Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa
File:                     8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa (raw, json)
Hash identifier:          BbsLQg/a1d2e+zALzYgI6KfbjsVn191PvfuA0Ho+Crw=
Subject key identifier:   78:A5:C3:D4:4B:7E:F6:D8:43:C5:F8:E5:27:60:AC:98:58:B5:76:19
Certificate issuer:       /CN=ec3472d2-073b-458a-8e0f-7ee77169574a
Certificate serial:       010D0C9F4328584A58CB032AA83F204D91D41800
Authority key identifier: 72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        2602:f957:a00::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:03:2a:a8:3f:20:4d:91:d4:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3472d2-073b-458a-8e0f-7ee77169574a
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=55a650c7-02f2-4730-8521-052927567f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:55:9e:2c:54:9b:ea:b7:96:5f:a6:10:df:33:
                    fe:cb:c2:c0:d9:8d:79:51:61:83:e9:6f:ee:68:d4:
                    c5:72:17:32:98:0e:16:90:14:d0:b9:d3:f3:6c:bb:
                    20:d2:8b:9d:ed:ce:7c:8d:5d:a1:b7:27:2b:30:40:
                    a1:3c:6c:d1:bc:2e:c1:7f:68:4d:69:7e:6b:ce:a4:
                    29:0c:44:9d:6c:67:15:6e:1c:53:cf:be:80:d8:f0:
                    73:9f:51:76:7a:f9:e5:9e:b1:02:4e:8e:0b:1e:b4:
                    3a:28:e6:bb:32:a2:f3:29:20:c6:1e:14:cb:11:17:
                    6b:03:0f:31:b2:c6:f4:87:8f:28:71:6f:a3:9d:9d:
                    47:38:3b:86:5d:38:07:17:a8:29:0a:20:26:c2:24:
                    a6:13:52:a3:e4:38:40:dc:83:15:fa:1e:08:d0:e0:
                    33:51:32:c9:ef:fb:65:d3:4d:2a:78:47:59:52:ce:
                    89:72:14:2b:9e:26:e0:71:74:db:e9:59:27:a2:ff:
                    4b:6b:c9:58:64:2d:fd:7d:ea:7a:29:c4:ca:95:1a:
                    b0:6a:26:c8:3b:f1:ff:a7:11:de:66:8e:38:f4:86:
                    d2:8c:86:12:cc:5d:b0:49:c9:c8:6a:73:1c:50:c1:
                    0d:13:07:76:f1:42:ab:6f:fb:e9:b4:6c:36:cc:a3:
                    04:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A5:C3:D4:4B:7E:F6:D8:43:C5:F8:E5:27:60:AC:98:58:B5:76:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/8a93ad7a-1f96-37f2-b51e-adf90e530bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.crl

            X509v3 Authority Key Identifier:
                keyid:72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f957:a00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:27:a5:d7:af:62:36:dc:69:62:68:c5:7b:3c:fd:f8:79:7c:
         3f:d7:70:7f:7b:2a:df:7f:27:4f:1f:ae:42:ca:85:f1:87:6a:
         8d:6d:d1:02:43:27:c3:6b:b5:eb:81:73:c3:1c:d0:49:a5:bf:
         83:94:59:2a:00:31:53:c4:1c:ba:91:17:32:5b:aa:1d:38:ae:
         a7:3d:d0:0a:6d:6f:32:46:65:4c:53:dc:3f:fc:ba:80:bd:c8:
         f2:86:fb:7f:ee:97:93:47:1c:75:37:28:c1:d7:33:3a:de:13:
         b4:ea:d6:cd:f9:04:15:39:19:27:34:30:e9:51:6b:e2:5e:ca:
         42:3a:33:53:08:9a:7a:83:8c:1f:fd:25:00:87:85:28:1b:49:
         22:11:9a:fb:3b:d9:9d:ea:ed:a2:5e:24:63:1a:39:7e:69:b6:
         95:70:55:c0:3c:ed:be:1f:2c:c8:db:48:7a:0f:ba:18:7d:c2:
         db:c6:6b:31:65:a5:95:25:69:ab:24:28:16:02:00:4e:30:a0:
         1b:5c:07:45:50:97:c2:66:1a:ad:ae:c5:bc:92:a6:16:31:25:
         e4:38:6f:ba:fa:fe:99:65:b4:71:08:f4:f0:47:ab:c9:84:28:
         56:4e:b3:32:31:9e:60:a3:0a:68:38:f7:d0:3c:cc:64:1e:c3:
         7f:59:5d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:52:42 2025 by rpki-client