Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/6e971fc1-df5a-3890-ad2c-de395e1e2134.roa
File:                     6e971fc1-df5a-3890-ad2c-de395e1e2134.roa (raw, json)
Hash identifier:          Grt0OXcpBCr/GHOQx3xJDKj5MKEAY5IxncetJyFpj4M=
Subject key identifier:   E8:F8:23:22:CE:19:C5:DF:BA:3B:A2:5A:23:AC:BA:A5:1F:EE:EB:88
Certificate issuer:       /CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
Certificate serial:       010D0C9F43285849B14A02F13FA9A6F047255780
Authority key identifier: 64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/6e971fc1-df5a-3890-ad2c-de395e1e2134.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     22462
IP address blocks:        2602:fec6::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:02:f1:3f:a9:a6:f0:47:25:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=4f57b908-d1dc-4ed4-8cd4-9fcdf4509d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fe:ae:fa:d4:b3:59:1c:62:25:d1:98:8c:34:
                    6a:da:44:b2:61:7b:00:cb:a8:ab:33:9d:9c:40:a4:
                    08:66:6d:64:83:45:bf:17:5e:78:4e:eb:6f:4a:33:
                    0d:26:06:23:32:36:39:5e:8a:5b:c2:b5:c2:50:95:
                    d2:d9:2e:8b:a3:b8:5d:07:20:79:1d:a2:35:23:d2:
                    57:57:c1:89:40:cd:6d:08:3d:fa:70:29:6f:aa:7b:
                    e8:7d:6f:d1:5b:64:a9:4e:54:d0:1a:5b:20:06:a9:
                    16:c8:31:62:93:1a:a6:e3:e2:83:4a:c1:26:c5:31:
                    49:8f:24:5b:e9:33:80:df:c5:68:79:40:4f:96:4e:
                    62:e1:91:b2:80:b6:83:c1:91:75:5b:b4:05:82:89:
                    94:6d:bf:57:05:04:05:0b:33:d2:58:97:d9:27:c6:
                    aa:d0:77:b0:c0:84:3b:83:8a:87:f7:5b:10:bf:30:
                    70:5b:bb:5e:01:8e:0f:e6:da:ba:33:1a:d7:c2:e8:
                    e5:d6:56:19:f2:56:9d:fa:83:93:d0:85:80:c6:80:
                    30:25:b2:88:5c:f0:a4:2e:b6:82:ea:be:56:98:3a:
                    86:51:e1:3a:ad:a6:57:2b:a9:aa:a7:a8:7d:22:31:
                    32:ac:d4:d7:38:0c:90:75:87:df:fd:df:3d:3f:ad:
                    62:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F8:23:22:CE:19:C5:DF:BA:3B:A2:5A:23:AC:BA:A5:1F:EE:EB:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/6e971fc1-df5a-3890-ad2c-de395e1e2134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl

            X509v3 Authority Key Identifier:
                keyid:64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fec6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:c9:d6:82:7b:3e:8d:a5:74:27:ea:f7:67:14:cb:34:76:71:
         30:31:80:7a:45:73:08:10:87:dd:ff:07:4d:33:55:de:e5:98:
         06:9f:c6:cb:32:e5:95:8f:1a:cc:36:13:b4:76:6b:3e:a3:ff:
         fa:63:e3:74:ab:d4:01:7d:ae:d7:c5:cf:75:b4:8e:7f:9a:1b:
         4f:2c:01:9d:8f:f2:52:44:9a:98:0b:45:78:da:19:29:81:5c:
         3e:20:28:bf:8f:f3:94:fd:3e:3d:cc:68:1c:98:42:e7:ff:cb:
         35:33:a5:7b:d2:93:f1:df:aa:bd:59:9b:30:b2:fc:f7:b7:75:
         23:9b:ba:3d:ff:7e:bb:7e:29:27:76:d2:2a:38:41:89:96:78:
         b5:62:5f:56:fa:7d:32:0f:96:4b:b0:ee:93:32:e4:38:6e:83:
         b4:ac:55:d1:0d:68:59:c6:e9:db:52:96:db:a1:9d:66:02:c6:
         31:02:3d:a5:28:d6:4d:79:45:68:3f:68:ab:b7:ba:b9:56:b2:
         da:98:72:b3:f0:c5:4a:3b:01:3e:ff:67:9f:d6:15:6c:1d:88:
         a1:c6:8d:cd:42:98:52:e1:45:1e:31:75:01:c2:80:5c:99:ae:
         b8:15:82:4c:91:be:16:59:22:12:61:8b:12:47:e6:b9:c8:25:
         7c:be:ae:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:08:15 2025 by rpki-client