Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/408e958e-b60e-30d3-bca9-4596afecccc4.roa
File:                     408e958e-b60e-30d3-bca9-4596afecccc4.roa (raw, json)
Hash identifier:          r6UM+Q2RhhWQSVDxtcO71Qhqc4TluJ4yurEBu5x4jPw=
Subject key identifier:   5E:7E:FF:9D:ED:95:8B:60:F5:C9:01:B1:F4:00:66:E4:AE:0F:93:21
Certificate issuer:       /CN=478a0a21-d101-464c-8706-25bb157545c8
Certificate serial:       010D0C9F4328584A56004EF9652D3534E4395500
Authority key identifier: 35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/408e958e-b60e-30d3-bca9-4596afecccc4.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     401457
IP address blocks:        2602:f7bb::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:4e:f9:65:2d:35:34:e4:39:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478a0a21-d101-464c-8706-25bb157545c8
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=f769d1f3-fa4d-4b7a-8089-e9ad2658554d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:70:11:20:51:1c:52:45:9f:fc:cb:9e:79:4b:
                    af:fc:b9:b6:5f:47:28:43:4d:5e:80:3b:2c:5e:b4:
                    0b:28:cd:b6:12:d3:21:e8:ea:26:4a:f8:1a:04:85:
                    13:12:52:0c:be:41:24:1b:cf:7c:18:0e:9c:0a:bc:
                    0d:40:9b:e7:1f:1c:23:fc:e3:55:a9:03:37:99:9a:
                    35:ea:df:46:59:68:b6:4d:f8:4e:d0:4a:5c:2e:ab:
                    82:c6:fd:f7:d8:e2:a9:1f:95:9f:fc:bd:f5:b5:38:
                    9f:c0:99:07:cd:ae:cc:80:ba:ce:1b:d2:97:05:66:
                    67:65:41:8a:13:e9:b2:26:d5:6e:88:bb:d1:84:c0:
                    80:5c:5e:d9:ed:1b:35:e7:45:26:bf:a1:15:00:d0:
                    80:77:ba:0a:0d:63:26:d0:0b:ea:64:db:42:cd:bc:
                    34:f5:eb:3e:38:2f:1f:86:73:04:31:bb:7f:59:f4:
                    a4:28:60:64:61:85:cc:0d:7c:b8:ec:59:09:b2:63:
                    5b:41:f4:69:c6:0d:75:37:c7:7c:ad:6c:79:49:3b:
                    9b:1d:c3:a0:97:05:1e:6a:06:fc:3b:dc:16:f9:05:
                    d2:88:c3:92:d6:56:a9:1b:5e:f9:95:f2:e3:3b:64:
                    13:82:8d:7f:75:14:5a:a8:70:e9:44:f3:03:a2:bf:
                    88:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7E:FF:9D:ED:95:8B:60:F5:C9:01:B1:F4:00:66:E4:AE:0F:93:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/408e958e-b60e-30d3-bca9-4596afecccc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.crl

            X509v3 Authority Key Identifier:
                keyid:35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7bb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:b3:68:06:8e:37:b9:cb:b4:07:28:64:4f:a8:32:58:97:79:
         9c:8c:fd:1d:4d:7e:9e:e6:a9:0f:82:59:66:0b:ad:84:85:d5:
         fb:97:6c:08:07:b2:ed:75:d4:43:cb:d9:25:f0:f8:dc:59:f2:
         95:13:34:5b:47:df:f1:c0:af:30:85:49:f2:a1:9a:71:60:7d:
         49:ec:9d:2c:04:d2:0b:bd:0b:2c:31:25:b5:a5:ee:f9:45:8c:
         bd:5c:6d:6c:07:00:16:13:14:f6:6e:57:dd:d7:6c:16:d7:cf:
         43:6c:41:74:85:dc:56:03:40:c4:9b:4d:be:27:3f:09:49:02:
         7e:b6:79:13:74:55:9d:46:e9:87:29:95:86:40:87:27:4e:92:
         f2:25:10:b1:23:84:c5:73:6d:ae:ec:af:cb:71:74:cb:44:c6:
         87:a7:eb:08:78:6d:20:00:76:21:3e:6b:25:2a:fe:bc:05:9f:
         be:2f:b0:47:7c:30:a8:d6:06:f8:66:26:99:6e:91:e0:18:69:
         55:ea:f9:34:97:a3:51:d5:0b:8a:06:02:70:9d:fc:80:18:14:
         45:e1:c4:85:66:3e:86:d5:5d:98:cc:26:09:e6:18:04:aa:44:
         1e:06:0b:30:50:0d:63:d8:3b:0d:e1:d6:a8:9c:b3:8a:e6:cb:
         cd:e5:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 05:57:59 2025 by rpki-client