Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/dbf19602-5228-31b4-b609-be9efc6ef44a.roa
File:                     dbf19602-5228-31b4-b609-be9efc6ef44a.roa (raw, json)
Hash identifier:          clZjUhurBG7gHey4RQT9y0PmSTPv39PD9T73o/sj6/M=
Subject key identifier:   2C:ED:45:71:B9:B8:7B:F7:84:BD:24:62:EB:18:D2:BB:05:EF:AE:B6
Certificate issuer:       /CN=1a319486-03d5-4fb1-997e-228350330847
Certificate serial:       010D0C9F4328584A41106194FEBF468807CA6000
Authority key identifier: A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/dbf19602-5228-31b4-b609-be9efc6ef44a.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     46983
IP address blocks:        2602:815:3000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:61:94:fe:bf:46:88:07:ca:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a319486-03d5-4fb1-997e-228350330847
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=210d796b-f442-4511-8dd4-ba8cdfa8e1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ac:01:99:7e:d5:89:dd:14:b0:0e:6a:87:b7:
                    2f:44:5d:e6:9b:df:7a:ec:18:18:51:d2:df:cc:04:
                    b0:7e:85:fa:07:e0:10:c4:44:f4:b5:3e:4e:09:62:
                    d1:03:b7:d6:fb:ff:a1:4e:20:5b:65:13:65:6d:0e:
                    4a:33:1a:4b:2c:6e:05:07:33:3d:86:9e:4e:b9:fa:
                    77:1b:93:2d:c6:7f:dc:b3:75:b2:ce:1c:28:28:50:
                    fa:fa:52:62:1c:ca:f3:4d:3a:85:8d:1e:10:73:78:
                    72:97:7e:a0:f5:ae:46:30:99:86:32:12:25:3a:4d:
                    69:ff:67:81:7d:88:17:c4:33:78:87:8d:cf:2f:3e:
                    de:cb:0d:c9:52:5b:80:c8:6a:7b:dc:c1:22:21:28:
                    c8:e4:29:b3:eb:a4:40:d7:7d:1f:ba:3d:30:c8:f1:
                    e6:fc:87:9c:9f:0b:38:e2:b0:df:6c:cd:39:e1:f7:
                    75:3c:46:9e:75:1d:6f:5b:18:7b:f0:90:b8:30:c1:
                    85:81:46:19:16:75:2e:aa:87:65:be:43:dc:01:24:
                    03:33:12:f3:ba:0f:1c:67:a4:11:b7:3b:10:ab:eb:
                    50:82:0a:c8:be:8f:d4:51:eb:a0:1b:4e:3d:74:06:
                    0a:54:17:7e:63:84:66:8e:11:62:1f:9d:23:2b:65:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:ED:45:71:B9:B8:7B:F7:84:BD:24:62:EB:18:D2:BB:05:EF:AE:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/dbf19602-5228-31b4-b609-be9efc6ef44a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl

            X509v3 Authority Key Identifier:
                keyid:A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:d6:2b:57:9a:c7:18:ab:f7:28:c5:72:46:86:7c:04:83:c2:
         12:f9:51:70:bf:30:ef:a4:03:f2:8f:bf:45:11:74:42:0a:d5:
         c4:0c:73:d8:2e:6d:74:ae:93:bb:fa:ef:c7:29:f5:00:35:6c:
         e4:25:3b:86:4d:b2:4a:73:96:32:1e:61:45:8d:50:28:ba:a0:
         7e:89:6e:f3:9e:97:71:19:bd:91:ea:a0:68:3b:31:ea:ef:af:
         f0:c4:b5:66:07:33:f7:ba:80:3e:a6:88:16:d3:40:fa:0a:e3:
         73:f7:36:e1:95:ce:fc:e1:b1:1c:20:f7:8b:5c:c2:a0:0f:da:
         c0:f1:a3:a6:c2:5c:bf:75:74:ca:14:15:e6:8f:c9:66:a9:f1:
         65:c8:d5:2e:48:85:01:0e:89:64:df:43:4f:36:c6:7d:a2:ec:
         3c:a1:1d:c7:c8:c6:b9:77:9e:86:f8:db:d9:b2:ff:f2:cd:2a:
         87:31:3f:af:41:26:db:5c:2d:6d:8a:af:9d:ac:be:ed:59:08:
         31:d0:5e:a1:a9:62:da:e7:94:69:d7:94:73:be:87:f2:25:4a:
         91:c9:23:b2:b4:eb:00:39:8f:73:6a:18:00:c0:11:87:15:b2:
         d5:5b:2f:4c:d5:62:b4:24:0f:f6:72:65:b3:94:99:2b:e4:ee:
         83:1e:d6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 12:33:37 2025 by rpki-client