Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/428d2931-231b-33af-9119-4138e16c38af.roa
File:                     428d2931-231b-33af-9119-4138e16c38af.roa (raw, json)
Hash identifier:          +4gqZFBv90/Jgh0+xeE15vQurxf7U1OOix+uKnyYSN0=
Subject key identifier:   CA:80:41:F6:22:F8:52:24:27:1B:96:B4:09:5B:AC:37:E1:4E:DA:62
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F432858498E647E49A7D435235BC0C160
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/428d2931-231b-33af-9119-4138e16c38af.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     399883
IP address blocks:        2602:fc06:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:7e:49:a7:d4:35:23:5b:c0:c1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=9e5cead0-75b2-4127-ae62-5fd9db36bb3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5d:cb:5f:7f:a3:0c:f6:44:d2:5c:7f:21:46:
                    97:3c:2d:87:0b:38:3a:17:3b:2a:6b:fa:be:4f:bb:
                    65:13:fc:51:45:8a:24:2e:4c:4b:b2:c0:66:22:2c:
                    be:0a:ae:83:67:ce:85:0e:7d:32:db:61:a2:55:82:
                    29:7e:ad:c5:fd:ff:41:c1:06:bb:a4:51:da:10:b7:
                    dd:6c:f9:9d:b2:86:96:4b:05:b1:f7:43:dc:a8:e3:
                    3e:e9:2b:68:75:90:50:b0:29:50:0f:78:04:79:3b:
                    d5:3b:01:1d:de:85:f8:80:09:35:80:0c:c4:53:1f:
                    32:76:34:cb:d7:e5:89:a6:06:30:8c:4c:44:2c:50:
                    c8:ff:01:33:e2:68:bd:68:0a:af:e7:9c:5e:27:a5:
                    91:49:c5:58:57:48:c2:31:db:e8:fb:51:67:61:18:
                    b0:af:52:03:71:53:64:ad:ce:e7:19:df:30:57:b5:
                    e3:fa:c7:82:f6:02:10:a0:8f:a6:39:6b:a2:e8:61:
                    20:81:fc:31:18:f7:ca:6d:08:45:23:c2:11:52:83:
                    30:a8:ce:19:b5:ef:8a:a0:39:5f:ce:0e:bb:9e:e2:
                    42:25:8c:db:17:e5:ae:41:22:21:8d:99:64:6b:e9:
                    2b:08:d1:3f:54:05:ac:aa:6f:de:be:22:b8:cd:df:
                    52:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:80:41:F6:22:F8:52:24:27:1B:96:B4:09:5B:AC:37:E1:4E:DA:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/428d2931-231b-33af-9119-4138e16c38af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc06:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:24:e8:c4:5f:71:45:8d:5d:90:4f:2b:f4:34:b4:88:a3:4f:
         c1:b1:3e:7f:06:c8:bf:de:9d:93:f1:05:af:ba:dd:bf:93:92:
         ee:40:2d:8d:99:42:fa:c4:f6:db:4f:d3:dd:d6:fc:8f:c7:de:
         20:ac:cb:f4:de:79:c6:a3:fc:df:a2:56:da:94:61:72:7b:67:
         6d:17:ff:ff:b4:24:61:0e:bb:de:6a:a0:57:38:62:5f:84:50:
         09:a1:a9:c4:c6:c2:ff:8e:f3:8a:4d:9d:72:88:f0:be:1d:7e:
         43:f9:93:78:96:1d:6a:4c:4f:f7:5d:01:36:07:a9:2b:82:83:
         b9:f5:e3:69:e4:25:bc:d5:6a:12:c3:f2:58:66:23:62:2e:49:
         e8:e1:1b:a3:e3:b1:01:7b:7c:93:66:aa:27:b6:e0:de:f8:eb:
         8c:a0:2d:66:3e:9f:a4:56:97:6c:ca:ea:f8:a7:1f:83:f8:7e:
         b5:aa:37:fc:bf:ff:af:03:44:e4:7b:fb:4d:58:98:e1:88:79:
         db:4d:99:d6:44:d3:0b:07:c5:66:d9:c1:eb:9c:a9:4c:e5:12:
         88:b5:92:c1:64:76:35:ab:5c:15:e8:4b:29:6f:78:80:48:79:
         be:ba:f5:7b:f4:b2:4c:3f:4b:86:39:25:fe:ce:b9:8d:aa:35:
         e8:2e:b6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:50:13 2025 by rpki-client