Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/7926a243-3f80-31ef-8554-415bd8b817bf.roa
File:                     7926a243-3f80-31ef-8554-415bd8b817bf.roa (raw, json)
Hash identifier:          vsSBuDiuFgw9kZ7BqOABFU3Yspsr9ym0STpkcUWGe2w=
Subject key identifier:   2E:DF:0C:3E:E1:C5:99:48:D3:CE:5C:DB:7C:93:D3:F8:EE:01:E7:F3
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F43285849E654EDAD39BCB8AA12670500
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/7926a243-3f80-31ef-8554-415bd8b817bf.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     396908
IP address blocks:        2602:f956:90::/48 maxlen: 48
                          2602:f956:91::/48 maxlen: 48
                          2602:f956:92::/48 maxlen: 48
                          2602:f956:93::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:ed:ad:39:bc:b8:aa:12:67:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=bde8781f-1ba7-4b99-9979-4c6dd2b4182d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ae:a9:a5:1d:92:74:98:38:d9:1d:2b:ac:b6:
                    eb:43:de:a8:94:1b:b5:93:27:3e:ce:ec:2b:b2:f3:
                    54:d3:3b:c3:53:7f:0d:44:70:8f:51:3a:2e:58:0b:
                    0b:aa:10:1e:34:7c:6e:b0:0f:e4:18:9d:cc:0e:33:
                    bb:45:40:85:dc:66:8f:23:e4:a7:75:68:49:95:0e:
                    65:3b:0d:9d:9f:30:18:4d:29:14:a0:67:ee:20:77:
                    05:71:2d:e3:51:b0:ad:11:c9:2c:c2:11:51:70:17:
                    9e:5e:94:31:52:50:15:94:38:18:e0:64:5b:f5:e8:
                    e9:3a:49:91:15:d7:dd:80:c6:00:a1:f4:65:b2:3f:
                    d4:6b:3a:70:40:5c:8b:e4:ab:44:6e:1f:d5:e8:49:
                    6e:1d:54:7c:ba:82:54:bf:bb:15:25:90:90:71:11:
                    04:77:a0:52:c7:0b:e4:f2:49:3a:ca:3a:02:85:4b:
                    42:cb:67:33:00:59:d7:e4:ef:03:4e:cc:ba:89:28:
                    4e:ee:d2:1d:cd:16:4b:d6:3b:20:97:5a:1b:08:7b:
                    24:4d:1f:04:e6:0c:52:50:2a:55:58:38:0e:11:b5:
                    ae:ea:53:44:ee:d3:1e:9d:8b:6f:76:ea:e5:55:6f:
                    02:1f:41:e5:15:bb:50:a9:fc:c9:46:30:42:90:fb:
                    7f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DF:0C:3E:E1:C5:99:48:D3:CE:5C:DB:7C:93:D3:F8:EE:01:E7:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/7926a243-3f80-31ef-8554-415bd8b817bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:90::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:5c:d1:65:65:e0:f7:8a:41:4b:d0:0f:d9:2a:50:f2:7e:45:
         2c:4f:a1:b9:de:88:fc:b8:2d:b3:12:ae:a2:a6:f8:71:6a:ac:
         63:20:7e:c5:a4:34:ce:2b:80:8d:b0:a4:d7:da:5e:08:bc:1c:
         33:44:e3:bf:f0:fb:6f:85:67:68:91:34:9c:9d:d7:da:2b:14:
         da:62:a6:e3:db:48:51:e0:ac:a0:8b:b0:76:0b:f1:db:c5:4e:
         08:78:61:33:80:1f:a4:06:c4:9d:98:d2:08:47:dd:75:55:73:
         7a:7a:05:ed:ab:99:c2:72:96:4c:72:ce:e8:a1:3d:ef:07:1b:
         36:b1:e7:64:1f:90:03:3d:90:45:34:b7:43:76:c6:0d:d9:33:
         3e:ea:1c:09:89:be:b8:66:bd:8a:7e:ba:15:77:ae:6d:e3:db:
         f3:f2:5b:91:64:9a:0b:57:7f:cf:6e:a0:de:76:da:03:a7:33:
         d5:94:37:0e:6c:9f:0d:c9:6a:5a:96:b8:e7:f9:e2:ed:95:fb:
         4c:78:6c:bf:f0:36:41:0f:09:cd:b1:f9:58:1e:ea:ea:81:fe:
         a6:0e:6c:04:c3:92:46:6e:82:49:3e:7a:44:fa:f0:27:e7:0a:
         8a:3d:80:db:3e:a6:87:86:58:82:70:9b:43:d9:2d:63:ee:29:
         e8:3f:53:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:18:50 2025 by rpki-client