Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/31590441-0124-35e5-b8d5-3eac3f0d6c40.roa
File:                     31590441-0124-35e5-b8d5-3eac3f0d6c40.roa (raw, json)
Hash identifier:          u8MyvBtMMJITmBiE3ioskjjQOBlcVKcel/0iJaZ/HdE=
Subject key identifier:   E1:10:98:E4:39:50:F6:EF:14:51:59:40:B3:1F:0F:E1:99:F0:36:42
Certificate issuer:       /CN=1886e4bb-e8b3-46f4-8d9d-8d226295a982
Certificate serial:       010D0C9F43285849ABB4ACD731226E360F995440
Authority key identifier: 5B:59:46:55:98:AA:24:33:EC:67:68:B3:2B:CA:BD:F0:78:DF:89:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/31590441-0124-35e5-b8d5-3eac3f0d6c40.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     17290
IP address blocks:        2602:fa86::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/1886e4bb-e8b3-46f4-8d9d-8d226295a982.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/1886e4bb-e8b3-46f4-8d9d-8d226295a982.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:ac:d7:31:22:6e:36:0f:99:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1886e4bb-e8b3-46f4-8d9d-8d226295a982
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=2cadc44f-0028-4ba5-98d8-7cee5ef5b327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7e:b3:ec:0f:82:f6:ea:30:35:76:51:64:9d:
                    03:4c:0f:70:19:84:f0:ce:d0:44:ad:a7:3c:d9:3c:
                    3a:38:d6:18:71:b1:e2:b4:c9:ba:3e:3e:c2:4a:9a:
                    b8:b8:87:29:95:47:13:70:ec:f7:36:75:50:27:55:
                    9c:a9:d2:a5:59:b4:74:8f:54:49:36:65:41:0d:7a:
                    de:5b:e8:2a:4d:03:1d:1a:38:74:3e:86:b2:9e:dc:
                    9d:19:c0:5c:df:2b:3f:56:2d:ae:e9:79:0d:28:f3:
                    6e:04:2a:62:66:d7:36:af:40:b5:94:c6:44:14:77:
                    f6:1f:b7:15:a8:73:14:07:2a:01:6e:e1:64:ad:76:
                    74:92:26:49:af:41:58:8c:92:a4:85:cd:67:6a:04:
                    78:b5:05:a9:43:92:ad:dc:2a:06:d9:51:60:a1:d4:
                    0f:d7:60:8b:10:06:b0:c2:b2:fc:72:97:26:80:e2:
                    eb:63:48:f7:0a:a4:b7:38:06:d5:98:33:db:1b:1e:
                    ec:8c:29:e7:a9:d3:1f:0a:f9:4c:8d:75:c5:10:4b:
                    f5:58:d1:24:87:45:c8:36:f9:16:71:60:d2:13:1e:
                    e7:fc:49:0a:b2:a2:9f:29:e9:4c:dd:bf:fb:08:13:
                    65:b4:e6:eb:91:1a:bd:77:76:ef:e1:5c:65:64:de:
                    94:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:10:98:E4:39:50:F6:EF:14:51:59:40:B3:1F:0F:E1:99:F0:36:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/31590441-0124-35e5-b8d5-3eac3f0d6c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/1886e4bb-e8b3-46f4-8d9d-8d226295a982.crl

            X509v3 Authority Key Identifier:
                keyid:5B:59:46:55:98:AA:24:33:EC:67:68:B3:2B:CA:BD:F0:78:DF:89:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa86::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:13:a3:03:fe:d0:74:ad:bb:e1:05:ee:38:44:fb:13:86:55:
         91:9d:e5:ff:fd:a2:08:b3:7c:68:e9:0c:0b:b0:9b:7a:de:c9:
         d7:a4:f9:1c:90:ae:e5:a1:0f:41:e5:04:2f:89:4b:83:1d:57:
         7f:a0:3a:d7:6d:ae:44:0b:46:6b:da:92:0c:ac:a7:7d:ab:0f:
         b1:7f:d9:ec:eb:39:ec:25:5c:b4:02:49:91:2e:5b:86:ec:2b:
         c0:49:77:49:45:72:33:85:27:ca:b7:1b:6d:62:34:bc:42:f8:
         12:0c:00:de:4b:a3:26:e7:35:da:5c:39:5d:6a:41:ca:a4:69:
         92:14:b7:01:13:0b:0d:27:e8:ee:8b:b8:a0:a7:57:0b:39:0f:
         d5:e6:a1:c7:1e:6d:9b:85:a6:2d:de:c2:05:ab:e4:6d:9f:ee:
         7e:67:d3:7b:5e:79:f5:90:53:5f:dd:bd:a6:6d:4d:71:86:16:
         7b:28:b7:71:df:3f:6b:6e:e2:ab:cf:30:26:17:3d:48:58:90:
         7c:15:06:8b:80:69:6d:d3:c4:e8:f3:b4:6d:c9:ef:c8:86:98:
         5c:86:6b:d2:04:f2:99:8c:17:ff:9c:48:96:72:6f:03:50:56:
         ac:35:b1:f1:f5:b0:28:8b:b6:6d:56:e6:4f:41:07:26:28:8b:
         6c:57:1d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:55:48 2025 by rpki-client