Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/33c508a0-a21a-32cd-bc69-fa82cb511b0c.roa
File:                     33c508a0-a21a-32cd-bc69-fa82cb511b0c.roa (raw, json)
Hash identifier:          3PUEBEjLbFpf+4zkiA7jnBDDne/U+xtO7bxvZ6oLOOs=
Subject key identifier:   9E:6F:5B:37:B7:46:9D:88:C6:88:96:11:CF:EF:58:37:41:BC:30:F4
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584A5765CF8987FB43997384CF90
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/33c508a0-a21a-32cd-bc69-fa82cb511b0c.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     398705
IP address blocks:        2602:80d:1002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:cf:89:87:fb:43:99:73:84:cf:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=922b1f67-c18c-4557-be22-fe4cddac6683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2f:fd:aa:a0:a3:2d:e5:79:3e:bb:fd:5b:4c:
                    f8:f2:58:16:57:ba:fb:ca:07:2b:8d:e2:73:5c:b3:
                    6d:9f:82:0c:62:89:3c:33:55:99:26:c8:ad:72:c4:
                    17:c9:2d:66:2e:a0:c6:b5:a4:ef:cf:a3:37:78:63:
                    88:bc:58:99:be:ac:65:85:f8:d6:cd:01:19:ba:14:
                    dd:a5:2c:19:2e:a7:ab:f8:a4:49:ba:f6:e6:9b:c3:
                    18:0f:e7:b3:79:36:b7:b7:4e:18:a7:8f:b2:5b:1f:
                    fc:53:06:36:71:1a:3b:57:c6:c6:85:f7:0c:4a:ad:
                    4f:99:21:64:00:25:d2:60:61:20:9c:58:09:0f:2a:
                    f2:32:98:22:c3:b6:6d:bc:90:b9:d4:be:d9:8d:72:
                    21:4b:e8:2c:2a:cc:bb:cc:c0:7c:4d:b5:02:5b:16:
                    26:60:f0:d1:60:43:d1:4d:9a:82:0c:3e:17:99:45:
                    3d:cd:4a:a4:18:fd:be:8e:c4:cf:a7:ec:54:33:3b:
                    de:6a:9d:24:ed:c2:a7:56:97:a0:5b:41:1b:b4:52:
                    e4:bd:fb:41:bc:53:e1:5c:e3:6a:d1:e8:41:bc:84:
                    1a:05:af:db:1a:17:a0:6c:f3:8f:7e:1e:ee:0b:4c:
                    41:23:d0:a3:51:62:ad:e6:e7:39:0f:f3:01:e6:b8:
                    a8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6F:5B:37:B7:46:9D:88:C6:88:96:11:CF:EF:58:37:41:BC:30:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/33c508a0-a21a-32cd-bc69-fa82cb511b0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80d:1002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:0e:fa:05:e3:54:dd:33:29:f8:09:90:0c:bd:ed:0f:2e:c3:
         cc:2c:2c:da:38:68:e2:13:82:69:5d:20:31:81:a6:84:a1:08:
         1f:0c:46:84:d0:a7:df:f7:ab:f2:67:70:42:19:4c:54:f2:2f:
         ec:fb:5d:b1:43:74:5c:e1:10:69:b0:a9:3d:c4:67:44:17:61:
         89:3e:28:03:8b:9a:27:98:a8:01:cd:8c:ca:66:4c:87:42:c2:
         d5:3e:bb:ad:52:17:ad:9c:76:89:3b:4a:21:bc:44:e6:5f:f9:
         44:14:c0:7e:aa:de:87:66:3c:e9:f1:92:6f:45:e8:b5:42:79:
         7b:88:72:8b:a8:6e:88:e7:18:db:87:d2:1e:14:68:b6:21:a3:
         e2:f3:51:9b:28:1e:79:32:f0:ba:ca:48:8c:16:5c:f3:86:78:
         b9:2d:70:7d:88:83:c5:f9:ff:a2:2d:42:0f:3c:f4:75:9e:7b:
         df:5b:e1:9d:a5:31:54:c3:e1:3f:1d:f3:9d:04:bf:0b:50:12:
         cb:ea:48:9b:3b:4b:be:06:a5:6a:9a:99:db:bb:78:af:a6:4b:
         f2:3f:aa:ef:7d:b7:47:cb:c4:fc:70:59:06:62:2e:50:de:fa:
         f3:1a:46:63:b3:f5:b7:e0:3f:d2:b6:d9:0e:b1:e5:fe:db:3d:
         fa:77:e3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:03:58 2025 by rpki-client