Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/8dfd331d-a27c-3036-abb2-c4b7f16c6bd9.roa
File:                     8dfd331d-a27c-3036-abb2-c4b7f16c6bd9.roa (raw, json)
Hash identifier:          kNk2f7t4CzjEAEO2M9eo+UcsKcNARyNrr4w1Yn16m3M=
Subject key identifier:   67:E4:18:DD:42:82:0F:D4:1A:BE:30:CE:23:37:9D:28:E1:91:1B:50
Certificate issuer:       /CN=e20d7b51-a205-4e55-9426-e473f80b2544
Certificate serial:       010D0C9F43285849DC8FB40A08A74364CA541B00
Authority key identifier: 98:5B:5F:D7:36:C4:EC:98:8A:7F:FD:88:22:70:B1:32:07:74:14:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/8dfd331d-a27c-3036-abb2-c4b7f16c6bd9.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     397736
IP address blocks:        2602:807:d000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/e20d7b51-a205-4e55-9426-e473f80b2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/e20d7b51-a205-4e55-9426-e473f80b2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b4:0a:08:a7:43:64:ca:54:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e20d7b51-a205-4e55-9426-e473f80b2544
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=56ccd7a3-02ac-4684-ba84-5af060449da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:01:fa:d3:c5:83:66:7e:06:a6:7d:86:90:b8:
                    83:08:2e:48:b4:e3:18:44:9f:93:ec:f1:dc:b3:b1:
                    c6:f4:fa:c3:45:25:11:b2:88:49:3a:f6:a4:4e:d6:
                    d8:e1:92:7a:84:2b:09:85:f0:86:ae:ee:65:0e:0d:
                    8c:e6:c9:cb:c9:34:8e:2a:15:d8:37:f1:dd:55:0c:
                    35:93:5b:71:e3:60:0b:03:32:18:1d:8a:77:85:9c:
                    0f:82:6f:25:f7:46:8a:9d:40:90:54:8e:ee:5f:46:
                    b8:fe:5f:b5:6f:ee:29:b3:c8:36:bc:79:f9:3a:27:
                    87:05:a5:60:40:1f:6e:b5:6f:de:7f:cd:45:45:5e:
                    ef:3c:ac:4c:32:af:d1:de:3c:fb:b9:a6:01:30:f9:
                    5f:92:fa:ba:fc:8e:a9:ee:0c:1b:97:54:27:da:27:
                    68:50:04:f8:62:c1:9d:55:f8:21:ab:b8:76:c1:a4:
                    40:e9:42:75:35:48:62:e3:1f:cb:20:95:a4:b3:c2:
                    93:c9:c6:b3:90:7e:b4:bb:eb:cb:14:5f:94:5e:a4:
                    7f:ca:95:e5:b3:21:3b:c1:58:c2:a2:b2:33:a0:91:
                    70:b5:81:9f:8f:d0:04:31:9d:75:42:a1:eb:c1:77:
                    23:59:4b:74:ea:7e:10:6d:da:09:80:8d:87:bb:66:
                    01:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E4:18:DD:42:82:0F:D4:1A:BE:30:CE:23:37:9D:28:E1:91:1B:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/8dfd331d-a27c-3036-abb2-c4b7f16c6bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/e20d7b51-a205-4e55-9426-e473f80b2544.crl

            X509v3 Authority Key Identifier:
                keyid:98:5B:5F:D7:36:C4:EC:98:8A:7F:FD:88:22:70:B1:32:07:74:14:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:807:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:26:21:ea:0c:23:f6:0d:71:9a:be:6e:9d:4e:85:fe:fc:53:
         16:d4:9b:49:8a:af:21:06:9e:11:a9:1e:f8:8c:c0:c2:65:5b:
         64:6d:bb:1b:78:df:76:79:22:45:be:b9:10:b5:11:66:10:d2:
         88:31:25:03:1d:9b:2b:e1:36:30:40:37:5f:ac:8b:f8:b9:7a:
         c6:f4:b5:ef:ff:03:6d:8a:d0:2c:2a:c2:29:11:c9:26:91:d6:
         bf:4b:99:10:86:02:f2:e5:45:0e:7b:13:80:5b:17:07:f9:5f:
         15:6a:33:c5:b9:59:37:ec:c4:92:9d:b9:5a:7d:98:5e:ed:7f:
         02:4c:58:fb:10:58:14:8b:2f:62:ca:eb:fb:ce:64:cc:80:09:
         56:cf:ea:cb:ed:37:0c:74:58:2d:f0:a0:b2:bc:5d:c9:ed:b9:
         70:7d:5a:9e:fa:19:e8:72:3d:61:e1:8d:fc:e3:7d:12:b0:43:
         25:ba:89:5b:79:e5:6f:d2:59:99:ee:1e:90:24:f3:4a:21:5d:
         14:1e:18:bb:27:1f:3b:9a:80:57:fb:74:f1:c9:04:09:96:d9:
         fe:e6:cc:ee:ca:fb:e1:89:0a:e5:0c:c9:87:57:b6:f5:f7:b6:
         af:39:ff:11:71:81:8f:b5:35:01:8b:4b:48:24:33:78:87:3c:
         b7:fe:bd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:52:27 2025 by rpki-client