Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/a795d652-aec5-344a-8f1b-02328428e50c.roa
File:                     a795d652-aec5-344a-8f1b-02328428e50c.roa (raw, json)
Hash identifier:          dkIgCqZIutxIO9IpSP36gR4KOqZMD/Awf8aPc1OXhPg=
Subject key identifier:   70:D6:12:B5:AF:2D:9C:FB:6D:9D:FD:A7:B7:75:B0:54:04:57:3C:78
Certificate issuer:       /CN=3cb45979-c30c-4872-8a79-7c08e9178605
Certificate serial:       010D0C9F432858496B7ED53F2A0CCA32174498F0
Authority key identifier: F3:4E:B7:22:17:4A:31:6F:0B:06:40:68:0B:62:CE:DF:A8:10:3D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/a795d652-aec5-344a-8f1b-02328428e50c.roa
Signing time:             Sat 05 Apr 2025 01:00:47 +0000
ROA not before:           Sat 05 Apr 2025 01:00:47 +0000
ROA not after:            Fri 04 Jul 2025 01:00:47 +0000
asID:                     32169
IP address blocks:        2602:f8ee::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/3cb45979-c30c-4872-8a79-7c08e9178605.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/3cb45979-c30c-4872-8a79-7c08e9178605.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6b:7e:d5:3f:2a:0c:ca:32:17:44:98:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cb45979-c30c-4872-8a79-7c08e9178605
        Validity
            Not Before: Apr  5 01:00:47 2025 GMT
            Not After : Jul  4 01:00:47 2025 GMT
        Subject: CN=d27f679a-e662-4d39-8d60-bbd16d65304a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e4:8b:64:24:53:68:a2:d3:eb:69:81:c0:e6:
                    ed:69:ac:37:a4:ff:68:2b:6e:bb:1c:46:16:0f:d5:
                    e1:66:51:41:fc:24:14:cc:76:88:2e:a0:a8:94:13:
                    20:48:92:85:a7:28:b2:29:c1:25:d9:1c:84:20:ed:
                    61:ba:4b:49:cc:db:3c:3d:67:3d:9a:a3:49:7f:10:
                    c9:68:c2:0a:e2:6d:f9:12:f5:b0:be:b4:16:10:af:
                    e1:f4:c4:28:38:c4:a8:48:4d:27:fd:43:09:5d:c8:
                    46:df:a0:72:b9:4c:63:19:29:ce:ec:b0:67:30:56:
                    ee:c4:8a:ba:ec:6c:b3:24:8d:ee:84:33:d5:2c:78:
                    5a:f3:88:42:08:a2:bc:0c:bb:1f:b0:4d:5d:68:02:
                    a4:e5:83:ca:49:48:6e:ec:e1:e8:bf:76:47:fb:6e:
                    4b:e3:fa:ef:c1:73:5e:f5:01:39:df:8c:be:06:8b:
                    3d:6a:f7:c4:2b:0d:c4:55:72:d0:b5:4a:e4:ac:34:
                    1d:dd:ee:92:31:d5:8c:bf:59:3d:a7:50:5e:33:00:
                    ec:d6:73:18:9f:48:fd:5d:36:9d:ad:ec:83:1b:72:
                    94:5d:97:2a:68:6d:fc:92:3c:75:7f:ae:f6:62:66:
                    d6:6b:82:43:38:f3:69:ba:a5:91:61:eb:5b:51:46:
                    9d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D6:12:B5:AF:2D:9C:FB:6D:9D:FD:A7:B7:75:B0:54:04:57:3C:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/a795d652-aec5-344a-8f1b-02328428e50c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605/3cb45979-c30c-4872-8a79-7c08e9178605.crl

            X509v3 Authority Key Identifier:
                keyid:F3:4E:B7:22:17:4A:31:6F:0B:06:40:68:0B:62:CE:DF:A8:10:3D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3cb45979-c30c-4872-8a79-7c08e9178605.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ee::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a0:d7:0c:cb:9a:8a:a3:09:a3:dc:1f:bd:0e:bd:16:51:4e:
         c9:96:f4:af:c1:27:64:b7:1d:f9:65:2a:ab:bc:3c:44:7a:e5:
         e6:9a:67:f1:fb:f2:85:9d:6a:4f:ca:11:2d:b5:f5:88:f6:87:
         71:31:94:dc:4a:a3:4a:7d:8f:01:08:31:11:fa:34:6e:35:5c:
         de:db:9a:d4:41:ce:0e:e6:c2:24:ec:cd:b6:91:02:50:4c:6f:
         5f:29:12:73:c1:c9:ed:14:42:6f:4b:09:bb:5d:a1:12:c4:bc:
         99:6b:75:7d:9e:89:09:07:71:14:fb:34:ac:bb:c2:09:f2:38:
         ba:7a:11:3c:e5:91:04:73:c9:9e:a4:82:f8:94:ba:48:df:bb:
         63:09:38:f6:e6:69:18:8b:f0:62:52:35:ac:71:ab:36:20:2f:
         a4:bb:e2:b2:4e:f9:ff:63:77:8b:6a:a2:3f:7b:d4:88:53:27:
         20:d1:ff:ff:24:30:42:ec:62:72:41:bc:f5:a8:c7:cb:93:5b:
         0f:4f:b1:16:90:c1:3c:69:d7:ea:fd:b8:21:48:68:92:ae:28:
         c8:d3:ae:6f:d5:bd:09:89:57:3e:0c:b6:a0:ac:42:63:18:40:
         ff:79:ca:ba:ef:fd:ae:c8:79:10:f6:8e:21:07:54:22:b6:f4:
         f5:06:9f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:26:34 2025 by rpki-client