Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/bdae32e8-bb00-36e1-b181-88a71d5957d1.roa
File:                     bdae32e8-bb00-36e1-b181-88a71d5957d1.roa (raw, json)
Hash identifier:          F1EU0vqotNMUPZxPnYQQu1FpQ1Z/+GgW2wy9OAAMJU4=
Subject key identifier:   6B:BD:59:20:1D:77:92:4E:D7:2A:20:97:1A:4F:E5:6F:B7:BD:51:6E
Certificate issuer:       /CN=1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744
Certificate serial:       010D0C9F4328584A2EEABC83C9C35A0B908F1D00
Authority key identifier: 67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/bdae32e8-bb00-36e1-b181-88a71d5957d1.roa
Signing time:             Sat 14 Jun 2025 01:00:49 +0000
ROA not before:           Sat 14 Jun 2025 01:00:49 +0000
ROA not after:            Fri 12 Sep 2025 01:00:49 +0000
asID:                     216440
IP address blocks:        2602:fa4c::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:ea:bc:83:c9:c3:5a:0b:90:8f:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744
        Validity
            Not Before: Jun 14 01:00:49 2025 GMT
            Not After : Sep 12 01:00:49 2025 GMT
        Subject: CN=fb2176a5-df32-4f25-a047-d359b567ebe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:99:45:49:1f:f9:80:2a:e8:18:be:b7:87:44:
                    1c:4d:29:cc:01:6c:79:4c:5c:c2:8e:66:36:f4:88:
                    95:93:75:6e:e9:bf:dd:40:82:ee:76:a6:56:20:6e:
                    df:34:7e:42:f3:ae:6d:9f:b9:5d:37:93:65:14:4a:
                    f3:96:66:e1:d0:a1:71:ab:a3:48:71:c9:d5:20:07:
                    7c:c5:22:6c:4e:23:84:19:38:a5:10:fa:55:47:5c:
                    29:33:23:8b:fb:5b:d2:b2:95:ff:a2:9f:c6:1b:2b:
                    33:ca:33:91:5e:19:14:02:46:58:43:32:71:af:e6:
                    57:19:f5:02:84:1b:27:82:94:f8:57:55:46:d1:26:
                    f4:6b:e4:2f:c1:58:6a:b1:70:76:94:63:4d:ba:97:
                    1d:79:b4:ce:e3:50:bd:b7:ef:a9:b7:37:b8:e3:5a:
                    65:69:ed:1b:82:2e:f7:a4:91:a0:d8:12:44:4c:b4:
                    e9:57:12:a3:c1:02:0b:02:2e:e8:90:46:da:42:ee:
                    74:09:da:45:9a:0e:54:4e:cf:b7:eb:23:67:44:77:
                    fc:ac:54:da:d2:16:9a:c9:59:dc:43:ca:2a:f5:8a:
                    93:10:37:4a:b9:48:4d:59:9a:2d:ff:c3:64:a7:95:
                    00:94:44:42:22:96:48:4a:3f:7c:e2:8a:73:4f:b0:
                    e6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BD:59:20:1D:77:92:4E:D7:2A:20:97:1A:4F:E5:6F:B7:BD:51:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/bdae32e8-bb00-36e1-b181-88a71d5957d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.crl

            X509v3 Authority Key Identifier:
                keyid:67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:50:a4:bf:0e:13:87:84:1f:56:77:04:71:e5:fc:d3:77:2e:
         da:57:f8:ad:c9:f3:1b:94:72:80:fc:c6:da:d7:7d:f0:7d:0b:
         b0:67:19:1e:a2:e5:22:92:d8:60:e8:b7:25:d7:1f:23:f3:59:
         21:00:9b:3e:b6:7e:6a:b2:93:1d:a9:42:44:e9:90:7d:d4:0d:
         52:4d:9b:78:e9:51:0e:00:6e:1c:bb:b9:a0:19:aa:0a:66:9e:
         2c:21:75:08:46:bf:14:82:b5:7d:46:76:19:4e:dd:58:2f:13:
         9f:5d:8a:ba:bc:35:2f:78:b8:94:d4:c2:46:95:35:70:37:68:
         72:a1:ec:2e:6b:51:96:7d:09:8b:4a:b9:84:22:09:8e:e3:62:
         2e:0b:0f:73:af:3c:6b:c8:14:78:56:5f:8d:f8:50:0c:d7:1f:
         42:3a:95:7e:21:83:93:ba:ac:41:9e:00:71:71:03:c9:f4:4f:
         6b:c3:47:30:1f:cb:ac:ed:be:74:44:8a:3d:3a:09:f0:03:d2:
         74:23:32:87:16:78:37:7a:0c:ed:74:73:58:a2:1a:9b:09:42:
         c9:b2:7d:6b:c4:7c:ce:1d:8e:e7:7b:ed:a4:10:04:16:af:07:
         d8:b0:23:68:94:e7:aa:a5:cf:f4:e8:4e:ee:58:46:63:89:f9:
         af:06:d1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:45:31 2025 by rpki-client