Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/71d5a34d-6b2f-3384-bb1f-fa60a3850a5a.roa
File:                     71d5a34d-6b2f-3384-bb1f-fa60a3850a5a.roa (raw, json)
Hash identifier:          HwFxPnbkMeVidonmHBIQENCts7UnJV7hYhFbDal2vok=
Subject key identifier:   81:3B:5A:61:6F:53:CB:7A:79:FF:B9:91:76:B6:84:FB:3C:A6:68:2D
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584A10353FE6A992387D784F7880
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/71d5a34d-6b2f-3384-bb1f-fa60a3850a5a.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     36829
IP address blocks:        2602:fc64:a000::/48 maxlen: 48
                          2602:fc64:a001::/48 maxlen: 48
                          2602:fc64:ca00::/48 maxlen: 48
                          2602:fc64:ce00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:3f:e6:a9:92:38:7d:78:4f:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=2c4957a9-f397-46ab-80df-d78e77d4541e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:24:1a:4f:3e:84:c8:7b:c6:86:97:d7:a9:38:
                    96:97:08:67:6a:04:94:06:7a:47:5f:d5:6c:c4:f0:
                    64:db:6b:90:36:cb:f2:8d:d4:85:82:33:af:1d:03:
                    1b:34:e1:7e:d0:6d:a7:64:21:87:5e:e1:72:ca:37:
                    ed:3a:0e:c6:b6:d7:92:8c:d6:51:f9:05:e9:04:ab:
                    22:70:44:03:35:2b:e8:a7:4b:fe:c8:05:df:19:a2:
                    b7:17:05:25:d8:fd:9e:47:33:b5:80:28:80:dc:6c:
                    99:df:0e:7b:8e:95:f4:c3:a2:2f:1a:aa:15:eb:62:
                    b7:52:d8:2c:2b:a3:46:0f:1d:f4:69:e5:21:b4:77:
                    5a:42:f3:9a:cf:db:9f:c7:99:18:ae:1a:a4:f1:6e:
                    36:a4:7a:67:9b:78:17:89:48:a0:8e:b8:7f:7a:27:
                    e0:db:f8:3d:c6:c9:16:4c:83:90:39:e1:a6:16:b8:
                    62:00:81:6b:bb:e9:2d:07:64:2d:d5:72:f3:79:fe:
                    18:57:bd:58:3e:9f:af:4b:96:0f:bf:59:77:ab:71:
                    88:68:a0:b5:1c:a3:eb:40:67:10:e7:59:84:a4:2e:
                    6b:37:99:ad:f6:42:df:1a:2e:8e:24:49:63:53:40:
                    25:7e:f4:23:a2:5f:be:0e:23:11:f7:9c:48:88:05:
                    34:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3B:5A:61:6F:53:CB:7A:79:FF:B9:91:76:B6:84:FB:3C:A6:68:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/71d5a34d-6b2f-3384-bb1f-fa60a3850a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc64:a000::/47
                  2602:fc64:ca00::/48
                  2602:fc64:ce00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:23:e9:e0:e2:b7:77:1f:0f:ac:98:66:25:cf:56:3d:4b:c9:
         98:ae:d3:a9:9f:83:53:80:6f:61:c4:83:ee:d8:34:49:74:1d:
         82:6b:3f:a3:fe:e2:1c:19:07:08:23:1a:a2:55:7f:2d:fa:f3:
         92:2c:99:dc:5d:f8:f3:33:62:59:e1:f6:63:5e:4d:f0:82:e5:
         fc:d1:59:8b:8d:b6:29:f7:a1:bb:03:d3:46:5a:7e:0f:b2:7f:
         06:f9:1d:c7:b5:0b:91:88:68:0e:70:54:a6:81:9d:2d:92:99:
         4d:57:1b:47:dc:55:00:c6:c2:ec:a7:fa:08:a5:03:a7:76:8e:
         68:28:66:00:1f:d5:05:dd:50:ee:57:31:5c:59:68:0f:80:8f:
         73:cd:ee:69:f7:b2:e4:f0:49:1b:89:c8:a4:b4:8d:9e:fe:18:
         17:4b:75:1a:1a:cb:18:74:2c:7a:df:68:2b:90:af:53:30:3a:
         9a:6a:e6:23:82:d9:9c:b6:99:6d:09:f5:da:45:6c:43:27:cb:
         11:c2:a2:50:e9:51:34:5f:66:98:b2:31:79:56:59:1d:ad:c4:
         49:dd:13:ce:97:24:39:16:04:89:84:cb:e0:7b:1d:ca:89:8f:
         04:44:8b:ed:78:18:d9:18:0c:0f:cd:57:92:f6:53:9f:a0:9a:
         4e:ad:76:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:31:48 2025 by rpki-client