Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/9a44da26-443b-3b94-bfa2-f0caa697019f.roa
File:                     9a44da26-443b-3b94-bfa2-f0caa697019f.roa (raw, json)
Hash identifier:          bhDipzDSTuNfcX4XhpKOxRRd+Qdci+vmZg1Iaj6Tbyw=
Subject key identifier:   EB:89:33:42:28:DF:10:DB:39:01:92:8A:29:F8:3A:75:42:4E:06:98
Certificate issuer:       /CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5
Certificate serial:       010D0C9F4328584A374AD21A22441155D55E8980
Authority key identifier: ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/9a44da26-443b-3b94-bfa2-f0caa697019f.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     19415
IP address blocks:        2602:f9d3::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d2:1a:22:44:11:55:d5:5e:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=2ae86c8b-8adf-403d-8386-14257f6107c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:73:9c:25:9e:ed:ec:d3:e1:ee:9b:64:24:8a:
                    84:85:19:2d:f4:d0:18:59:e9:69:b8:60:c6:7a:4c:
                    34:68:12:9d:0a:f9:02:a1:7f:a2:5e:c0:c0:7c:11:
                    e0:9d:41:66:0e:26:72:56:38:b3:c6:74:0a:b2:7b:
                    5a:cf:ba:90:f7:89:97:61:3b:78:35:db:6b:e8:ba:
                    a9:9a:fb:dc:23:fa:0b:df:b2:5f:52:ba:8c:2a:c7:
                    42:46:6e:dc:e9:2b:e0:4a:7f:91:8c:0c:9d:69:7b:
                    3d:a1:80:30:b2:e7:f3:35:9c:37:28:ee:73:d1:88:
                    2a:25:d8:98:b1:3d:36:c2:c7:d9:f9:1b:8c:21:87:
                    81:31:c8:d4:90:71:c5:79:b3:86:a2:b9:9d:72:ad:
                    18:23:37:aa:df:86:a3:57:1c:86:09:2e:b9:c2:3a:
                    79:c8:01:85:b0:a4:ab:27:28:b7:e2:7d:f9:79:22:
                    de:37:1a:74:8d:f2:0d:7c:13:22:a1:00:0f:a0:84:
                    a7:81:a8:2f:53:02:9d:91:8e:68:5e:76:2c:99:12:
                    b7:f9:de:d4:dc:a0:6c:f5:fc:7b:e5:52:7b:d6:97:
                    24:c5:c7:d7:23:74:30:b0:f9:73:1b:0c:4d:40:18:
                    73:a7:36:f8:be:c6:11:15:0b:99:8a:1a:ac:14:4f:
                    07:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:89:33:42:28:DF:10:DB:39:01:92:8A:29:F8:3A:75:42:4E:06:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/9a44da26-443b-3b94-bfa2-f0caa697019f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.crl

            X509v3 Authority Key Identifier:
                keyid:ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9d3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:5f:0c:8f:20:7d:88:cd:9e:58:6e:63:d7:d2:46:89:5b:84:
         01:64:7d:49:e5:50:25:70:d1:7b:52:ca:5d:5e:f6:36:4d:5a:
         7f:d3:b3:9c:c5:0f:5f:71:1f:3c:ac:02:0d:3d:b8:07:c9:09:
         10:68:e4:65:9e:7b:05:0e:8e:f8:63:c1:94:64:2d:83:d2:db:
         e7:1f:ef:01:1d:2c:88:29:2f:59:2a:c8:d6:60:22:a1:0f:93:
         70:3b:36:f9:f2:15:62:c4:a0:b3:53:d1:34:7d:86:3c:a7:7c:
         36:0d:53:fe:8d:d3:b1:e8:dc:b1:ff:d9:cc:e2:ce:e7:de:d6:
         c5:ae:11:de:80:fa:53:a4:8a:2a:8e:ab:65:0e:ba:ff:ab:cc:
         3a:b5:ec:b3:d7:9d:3f:15:84:f9:a4:b2:c8:ee:0a:9d:08:b4:
         79:17:58:50:fe:b0:06:4a:ce:42:9d:be:0b:74:2a:93:a2:09:
         5f:a6:07:5c:4f:49:6a:fc:46:e5:58:c6:e6:77:4f:cd:6a:ca:
         6b:fa:d7:68:a7:a9:5e:b8:1e:b3:83:c2:81:14:a6:d4:bb:c3:
         23:19:de:fd:ec:1d:af:8e:a0:17:29:85:13:de:6d:03:27:10:
         56:82:c0:c2:27:a7:6a:ef:fb:d4:1f:24:18:e1:3a:09:2e:a2:
         ed:e1:ce:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:12:48 2025 by rpki-client