:75:53:f0:7d:96:56:dc:c6:2e:42:82:5b:c4:6d:
                    ed:27:2b:f7:8f:d8:be:a9:18:76:08:dc:b4:00:84:
                    75:44:05:12:8b:16:7a:1e:74:d1:c3:a9:73:a8:06:
                    98:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F4:E1:34:6A:D9:2E:F6:8D:4B:32:B2:4B:ED:C7:7B:5A:BB:04:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/43aa77de-9b48-39e6-802d-8a9a94c7551e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl

            X509v3 Authority Key Identifier:
                keyid:A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:3003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:77:4c:a0:29:d1:8e:08:12:a2:ef:7d:70:cf:bf:87:5a:06:
         69:ac:3a:26:40:bb:db:1f:0a:45:a5:99:ac:05:e8:5d:b6:a2:
         2b:93:e3:33:3d:b4:65:3d:63:1f:b8:6d:35:4e:ec:72:e0:40:
         16:58:49:65:b6:54:8f:1c:9c:69:77:2d:f9:b1:48:bb:5b:6d:
         df:8a:6b:60:9b:1d:55:65:ca:4e:78:ab:4d:32:67:35:00:23:
         43:5c:de:b5:de:33:0e:08:57:05:87:66:a9:70:ff:98:15:c7:
         ef:d5:66:c4:4c:98:65:d6:3b:6e:57:58:82:b5:77:80:77:9c:
         aa:76:be:e2:fe:04:c7:01:e7:78:2f:e1:f0:59:32:f0:46:18:
         3c:ac:d4:27:54:ec:88:4e:73:94:e1:db:19:9d:c0:ed:88:c7:
         c1:2d:42:89:4c:c1:29:4a:70:15:61:29:3f:00:e0:a8:a1:c6:
         cc:08:99:42:72:ae:09:32:c2:6c:91:85:41:76:84:f8:33:30:
         49:ab:14:94:a3:39:c8:18:1e:ca:00:9d:fe:fb:1f:48:3d:21:
         45:5f:90:06:ff:38:69:65:5d:99:1a:63:a7:b7:ee:9b:8a:21:
         81:4e:a2:79:0d:7e:50:3d:c7:29:6e:09:75:e4:46:39:b5:f9:
         8c:fd:04:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:35:02 2025 by rpki-client