Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/442a9be4-00c1-30eb-8212-3ae7205074c8.roa
File:                     442a9be4-00c1-30eb-8212-3ae7205074c8.roa (raw, json)
Hash identifier:          MX1imwC/wsfODBYRazzlSWXkq3w9lQpASRYhc64S4lQ=
Subject key identifier:   09:C3:B7:05:53:CC:4D:B3:F5:B9:C2:2E:36:4F:2B:11:B8:34:4F:E8
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F43285849BF3F67B4E9BADF7D8CDDA260
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/442a9be4-00c1-30eb-8212-3ae7205074c8.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     27385
IP address blocks:        2602:fdaa:c4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:67:b4:e9:ba:df:7d:8c:dd:a2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=463a7eb2-6e67-49f7-b45a-c2bb5dca21e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ea:e3:47:30:f9:0e:e5:a9:77:23:f9:d0:82:
                    d2:a0:20:91:88:c1:11:ca:b2:e5:88:b0:ff:a4:12:
                    80:26:eb:32:53:92:38:de:26:46:87:0f:c2:f5:75:
                    af:c1:89:5e:81:a8:f8:d9:14:7d:d8:2d:58:38:e0:
                    9e:a9:c4:49:e2:cf:95:92:4a:f1:e7:ae:c9:fe:43:
                    50:44:bb:41:ff:ee:65:dd:c3:87:1c:ef:da:77:80:
                    0a:33:37:03:66:44:50:b9:c3:da:90:c0:39:b6:a8:
                    35:11:af:dc:b7:13:1f:3b:b4:2f:f9:82:6d:e3:c0:
                    73:57:ec:ab:76:f8:ac:74:37:ed:c5:57:8f:5f:a4:
                    b3:07:6e:67:b2:f9:d6:1e:07:ba:47:a4:72:86:d5:
                    b5:da:5e:fc:d4:de:cc:7b:bf:aa:76:70:af:ce:bb:
                    d4:94:7e:40:f4:e6:64:8c:da:ea:90:94:94:ce:15:
                    91:59:86:e0:4c:74:b8:08:69:d5:07:38:80:02:60:
                    4d:63:2d:71:3b:f0:08:83:99:ea:a2:06:a8:f7:09:
                    7d:8a:d2:d6:21:63:f1:3c:4a:82:52:c4:1d:9f:9a:
                    4d:92:48:0c:fe:4b:b0:e8:cd:6a:fe:d1:6a:31:3e:
                    17:1f:27:85:ce:6d:5f:61:55:88:05:0b:d1:2a:8b:
                    ea:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C3:B7:05:53:CC:4D:B3:F5:B9:C2:2E:36:4F:2B:11:B8:34:4F:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/442a9be4-00c1-30eb-8212-3ae7205074c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:c4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:65:27:b5:02:44:09:77:0c:39:81:9c:50:7c:5a:9d:b9:84:
         e2:22:1b:0f:fd:23:07:45:dd:1a:9f:f2:6b:0d:e6:f3:da:f9:
         32:86:f5:ae:7f:a0:fb:5d:29:57:36:6e:f5:14:7f:ce:9d:af:
         7c:06:aa:07:2c:7d:7d:dc:31:99:f0:34:cd:d4:a8:81:c7:9e:
         8e:63:b6:42:d3:be:c3:0b:4b:51:89:1b:ed:c3:6a:29:65:6c:
         23:e9:2d:07:c0:b0:f0:e1:62:3c:e5:25:38:58:25:57:08:08:
         85:40:ec:25:a4:bf:56:61:3c:50:f5:21:0d:26:cc:4c:af:45:
         b0:f7:d7:56:48:81:e1:ce:c5:14:e7:0b:36:11:f1:93:67:04:
         b4:28:61:d0:fc:d9:3c:c2:c6:ad:b5:69:f7:eb:57:b9:60:33:
         2d:2b:60:50:de:00:c7:a8:0d:70:a5:5e:56:67:38:58:65:91:
         c3:06:35:a4:40:aa:bf:c4:bf:5b:42:4e:5c:45:41:e8:b7:33:
         c5:d8:ff:5b:78:e9:ed:be:5b:11:67:0c:00:cd:58:cd:b4:f9:
         f5:d4:2c:85:c6:33:cc:0a:95:9f:2b:4b:20:7b:87:59:98:61:
         96:18:08:f6:14:df:ab:6e:e3:3c:1a:f1:17:23:3e:52:0c:02:
         83:37:81:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:57:29 2025 by rpki-client