Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/c2382f90-9013-3121-a9e6-6335e705e8d0.roa
File:                     c2382f90-9013-3121-a9e6-6335e705e8d0.roa (raw, json)
Hash identifier:          ikxkbcuIzpLWRFgknnvwU62bgcOsm0l0JS3gl1RTnjc=
Subject key identifier:   6B:C2:BC:7C:1B:5F:8D:80:30:30:E7:7C:77:9F:41:37:DE:45:A9:62
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F43285849A1EF6D506E985A23AE50AE80
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/c2382f90-9013-3121-a9e6-6335e705e8d0.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     18526
IP address blocks:        2602:fd6f:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:6d:50:6e:98:5a:23:ae:50:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=4edd9a28-aa0f-47b0-995b-627ac9655048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:02:6f:3a:dd:82:2d:5f:1e:ce:e1:9c:70:1c:
                    41:06:7d:20:03:8e:a3:c7:79:25:39:f5:64:6b:b5:
                    81:93:a4:62:6e:41:91:75:0b:f0:bb:47:6f:ab:58:
                    be:ec:61:0e:50:2e:6f:6f:6c:6c:b6:ee:82:5c:82:
                    8c:a4:9e:ed:8c:fd:9f:78:bb:63:9b:19:5c:52:ea:
                    53:cc:c5:b4:4c:82:2f:03:17:5d:a1:1e:d8:72:3d:
                    b1:a2:3c:2a:99:00:a7:1a:08:b3:06:5c:f0:66:7f:
                    87:67:ee:e0:37:2a:66:b6:12:8b:6d:16:c1:f3:3a:
                    84:77:d4:24:47:70:89:6f:e2:26:cf:04:e9:b8:35:
                    12:d7:10:94:f3:47:3d:54:cf:58:dc:b2:d0:30:70:
                    d5:2d:2a:75:80:35:94:72:06:d7:ab:d8:9b:c5:9c:
                    2c:cc:e7:ed:cb:a0:4f:54:77:81:04:4f:b6:ad:c5:
                    b8:89:ce:4a:29:98:25:fe:f1:34:66:20:12:54:89:
                    d4:ea:0f:72:c6:ab:44:ac:b0:84:3b:d2:1d:f0:f7:
                    f7:d2:28:b8:92:55:88:51:16:d3:0a:55:58:cf:df:
                    58:aa:07:83:ab:fc:77:e1:d9:e9:d3:0e:cc:c6:88:
                    ef:83:be:e0:3c:ac:9a:a5:60:0f:fd:a4:45:e7:bd:
                    b0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C2:BC:7C:1B:5F:8D:80:30:30:E7:7C:77:9F:41:37:DE:45:A9:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/c2382f90-9013-3121-a9e6-6335e705e8d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ae:5c:85:03:50:c3:90:61:f1:f6:25:df:f2:88:8e:cc:2e:
         ed:01:f1:6c:c1:58:54:8b:f0:6d:e0:c0:5d:3a:f4:a8:a9:dc:
         05:0c:80:c8:5f:14:8d:df:93:cb:7f:a4:dd:24:76:9a:56:a7:
         40:c8:0c:41:73:41:7c:41:67:81:65:92:d4:01:57:04:46:83:
         2a:c0:5e:b4:85:1a:96:d4:18:90:46:f4:ea:a8:7d:44:6f:3e:
         18:da:c0:71:ae:43:f1:24:ce:44:b5:09:ca:ee:22:a2:47:3f:
         5e:3f:ad:97:4f:77:36:b4:2f:12:1e:a8:a9:20:76:f3:fd:68:
         d9:e6:4c:79:d1:4f:92:0a:86:66:92:d1:23:d6:c4:b0:9c:8e:
         9e:c7:1a:49:0b:90:70:a6:44:59:88:30:ab:9f:c1:72:54:ec:
         0c:97:51:90:90:d5:9e:24:26:b3:ff:ff:cd:24:cc:c1:4b:0e:
         13:2b:5f:cd:ea:fd:e3:f5:4c:a7:75:ea:e5:eb:3e:11:3b:be:
         37:00:9c:e3:6b:23:1d:8e:1a:63:40:72:95:12:9d:23:50:11:
         97:92:f7:fb:b5:00:48:e7:41:fe:ef:36:2b:6c:52:47:15:e7:
         33:35:7d:78:04:2c:36:c6:40:e2:ad:37:0e:6d:19:07:b9:3b:
         f1:2a:ce:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:00:57 2025 by rpki-client