Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/1014de78-11d5-32fb-bb1b-b0a18aa4c897.roa
File:                     1014de78-11d5-32fb-bb1b-b0a18aa4c897.roa (raw, json)
Hash identifier:          QdWgW0NRNmfPC2zExJyF+hObL6Y9/pD+RhML3eUhfT0=
Subject key identifier:   2D:BF:A3:B6:8C:50:B6:48:94:0B:C0:B8:E2:9E:BE:CC:D9:C1:56:4D
Certificate issuer:       /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial:       010D0C9F4328584A331AF3FA06DB89354A3B0900
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/1014de78-11d5-32fb-bb1b-b0a18aa4c897.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        2602:fa28:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f3:fa:06:db:89:35:4a:3b:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=5e314344-c789-4c9d-a1e5-bddc111524b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:63:35:3d:e9:8c:a7:fe:8a:0c:f8:b7:39:40:
                    20:6f:db:ed:20:bd:5d:62:4a:41:8d:e2:02:a1:20:
                    e7:7b:52:d8:26:75:68:14:44:45:5c:7d:4b:d7:b8:
                    e7:cd:16:42:45:38:46:64:31:ec:b0:8c:9f:3d:76:
                    21:57:fc:b3:4b:c9:e9:04:4a:1e:c3:f2:29:0e:a0:
                    c7:1a:1d:76:d2:58:44:9e:4d:cf:f6:ab:e2:dd:fe:
                    db:e4:7a:33:44:0d:9b:70:fe:50:37:9c:a1:50:b4:
                    c0:b0:30:48:59:ee:35:38:42:3e:86:d5:c3:d5:4e:
                    b1:e4:ac:10:8a:7d:e3:f7:ab:5f:1e:c6:d2:57:30:
                    70:99:c8:dd:46:ed:53:c6:de:da:f0:39:1c:a4:b4:
                    ae:52:a7:fb:d0:a8:1d:7c:50:3e:b1:bc:93:32:43:
                    d7:94:50:52:0f:ca:a4:dc:77:91:0f:cd:17:6e:d5:
                    f3:39:86:3d:ad:b7:15:2b:d1:eb:b5:f6:aa:16:1c:
                    54:da:69:ae:2e:1b:9a:72:42:4b:79:3c:d6:31:a0:
                    ad:4d:ba:1b:44:a0:40:41:9d:c0:36:d6:fa:4a:40:
                    81:cc:03:e1:79:77:e8:87:86:8a:c8:b6:d2:bf:65:
                    59:c0:95:c4:1e:b1:36:3f:df:7d:ab:87:9e:a1:a2:
                    9c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BF:A3:B6:8C:50:B6:48:94:0B:C0:B8:E2:9E:BE:CC:D9:C1:56:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/1014de78-11d5-32fb-bb1b-b0a18aa4c897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa28:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b0:34:17:25:fe:fe:30:50:91:d4:8c:8d:02:80:0d:bc:c4:
         1d:ce:b4:4a:94:f4:57:8a:ec:53:b7:59:85:09:32:bc:cc:60:
         4b:a8:1f:06:75:98:e0:59:3c:2f:79:9b:7b:4a:bc:ff:74:70:
         f9:cb:50:20:16:dc:fa:f8:de:94:60:48:78:97:23:f6:6c:22:
         dd:0d:73:d5:17:4b:b1:0a:aa:eb:f6:de:2a:50:67:62:89:e4:
         f5:43:bb:67:00:30:92:15:68:19:d6:a6:46:a2:10:4a:f8:bd:
         f2:e4:28:ab:cf:46:73:ce:bc:d9:20:ae:37:c1:2a:1b:18:fb:
         81:8a:57:30:af:b9:21:76:ba:3d:ec:8d:d1:60:43:43:f8:24:
         2f:57:60:cd:af:e5:c9:d6:16:09:eb:f9:57:c7:b9:e6:b9:28:
         22:33:8d:31:64:6e:84:67:ff:07:9b:27:1c:52:90:25:ee:ed:
         0f:1e:1b:bc:d0:08:69:ac:b9:37:f4:f2:db:38:8f:2a:56:cd:
         fe:93:ff:f5:03:d3:80:ab:8e:64:f0:a7:f3:30:29:32:5c:69:
         b1:a2:4e:60:09:be:ad:10:16:89:41:d0:00:37:32:71:06:44:
         40:12:e1:ca:83:44:e9:0f:62:de:01:b0:c8:91:23:2b:1e:e4:
         a3:f3:bf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:00:24 2025 by rpki-client