Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa
File:                     2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa (raw, json)
Hash identifier:          34i6n94eMP5T1XjguvRahozmhLoa8QzMW4CIILM4Aaw=
Subject key identifier:   59:E7:D2:55:4E:44:3B:D3:56:2A:6F:CA:A7:78:AE:AA:BF:E0:05:D8
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F43285849AA4F71CD4D7383D53891B180
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     61112
IP address blocks:        2602:fa4f:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:71:cd:4d:73:83:d5:38:91:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=477c0c4c-7626-4dbd-afef-9574f5640f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:30:a8:9f:32:4a:33:5f:f7:92:c7:1a:77:2e:
                    fc:e9:56:be:0c:82:0a:8a:16:fc:b4:cf:5c:5e:4d:
                    18:92:c3:e7:3f:39:08:54:d4:2c:6f:a5:a6:28:7a:
                    22:7e:17:66:c1:2e:9a:87:84:63:38:d2:87:4e:50:
                    79:ee:95:0c:71:e8:eb:ec:c4:0a:b3:ed:b1:8f:1c:
                    17:bb:ee:ec:e0:cd:79:ac:eb:98:f3:e1:2e:3b:66:
                    dc:4e:38:75:ad:e6:ac:4d:d7:f0:63:cd:31:be:1e:
                    6d:10:69:1b:fc:e6:f0:6c:59:63:89:85:92:98:ce:
                    6c:a8:20:04:a8:80:1c:d2:13:6a:e0:ab:90:bc:05:
                    06:6c:56:3f:c4:d6:5d:68:72:41:ca:33:53:17:62:
                    9b:b6:3e:e0:f9:e8:52:a2:8a:7e:11:96:dc:ea:97:
                    8c:97:6f:29:f9:69:01:63:e0:c5:b5:2c:2c:67:bc:
                    59:55:58:6d:1f:3f:f3:ec:1c:91:b8:e5:af:b2:1f:
                    19:bd:39:cd:20:ba:bd:09:bb:0e:ed:6f:83:a4:50:
                    1f:a7:79:aa:af:b6:e1:dd:92:4d:6c:ea:4d:6d:7f:
                    35:dc:03:19:d7:15:e7:eb:c4:5a:43:b0:a1:37:81:
                    46:77:a9:d6:b6:18:07:04:90:db:50:b0:93:5b:20:
                    80:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E7:D2:55:4E:44:3B:D3:56:2A:6F:CA:A7:78:AE:AA:BF:E0:05:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:f7:8b:6c:7a:8c:f5:d0:5e:6a:6b:5e:66:d2:ca:1e:1d:01:
         5e:ba:b7:f7:8e:18:a7:f3:ad:c7:9a:63:89:00:95:ff:9e:ee:
         71:f2:59:2a:42:41:19:bb:71:04:84:c8:6d:04:ea:35:89:a5:
         9e:0c:ac:e0:10:e3:ae:9c:58:64:57:5e:8a:bb:fc:f0:33:b9:
         42:50:e4:c1:9a:08:a2:7d:92:47:7b:8d:34:15:2f:19:6c:97:
         78:45:ef:9f:b0:8f:ee:91:b4:88:d8:42:7e:fa:01:a1:7e:11:
         74:98:f9:e4:6d:c1:2d:bf:17:fe:06:90:6f:bb:3b:28:21:62:
         7a:53:b0:cc:e2:00:8a:0f:22:02:a1:dd:40:61:e2:17:f7:9b:
         f2:21:a4:d3:4e:85:0b:04:16:68:39:b5:94:53:38:77:8c:64:
         8d:01:42:1a:8f:af:4e:6b:fc:de:23:6d:c1:68:14:76:6b:0b:
         e4:f3:20:0a:f6:39:f8:35:df:71:93:4e:7e:ba:3f:bd:23:53:
         b2:51:17:ff:10:54:dc:35:d7:21:10:66:44:94:8e:af:68:dd:
         56:a2:6e:68:c0:0c:2d:4a:7f:e1:4a:9f:6d:de:c4:6e:ea:8e:
         73:64:38:6b:f0:a8:d1:73:38:18:c3:ce:50:4b:80:e7:cd:e2:
         2c:36:12:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:01:12 2025 by rpki-client