Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/78e2fe0c-aef2-3db5-aacb-b2bbba218c22.roa
File:                     78e2fe0c-aef2-3db5-aacb-b2bbba218c22.roa (raw, json)
Hash identifier:          CKZgtX1UPwWIY59ODSILOBa+fDsXkyFxzeWav+ejeRw=
Subject key identifier:   E8:F3:64:85:3B:B1:1E:37:54:CB:8E:F9:7E:BE:45:03:38:D1:5F:8C
Certificate issuer:       /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Certificate serial:       010D0C9F4328584A10354B7AD8EEE8067FE0E880
Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/78e2fe0c-aef2-3db5-aacb-b2bbba218c22.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     47614
IP address blocks:        2602:2d4:800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:4b:7a:d8:ee:e8:06:7f:e0:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=61dbac53-98c2-4355-99d5-e4d73b414faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:13:61:42:90:d0:55:93:14:38:db:e8:c5:b2:
                    86:8a:5b:50:5f:1a:85:96:2e:7d:d8:c6:bf:db:3f:
                    56:8f:ef:4f:e3:34:0c:96:77:fe:38:c6:03:3d:02:
                    f1:cf:d5:39:b4:41:a7:6a:f8:17:ed:59:63:bf:25:
                    22:c4:40:88:12:32:b3:2d:e1:a7:83:d1:71:36:46:
                    d0:9e:b8:e9:b9:76:71:07:cb:35:9a:47:c9:f1:3e:
                    de:ee:57:d3:36:72:d7:39:76:f8:49:eb:28:a0:84:
                    f5:b2:fa:05:3a:6e:f6:7f:cb:5e:42:81:6b:ec:4f:
                    f0:cb:08:3a:0b:76:9c:80:61:91:c4:2a:88:56:30:
                    f7:6f:ff:78:fc:3d:34:d0:59:d8:7d:1e:00:52:e5:
                    08:1e:bb:f7:a0:75:04:a9:5e:80:ff:6e:a5:18:0b:
                    8c:d0:6e:4d:3a:0f:cf:07:29:8f:f7:fd:17:32:30:
                    2e:7f:34:91:44:7c:31:74:38:0a:79:3c:3b:73:83:
                    6b:08:b5:11:24:5e:45:db:07:f8:f1:7e:bb:e6:15:
                    d9:45:f3:45:39:3c:c2:b0:be:fb:8f:8c:9e:e3:75:
                    ab:4b:70:40:eb:90:f4:e8:c1:cc:73:2f:8d:03:a9:
                    a9:bb:3d:fd:6f:ee:2c:fe:f8:c7:c8:80:2f:25:b2:
                    da:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F3:64:85:3B:B1:1E:37:54:CB:8E:F9:7E:BE:45:03:38:D1:5F:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/78e2fe0c-aef2-3db5-aacb-b2bbba218c22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d4:800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:88:ac:f5:69:9e:2f:57:c8:bb:6e:cf:39:93:3b:95:d5:fa:
         3c:88:76:92:13:22:91:3f:15:77:d2:fa:47:2d:1b:ea:a9:b1:
         39:87:f5:78:bf:9a:ed:74:51:42:da:75:31:70:2f:cc:43:5f:
         68:bb:fc:14:4e:f5:64:06:9c:a1:b4:d6:6c:2e:08:74:ee:9c:
         f1:f6:1e:f3:9f:b0:9c:2a:fa:28:e0:6f:e7:4a:13:33:25:e0:
         dc:a1:db:78:ba:9f:8b:74:44:bc:25:1f:ed:98:ba:5a:2c:21:
         a5:d9:10:5c:28:b3:d7:a5:84:22:eb:35:dd:98:7f:3d:6f:b0:
         52:94:d3:23:00:18:b2:3e:49:af:3b:a8:23:31:a5:78:9f:14:
         28:5e:84:8d:45:3b:a4:45:d1:42:50:f5:3d:5a:a3:ee:5b:15:
         6c:7f:f0:b3:e6:b1:0e:c9:90:f6:8e:ca:de:f8:bd:d7:b1:19:
         92:f3:bb:d6:c1:86:0d:e8:16:e3:61:0d:50:d6:09:48:2f:79:
         fa:d7:34:68:08:5b:18:33:b2:e7:e5:5c:55:f7:f3:cb:69:a4:
         e0:e8:05:4f:25:06:0e:58:2e:33:3c:ca:50:b3:c7:c6:12:d4:
         70:19:73:99:86:bc:70:49:0d:25:46:42:7e:3c:8c:45:73:9c:
         8f:d2:5e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 21:48:37 2025 by rpki-client