Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/b2a960ac-3167-3489-9886-c325610610da.roa
File:                     b2a960ac-3167-3489-9886-c325610610da.roa (raw, json)
Hash identifier:          JJ8BojC0RWyJ8K23MB8oDTJd2kSnpUllpmEH3jagK08=
Subject key identifier:   0E:35:0D:57:80:8D:85:F5:8D:DC:8A:F4:91:EB:6E:60:6D:6F:FC:07
Certificate issuer:       /CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
Certificate serial:       010D0C9F4328584A146567797EB9783C1516BB00
Authority key identifier: 52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/b2a960ac-3167-3489-9886-c325610610da.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     1024
IP address blocks:        2602:fca7::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:67:79:7e:b9:78:3c:15:16:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=941c7847-0c68-4a63-8ef0-40d7b2f4a66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:d0:92:76:be:6c:7c:de:a9:b1:38:c9:0b:
                    fa:b6:a1:85:be:ba:ce:64:f1:62:91:cd:e1:62:c0:
                    d5:61:72:54:03:f8:aa:4c:6b:96:ec:95:50:70:34:
                    8a:cb:bd:e8:09:f9:0a:e8:1a:00:51:f4:66:b6:31:
                    46:01:5e:c8:a9:7c:4c:69:46:e1:9a:ab:23:49:e4:
                    b7:2d:39:5f:4f:11:a9:97:bb:bb:b0:4d:8c:13:3b:
                    5e:9f:81:21:7c:89:e8:de:ad:6b:b3:63:6f:e7:77:
                    b2:f2:f5:2b:9a:33:25:67:d2:46:2d:a9:c2:cd:cc:
                    cc:5f:0f:2d:0f:2a:e7:e4:4f:f9:83:1c:8b:e0:97:
                    74:97:08:3f:3c:41:3e:b7:8d:e7:0b:3e:84:b3:02:
                    bf:a6:76:0f:b3:1e:fd:47:65:d8:23:29:8b:c9:dc:
                    a8:49:cc:65:4e:a9:75:0c:67:9b:ed:f4:96:a0:03:
                    54:61:5f:23:99:30:36:3f:2c:78:3c:3c:d4:4c:1f:
                    5e:1f:8a:f0:54:30:ce:8f:d4:ca:ca:a7:71:42:ca:
                    1e:bb:65:4e:78:5a:3b:fc:3b:52:01:be:04:e4:08:
                    bd:82:27:3c:79:39:79:b9:28:c4:0c:8c:e4:5f:22:
                    20:2f:83:4a:bc:5e:d5:bc:cc:09:32:f2:be:5a:e6:
                    c8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:35:0D:57:80:8D:85:F5:8D:DC:8A:F4:91:EB:6E:60:6D:6F:FC:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/b2a960ac-3167-3489-9886-c325610610da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl

            X509v3 Authority Key Identifier:
                keyid:52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fca7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:a4:ae:94:53:b3:3a:b3:db:ce:ec:1a:9d:8d:3e:8a:0a:17:
         10:f9:a3:10:87:dd:d2:bc:b3:0e:c5:ab:b6:d5:21:fd:31:4f:
         0b:56:6e:8a:c9:dd:bf:51:58:39:11:21:e3:af:9b:af:00:de:
         42:de:32:c3:eb:39:bf:d9:a8:33:6e:73:a7:d4:ad:7a:98:6a:
         87:80:f4:f8:c8:39:6e:c9:e3:0c:6c:61:77:4a:9d:06:85:25:
         fa:6a:25:2c:08:0b:e1:39:f7:6d:3f:38:50:3b:92:f5:ad:e5:
         92:8d:5b:41:d8:a5:1d:e3:12:e3:c0:c5:79:5b:fd:76:75:38:
         88:57:8f:3b:e3:ab:8c:99:b6:c2:b9:93:e4:c4:75:bf:41:ae:
         bf:86:90:9c:80:9a:12:95:fc:5f:fa:be:bc:90:1b:64:65:b5:
         67:54:02:b0:78:8d:7d:73:3e:30:af:aa:28:29:0a:f7:7d:85:
         8d:7a:44:b7:ea:e4:70:32:9e:7a:ce:b3:37:44:d8:4f:a9:4b:
         2b:30:c4:7f:c7:e7:59:b7:5c:d9:b7:3b:ce:51:45:17:1b:62:
         e6:e1:1e:3c:0c:56:45:39:ee:1f:99:6a:2e:aa:25:63:0c:11:
         3b:46:d9:aa:0f:aa:b6:b9:f5:f3:85:40:fd:88:64:1c:ed:94:
         b4:95:ae:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:41:36 2025 by rpki-client