Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/0f1b7eba-cf41-35c8-ba66-e6a62a5667a1.roa
File:                     0f1b7eba-cf41-35c8-ba66-e6a62a5667a1.roa (raw, json)
Hash identifier:          S54CVgPtaZCFYs9ffDaEAUdLVxPpYthx7Msaw4ZUgZo=
Subject key identifier:   72:99:EE:61:DD:7B:23:E5:22:00:9D:73:EF:4C:D9:6B:4F:62:14:99
Certificate issuer:       /CN=bcef91a5-9f6b-4911-9826-8aaa385bb35c
Certificate serial:       010D0C9F432858498CFF1EFCDA3163C57AF44E80
Authority key identifier: 2F:16:EB:E9:C7:84:72:20:5B:44:D7:FD:68:CD:0F:4B:AB:C5:EA:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/0f1b7eba-cf41-35c8-ba66-e6a62a5667a1.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     7992
IP address blocks:        2602:f7e0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/bcef91a5-9f6b-4911-9826-8aaa385bb35c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/bcef91a5-9f6b-4911-9826-8aaa385bb35c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:1e:fc:da:31:63:c5:7a:f4:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcef91a5-9f6b-4911-9826-8aaa385bb35c
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=94a8a436-aef5-46e5-9c73-162dcd2140df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b8:b5:a5:4c:45:50:ed:7c:8a:b2:06:18:24:
                    88:d4:36:58:26:25:98:d4:70:fa:ac:1a:a7:aa:e3:
                    86:af:42:c7:04:75:c8:de:74:9a:c9:44:f0:26:68:
                    d0:04:bd:bc:49:8a:b4:2a:a4:23:fe:ef:84:f6:49:
                    f0:66:8f:58:09:c9:40:21:16:8e:23:88:ae:05:30:
                    f8:6e:14:43:be:8b:ea:aa:b0:52:92:6b:2d:c0:cd:
                    49:6a:66:ca:38:e9:80:0a:7d:04:33:8e:12:b7:73:
                    1b:3a:83:35:b9:fd:f3:fa:75:af:7a:37:f2:c6:ca:
                    9c:cc:56:06:3e:87:a3:2c:f0:73:12:91:75:af:fa:
                    cb:d0:6e:a2:3c:7f:96:35:3f:08:53:5f:92:9a:d5:
                    7e:b7:2a:64:11:94:38:73:43:80:af:a5:44:a4:80:
                    0a:56:ef:89:89:5d:e1:c5:90:2d:cc:2b:bd:67:2c:
                    60:a8:0b:8e:c6:4b:ae:7a:90:29:7d:b4:1f:69:60:
                    b1:af:e2:62:6d:93:38:17:00:4e:db:e4:74:9f:f5:
                    69:cb:93:88:1d:3d:4f:8d:83:2e:e7:50:af:93:ed:
                    a5:44:85:ad:5c:a5:eb:15:3f:f2:56:64:36:11:e2:
                    db:29:44:ef:a0:ab:b2:02:67:03:aa:5c:30:00:ba:
                    b0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:99:EE:61:DD:7B:23:E5:22:00:9D:73:EF:4C:D9:6B:4F:62:14:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/0f1b7eba-cf41-35c8-ba66-e6a62a5667a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/bcef91a5-9f6b-4911-9826-8aaa385bb35c.crl

            X509v3 Authority Key Identifier:
                keyid:2F:16:EB:E9:C7:84:72:20:5B:44:D7:FD:68:CD:0F:4B:AB:C5:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7e0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:c1:1f:89:79:a3:cb:05:ae:df:74:ae:9f:00:32:1f:b2:60:
         7a:b1:25:03:3e:ba:af:81:5b:5a:9d:99:5c:b0:54:23:c3:80:
         cf:b2:8d:c0:eb:89:e7:e4:b5:10:0e:a2:b9:a2:b3:4e:72:3f:
         73:8b:a4:54:70:61:43:f1:d8:f1:91:4d:71:b6:28:51:01:5d:
         44:b4:3f:17:e4:20:0c:0f:fd:d9:8c:f2:b1:50:3d:b5:43:8d:
         c9:a1:f2:35:51:ed:26:fa:d7:01:ab:cd:bc:f8:c2:2a:0d:2d:
         3c:70:bf:55:db:06:cc:47:4b:87:87:06:d2:04:14:98:4c:b5:
         df:f9:53:57:bc:f9:3b:02:e9:13:fa:df:56:49:8f:91:86:bb:
         90:f5:be:84:6b:73:98:51:fe:ba:ba:f4:a1:f0:b1:43:9b:0e:
         24:c2:85:fb:0f:74:a5:f7:dd:e9:6b:3c:72:de:c7:0d:3c:17:
         36:6a:aa:35:ff:b7:22:18:cf:26:9c:52:61:63:aa:c4:46:15:
         ff:71:5e:4c:64:c9:95:d8:19:cf:32:d6:53:26:48:ef:5e:d5:
         8b:e1:da:ef:c9:c0:76:80:e5:2f:e8:8b:49:ed:73:ec:91:5d:
         66:45:38:78:4a:dd:27:a8:80:a4:35:dd:02:86:b5:7f:6e:25:
         99:0e:58:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:52:56 2025 by rpki-client