Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91/f43d3efe-127c-36ce-b036-7fdeb7e9cd5c.roa
File:                     f43d3efe-127c-36ce-b036-7fdeb7e9cd5c.roa (raw, json)
Hash identifier:          CaHJuGUu2dcPBpJCfjMAsT8B1unmffDZRqgfTX3qYAA=
Subject key identifier:   FF:3B:99:7F:9E:6C:32:00:18:3D:8C:63:B3:AF:B7:0B:45:8F:39:41
Certificate issuer:       /CN=755eca47-6eba-4778-8dff-927bd8a57a91
Certificate serial:       010D0C9F4328584A3CE02B2406A2FA7FA1D42E80
Authority key identifier: 69:BC:6C:6F:04:F5:B8:77:E4:3E:99:31:33:B3:7B:C5:A6:CB:ED:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91/f43d3efe-127c-36ce-b036-7fdeb7e9cd5c.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     25644
IP address blocks:        2602:f85d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91/755eca47-6eba-4778-8dff-927bd8a57a91.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91/755eca47-6eba-4778-8dff-927bd8a57a91.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:2b:24:06:a2:fa:7f:a1:d4:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=755eca47-6eba-4778-8dff-927bd8a57a91
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=d10731b4-fb8d-49b5-9227-fc0cbd55d862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b3:4b:75:83:74:28:5d:fa:79:17:a4:50:03:
                    b3:ba:89:1b:51:8d:7a:0c:af:6c:b7:b9:21:59:18:
                    da:8c:79:24:37:98:8a:88:44:00:6c:b6:b8:5f:4d:
                    19:49:75:e6:37:c2:fd:96:c3:bb:35:12:1a:70:b7:
                    fb:aa:27:8a:89:43:3b:4f:15:20:85:4f:a4:0c:ab:
                    89:25:30:29:05:04:21:ff:06:94:32:a0:ed:2d:6c:
                    99:51:63:42:54:26:f4:e3:d7:4a:49:c9:f1:26:12:
                    d7:78:ea:11:d4:24:9c:66:52:49:74:3c:5e:3f:cc:
                    f4:7f:20:cf:16:44:1e:65:27:76:dc:34:85:b0:b9:
                    b8:11:1d:85:7d:c2:ac:40:1d:aa:29:b4:04:b6:86:
                    31:20:72:90:d2:48:e3:cd:60:1d:cc:d4:c9:df:18:
                    f2:4c:ba:9d:26:6c:ee:fe:6e:36:33:89:e0:3f:f5:
                    74:fa:6e:26:1b:d7:0d:4c:17:a0:d1:a7:14:76:97:
                    e4:ff:11:43:5b:16:68:e3:99:a5:43:7e:69:96:bd:
                    3f:14:ed:12:a8:aa:50:12:76:2c:c3:45:c3:a8:bd:
                    ed:90:17:d4:ff:5a:b0:5b:d6:ed:db:e2:ab:5f:82:
                    da:3e:f8:ab:51:31:69:6d:b4:ca:a3:70:52:4e:21:
                    82:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3B:99:7F:9E:6C:32:00:18:3D:8C:63:B3:AF:B7:0B:45:8F:39:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91/f43d3efe-127c-36ce-b036-7fdeb7e9cd5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91/755eca47-6eba-4778-8dff-927bd8a57a91.crl

            X509v3 Authority Key Identifier:
                keyid:69:BC:6C:6F:04:F5:B8:77:E4:3E:99:31:33:B3:7B:C5:A6:CB:ED:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/755eca47-6eba-4778-8dff-927bd8a57a91.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f85d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:5e:3a:4a:bd:e4:06:ea:be:fa:be:b6:24:89:85:e8:09:78:
         e9:94:57:17:55:60:e6:de:bc:bc:38:b2:be:41:4a:4d:d5:3f:
         51:54:70:9f:40:77:6b:5b:bf:12:bb:84:91:81:d2:90:46:10:
         c0:16:07:96:02:68:81:a5:5d:29:19:2f:ab:ae:32:84:6d:3e:
         e1:0a:87:d5:4c:56:97:92:6f:88:63:de:81:b9:38:6d:e6:59:
         64:e0:3e:3e:71:47:e1:a1:b6:b0:02:cd:83:85:f8:e3:6b:8e:
         f2:dd:d3:75:62:36:06:1c:a2:e8:e9:77:49:0f:dd:fa:c1:4e:
         f0:b7:22:c4:dd:b9:02:ee:1c:70:a5:78:e6:69:54:e6:c4:be:
         18:96:a8:21:f0:37:12:28:7b:74:31:c8:5b:87:93:a8:4f:70:
         a8:30:5a:b0:7c:8f:94:c0:3d:c4:a1:e4:8e:47:be:48:90:ec:
         2a:cb:25:71:64:ba:ba:48:6d:22:f8:77:b3:5c:04:c7:c9:17:
         b9:da:ca:73:b9:d6:02:b5:6c:f7:92:e2:20:d3:f0:33:46:ce:
         a3:0e:47:16:5b:c3:1a:9c:99:93:32:d3:0d:33:cd:49:d5:49:
         1f:e4:0b:11:16:87:42:da:f2:91:88:8d:6e:0f:fb:08:65:7c:
         27:7e:99:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:05:51 2025 by rpki-client