Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/9f818511-3e38-3a87-853b-81a583a9f024.roa
File:                     9f818511-3e38-3a87-853b-81a583a9f024.roa (raw, json)
Hash identifier:          s1+0A1HY9ZbEn2XMQ6vmo/H9lRzMg49+OqQoa8z7u+U=
Subject key identifier:   E1:6E:EF:72:55:06:06:4E:4D:1D:D6:41:1F:76:23:7E:52:54:21:48
Certificate issuer:       /CN=d575d3fa-017d-4991-9edf-39101e5d78b5
Certificate serial:       010D0C9F432858498A3463CD89C4BAD000282C00
Authority key identifier: C2:41:8E:88:B9:1B:DD:01:9C:03:04:B5:4A:04:B2:CC:F9:4E:2D:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/9f818511-3e38-3a87-853b-81a583a9f024.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     401461
IP address blocks:        2602:f7b4::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:63:cd:89:c4:ba:d0:00:28:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d575d3fa-017d-4991-9edf-39101e5d78b5
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=cc24e4d3-dc42-4570-810a-98d7c4d0ffec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d8:c3:0e:db:36:d5:e3:1f:e9:0e:a9:72:28:
                    d0:64:7d:8a:2c:87:c8:c6:99:14:7c:88:4d:00:81:
                    85:99:63:01:b4:d0:7c:7a:10:fb:0d:c4:77:b3:46:
                    aa:59:48:77:f3:63:78:04:09:37:09:1c:a5:84:cb:
                    e5:5f:dc:34:df:27:3e:ec:f3:4a:f7:e5:d8:2b:d1:
                    9f:4b:c8:4a:64:d2:3f:86:03:ee:50:17:fd:dc:4c:
                    f4:e2:fe:c2:3d:f6:32:7b:4f:1d:0c:3e:0e:25:00:
                    8f:78:4b:b8:6f:0f:10:5d:b3:b6:f3:51:70:5f:c3:
                    ed:97:e4:5c:ce:cf:00:2c:ba:69:05:13:0a:1c:98:
                    ed:ec:36:c6:2d:19:3b:43:a0:d2:58:9e:d8:49:30:
                    9a:5f:3d:60:b9:1e:09:31:2d:89:61:5f:5b:6a:db:
                    9d:e4:9d:ef:68:86:92:4d:bf:ce:51:13:e9:15:e4:
                    04:12:c3:3c:29:c4:87:d5:d7:f3:61:71:58:2c:53:
                    a2:3d:81:a8:13:e2:57:9a:f6:50:12:bc:da:75:dd:
                    4d:7b:aa:97:29:71:f6:af:7b:ee:b2:7a:9a:b7:3e:
                    f3:04:72:8d:13:56:f1:7b:ef:7b:f7:2e:02:a1:b0:
                    e4:a4:16:6a:5a:5b:bf:23:6a:57:19:d1:01:66:3b:
                    7a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6E:EF:72:55:06:06:4E:4D:1D:D6:41:1F:76:23:7E:52:54:21:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/9f818511-3e38-3a87-853b-81a583a9f024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.crl

            X509v3 Authority Key Identifier:
                keyid:C2:41:8E:88:B9:1B:DD:01:9C:03:04:B5:4A:04:B2:CC:F9:4E:2D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7b4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:aa:fd:f3:ba:1f:0f:a7:10:3d:90:07:04:06:aa:8c:7b:17:
         18:b1:be:c5:5b:b0:15:c0:d0:e4:34:c5:9a:6e:ab:3d:cf:bd:
         35:d8:a3:2b:65:0b:c4:80:00:71:cf:3e:da:fd:57:c0:dc:3d:
         58:e1:e6:98:14:2f:d0:dd:5f:1a:4a:49:8f:8f:fc:4a:fa:a9:
         f9:24:99:b2:62:fa:0d:4a:d2:8d:38:f4:1a:61:ba:47:90:ef:
         03:79:5d:50:c3:65:6f:91:97:73:a5:78:af:4f:10:18:23:ae:
         9f:aa:a5:66:73:79:52:29:9f:b5:02:8a:4c:49:10:a0:36:06:
         b2:5f:18:63:eb:65:f0:03:89:f4:2c:1e:dc:62:cc:8a:b2:c6:
         52:22:02:c0:da:81:20:6f:bc:7e:f3:b0:1e:c7:6f:51:ed:43:
         76:7b:31:85:21:67:86:56:c0:b4:a4:29:62:ad:76:dd:cf:6f:
         33:4c:53:f5:8a:15:ba:a4:8e:61:c6:cf:1c:b9:84:bb:b0:a5:
         ca:9c:40:d6:57:2b:73:4f:80:c4:8b:8a:c4:d1:a2:81:b1:eb:
         59:72:df:86:22:86:d4:71:ef:c4:bd:22:c9:df:eb:af:23:d0:
         5a:df:86:9c:11:8a:91:76:7c:a5:dd:8d:86:18:51:43:eb:dd:
         8f:6d:4e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:23:36 2025 by rpki-client