Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/510659c6-d025-4892-98a2-b83635b198be/1f8b4ac1-b5f7-38fc-b016-0b9f6c7f85ef.roa
File:                     1f8b4ac1-b5f7-38fc-b016-0b9f6c7f85ef.roa (raw, json)
Hash identifier:          uLmeOjHLZJrK5GS7JhcmQnWT/78eQp8nhhZCZ7S1SUs=
Subject key identifier:   04:8C:34:F6:D2:BE:C8:BC:1A:68:4F:A0:BC:90:B7:86:B6:17:99:EC
Certificate issuer:       /CN=510659c6-d025-4892-98a2-b83635b198be
Certificate serial:       010D0C9F4328584A03A557D9125EA58DF9D06280
Authority key identifier: DE:28:6B:90:66:17:87:2B:37:0D:92:8E:28:B9:78:9F:48:24:37:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/510659c6-d025-4892-98a2-b83635b198be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/510659c6-d025-4892-98a2-b83635b198be/1f8b4ac1-b5f7-38fc-b016-0b9f6c7f85ef.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     22729
IP address blocks:        2602:81a:3000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/510659c6-d025-4892-98a2-b83635b198be/510659c6-d025-4892-98a2-b83635b198be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/510659c6-d025-4892-98a2-b83635b198be/510659c6-d025-4892-98a2-b83635b198be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/510659c6-d025-4892-98a2-b83635b198be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:57:d9:12:5e:a5:8d:f9:d0:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=510659c6-d025-4892-98a2-b83635b198be
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=36afa37b-36e6-47a2-bfbd-95ff84531b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1d:57:0a:86:81:15:76:40:e4:50:86:d8:bc:
                    76:9e:8e:fd:91:1b:c7:db:40:af:98:31:e2:92:a7:
                    33:b6:8b:1b:5e:ee:f3:ab:89:c6:26:75:81:20:d2:
                    25:c6:6a:b5:a4:f2:e1:45:6c:d6:51:63:67:bf:ab:
                    f7:8e:40:51:fb:2b:49:e5:97:5c:bd:e6:e5:88:af:
                    fc:ee:75:ac:b9:7d:6b:48:4c:8a:5d:53:ba:8f:01:
                    a7:b7:5a:90:f3:3a:f4:b2:da:47:3c:56:c5:c0:7c:
                    4f:db:65:7e:71:dd:e1:0f:8d:c4:e4:b9:5a:ad:0d:
                    a9:29:9a:a2:5e:75:99:d3:3f:e0:09:7c:87:f1:07:
                    08:ae:79:31:4c:08:7d:0e:e1:a2:5d:9d:f4:fe:4a:
                    e5:b3:39:70:00:83:40:ff:28:45:07:ac:6d:27:0f:
                    a7:e3:19:72:21:86:77:79:40:06:8e:64:4a:89:9b:
                    df:5b:e5:13:89:1c:10:16:66:f7:1c:0b:c5:7b:60:
                    ae:f6:81:74:03:62:6b:53:bb:32:e2:08:c3:8c:95:
                    a9:bc:f2:fa:e6:84:1c:70:18:46:c8:2e:b9:52:17:
                    fd:d0:9e:86:45:a1:aa:97:d9:1f:f1:20:4a:f8:b1:
                    30:b2:5b:e8:65:bf:d4:42:93:da:bb:78:00:7e:e0:
                    ab:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8C:34:F6:D2:BE:C8:BC:1A:68:4F:A0:BC:90:B7:86:B6:17:99:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/510659c6-d025-4892-98a2-b83635b198be/1f8b4ac1-b5f7-38fc-b016-0b9f6c7f85ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/510659c6-d025-4892-98a2-b83635b198be/510659c6-d025-4892-98a2-b83635b198be.crl

            X509v3 Authority Key Identifier:
                keyid:DE:28:6B:90:66:17:87:2B:37:0D:92:8E:28:B9:78:9F:48:24:37:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/510659c6-d025-4892-98a2-b83635b198be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81a:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:fa:5f:d1:59:23:4a:9a:39:b7:26:ae:79:5e:2e:54:de:2b:
         b0:5a:48:0d:f0:53:c9:69:33:c9:c5:66:12:c4:9f:dc:45:b9:
         83:3a:1a:a8:16:91:73:dc:dd:00:b4:3f:56:af:e9:e8:2d:aa:
         3a:3b:c3:5d:ab:4c:ab:c7:39:01:a3:98:25:fe:be:68:63:f3:
         c0:0b:c0:ee:14:04:64:fe:7b:77:db:59:37:e0:f5:c5:80:79:
         ef:6d:23:3e:23:a2:b4:e0:46:b0:25:3e:70:55:3c:ef:d7:dc:
         5d:39:8e:95:e8:25:fe:59:d6:72:f6:67:16:1e:95:d2:30:48:
         ea:4d:5d:04:97:df:14:f8:d3:43:5e:b4:90:b5:23:88:90:6a:
         39:29:ba:f6:b6:cb:f1:78:19:2f:cf:81:e5:77:05:63:e0:6b:
         e6:85:82:4b:ca:0c:7e:83:9b:ec:fd:36:a9:1a:11:70:c8:7c:
         21:65:50:86:4f:4d:f3:a1:6a:be:9e:18:43:bc:a7:fd:e2:1b:
         51:c8:cf:42:e8:2f:3e:73:e1:7b:6e:71:e7:48:67:00:77:db:
         a6:a5:bd:c0:8f:8c:a9:3a:d4:fd:ac:5b:d7:f5:37:86:55:a4:
         e7:20:22:e2:bc:cb:99:0e:54:e8:b2:af:e7:67:7b:ed:55:c3:
         d6:f9:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:09:25 2025 by rpki-client