Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa
File:                     e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa (raw, json)
Hash identifier:          9tYqhTKVG/Js6w8H54gtXnzLcFfg/Aa1V6sljK4qrlA=
Subject key identifier:   1B:FA:4B:67:EE:E3:D9:AD:46:39:CE:E8:D3:04:DF:E5:1C:C1:1E:56
Certificate issuer:       /CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836
Certificate serial:       010D0C9F4328584A5765D536F1FC1CED711DF200
Authority key identifier: 6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     20417
IP address blocks:        2602:f7d1::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:d5:36:f1:fc:1c:ed:71:1d:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=55202b76-a9c0-4297-a4c0-5eade7729ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:03:1b:45:f8:da:11:b6:17:7b:93:c4:80:0b:
                    b9:58:a4:c4:38:a8:11:40:ad:1d:78:d7:3f:02:2b:
                    3c:69:44:a4:04:e0:d6:b7:8b:cd:f4:4f:ed:dc:30:
                    27:c5:11:da:4e:65:e3:6d:6a:dd:c9:2d:3f:a4:ac:
                    b2:e1:e9:9a:5b:d9:e4:dc:91:5f:14:9d:dd:30:93:
                    0c:e0:60:89:8e:db:46:6c:74:00:69:16:10:2d:47:
                    31:0f:34:32:58:02:88:da:0f:ef:36:38:52:5c:3c:
                    20:2f:25:b8:4a:56:b3:e0:53:40:01:3c:2f:e8:ec:
                    ef:87:a3:2d:d7:26:5c:64:29:34:d7:ca:62:f1:f0:
                    49:d3:be:08:b1:a9:01:ef:66:29:86:55:d6:26:5d:
                    ad:ad:0a:60:04:91:e3:f5:3f:a2:87:cd:aa:5e:8d:
                    78:f8:cd:b5:5e:e9:6b:3c:e0:15:44:fb:8c:9d:4d:
                    b1:33:15:c6:e6:06:35:2a:1e:22:ea:50:b2:8f:d5:
                    93:23:5c:ed:a6:c5:4b:b9:cc:28:92:38:56:49:9d:
                    80:57:92:02:b9:c2:f5:b6:42:ff:a5:22:95:94:fb:
                    38:54:94:55:25:b2:ae:29:46:87:f5:f9:6a:92:23:
                    16:0b:c2:e6:d2:0a:e1:af:c2:8e:18:ce:1c:b4:c4:
                    b4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FA:4B:67:EE:E3:D9:AD:46:39:CE:E8:D3:04:DF:E5:1C:C1:1E:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/e888c9e1-ca31-3769-89fa-4e80979f3f2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.crl

            X509v3 Authority Key Identifier:
                keyid:6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7d1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:df:72:ef:1a:6d:d1:93:fd:6c:09:51:2e:95:41:6c:53:8f:
         17:75:ec:18:cd:6e:13:9a:84:4b:5e:fe:21:d0:81:53:f2:e2:
         8c:25:4a:e8:3e:56:c6:ed:d9:37:02:82:c3:07:2d:fd:d5:96:
         00:a7:08:ad:48:b3:b8:7e:cb:e2:2a:ce:99:8b:97:44:fb:1b:
         8c:c6:76:73:e7:65:e0:1e:c3:4c:c1:3e:97:39:a7:31:bf:4a:
         8e:c4:f5:76:86:8f:b4:66:82:c4:16:a3:6c:95:48:22:20:27:
         02:c0:f5:8e:07:a9:e8:2a:01:81:14:e9:a1:f5:0c:b3:a5:4d:
         bb:db:a9:eb:45:0d:a3:b6:69:d0:88:3a:0c:52:73:26:7b:dd:
         eb:07:c4:0f:72:4d:3f:be:51:ef:4a:cb:e7:1c:37:58:43:ed:
         89:0b:fd:0d:e8:fd:8f:3e:f9:38:cb:2d:eb:2e:1f:76:3b:f6:
         9a:26:c9:25:e9:50:af:bc:9a:a3:c0:97:02:ea:81:c5:0c:bd:
         fb:5f:4f:7e:0a:29:c6:b0:c2:39:18:01:37:a6:f9:f9:00:10:
         00:39:cc:80:1d:f0:a4:22:90:b7:07:f2:2e:d1:2b:70:4a:d9:
         40:29:4d:28:d8:a7:50:69:56:13:87:9f:99:85:07:35:7c:78:
         5e:25:aa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:01:11 2025 by rpki-client