Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/e63c8e7e-59e2-3996-ba70-2cd588d5f6c2.roa
File:                     e63c8e7e-59e2-3996-ba70-2cd588d5f6c2.roa (raw, json)
Hash identifier:          Q8+B2uNknMP7wyPp16zkSwo1BdvI+OjZFntt/qr8paQ=
Subject key identifier:   E7:DD:8A:A6:5C:EE:DE:12:32:80:49:87:7B:76:BF:89:DD:38:E8:45
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F432858499829CFC940FBDF01F5C383C0
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/e63c8e7e-59e2-3996-ba70-2cd588d5f6c2.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     19651
IP address blocks:        2602:f9ec:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:cf:c9:40:fb:df:01:f5:c3:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=3e2cd508-2255-4fdc-8b17-3b12baebb04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5f:11:f7:92:9f:ba:71:af:8c:7b:7e:b6:8f:
                    15:67:fb:44:f8:5e:ff:b3:7c:77:15:eb:9d:e6:ca:
                    31:b4:51:fd:99:7f:fc:9f:a3:01:8a:a7:61:70:a5:
                    bc:d1:cd:47:39:b8:21:37:c3:ae:b1:1c:e5:81:cb:
                    19:5c:7f:e8:ca:94:9f:e7:d5:c1:e7:c8:ff:35:16:
                    3f:39:2f:42:6d:ab:b9:9f:96:14:58:33:ff:cc:7f:
                    37:67:71:9a:1c:24:f7:f6:aa:17:62:b5:36:e8:c3:
                    a6:34:da:7c:22:4b:e3:61:1a:dd:44:c2:a4:a1:36:
                    49:26:01:a0:ab:2f:e9:43:24:de:3e:e3:4d:62:c5:
                    0e:7a:f5:ca:3e:23:e9:a4:1a:9d:37:f6:ee:12:93:
                    b1:93:9a:67:f1:8b:19:e7:ff:74:82:1f:1a:c7:28:
                    93:10:60:b9:d8:1b:7a:40:8f:f1:63:ed:98:81:c6:
                    a8:52:b5:27:4c:fb:58:0f:70:86:28:46:80:3c:b4:
                    2f:73:e4:09:7a:ed:e1:ed:01:cc:d1:06:78:41:30:
                    78:ee:2b:98:c1:ca:8f:4b:22:9b:02:54:79:56:e5:
                    52:ce:d2:fe:dd:95:21:22:d4:4e:ba:fb:7a:ce:9c:
                    80:e7:f1:f2:5a:8e:25:12:fb:2a:38:38:83:98:11:
                    d1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DD:8A:A6:5C:EE:DE:12:32:80:49:87:7B:76:BF:89:DD:38:E8:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/e63c8e7e-59e2-3996-ba70-2cd588d5f6c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ec:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:73:3a:28:1a:a3:d3:48:78:9f:50:ff:03:87:49:45:e6:31:
         2d:87:b0:49:c4:f8:17:4c:77:97:9a:8f:fe:0c:7b:80:83:98:
         e2:83:f0:ae:c5:db:3b:a3:b7:41:a0:12:5d:45:69:05:51:65:
         2c:7e:39:c8:ba:1c:f9:49:a2:db:66:cf:c7:1b:cf:0d:8b:b0:
         6d:76:71:0d:df:7b:f4:62:c2:7f:41:b3:47:99:93:3d:a7:f7:
         7d:fd:8a:88:0b:82:20:b6:5e:17:11:f7:3f:7a:3a:23:a3:44:
         dc:89:c4:c4:aa:42:ed:bd:b0:15:5d:5e:5b:33:32:7d:5e:16:
         a0:cb:81:e4:33:79:1f:b7:de:1b:3e:5a:6a:9f:b8:44:ec:54:
         e8:67:83:75:fb:f5:b1:10:5f:b5:68:24:42:77:3a:b0:88:e9:
         89:af:43:b9:c5:5a:23:9e:a6:0e:87:04:0d:50:81:5c:36:39:
         85:21:5a:d1:65:55:53:b3:06:a6:84:5a:a5:89:b9:76:eb:e0:
         3a:8f:d4:b0:b9:b7:80:5a:4a:d4:bd:5e:d7:d9:11:ab:77:3a:
         13:7e:a2:ea:ce:2c:3e:0a:ce:3c:1e:28:00:6b:e7:1d:67:4d:
         65:ae:e4:dd:44:76:5e:7b:0d:85:56:d0:a9:da:d6:1b:89:15:
         7e:a9:33:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:26:23 2025 by rpki-client