Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/f1a9c8ee-8dda-3b33-ada0-1c37576eba64.roa
File:                     f1a9c8ee-8dda-3b33-ada0-1c37576eba64.roa (raw, json)
Hash identifier:          L/og7ieLxO3JTpYlBwOI+8sd+FX7w/4lyGygLvPo614=
Subject key identifier:   AB:C0:C1:FB:07:3B:72:D2:0C:45:F6:5B:C3:60:24:CB:B2:D8:25:51
Certificate issuer:       /CN=29d35046-09f2-4630-973c-fde248a9c01c
Certificate serial:       010D0C9F4328584A63D251CF3F122E46ADFD16A0
Authority key identifier: EF:01:BF:82:7C:1A:23:EF:4C:63:62:65:05:72:62:36:58:FB:81:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/f1a9c8ee-8dda-3b33-ada0-1c37576eba64.roa
Signing time:             Wed 02 Jul 2025 23:49:33 +0000
ROA not before:           Wed 02 Jul 2025 23:49:33 +0000
ROA not after:            Tue 30 Sep 2025 23:49:33 +0000
asID:                     395878
IP address blocks:        2602:f697:e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/29d35046-09f2-4630-973c-fde248a9c01c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/29d35046-09f2-4630-973c-fde248a9c01c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:d2:51:cf:3f:12:2e:46:ad:fd:16:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d35046-09f2-4630-973c-fde248a9c01c
        Validity
            Not Before: Jul  2 23:49:33 2025 GMT
            Not After : Sep 30 23:49:33 2025 GMT
        Subject: CN=f2b03a34-d00d-4f8b-9bf2-330174ff8d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1b:d6:a1:4c:14:37:2e:17:99:8a:de:93:a1:
                    39:f3:b3:50:0c:c9:f4:7e:b6:06:92:ae:01:97:f0:
                    91:85:f5:ad:03:36:55:fd:80:13:70:15:9f:4f:e4:
                    6f:8a:08:d2:3c:a8:40:5e:41:f1:7f:17:5d:e1:a3:
                    07:84:c0:46:62:dc:6e:d8:40:9b:56:96:6d:5b:de:
                    11:ef:58:8a:4e:ad:19:63:f9:cb:ba:e3:4c:92:1f:
                    d0:2d:26:aa:42:04:49:31:ec:e1:cf:fa:78:78:4a:
                    f1:85:53:04:b7:0b:a1:30:30:a7:f2:38:9a:06:04:
                    c3:7c:5c:e7:59:07:db:6b:27:9b:73:da:5f:64:86:
                    0c:09:ba:10:6e:e4:db:70:47:cd:e2:76:c9:63:5e:
                    0c:62:10:9d:85:d5:82:e3:22:92:ca:6f:34:7f:a5:
                    71:ad:46:e4:4d:2f:be:4c:cf:f4:a1:19:c2:76:ce:
                    3f:a5:de:b1:5f:b6:da:0e:06:59:19:03:1b:93:7e:
                    af:86:e3:04:9d:e5:7e:e0:4c:af:c5:2a:93:bb:a4:
                    e6:84:f1:cd:f9:cd:95:a1:8d:d0:a1:9d:4c:96:bb:
                    ea:f5:fe:3c:d4:e7:9d:dc:2a:f7:de:6e:f6:ee:b1:
                    5a:c8:cc:67:66:0b:c1:88:b3:55:45:54:2a:1d:81:
                    39:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C0:C1:FB:07:3B:72:D2:0C:45:F6:5B:C3:60:24:CB:B2:D8:25:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/f1a9c8ee-8dda-3b33-ada0-1c37576eba64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c/29d35046-09f2-4630-973c-fde248a9c01c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:01:BF:82:7C:1A:23:EF:4C:63:62:65:05:72:62:36:58:FB:81:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/29d35046-09f2-4630-973c-fde248a9c01c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f697:e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:53:a0:b3:37:da:f5:31:d0:46:8e:5a:73:7d:c6:b4:41:c8:
         7e:30:45:e4:d3:e1:c3:86:46:e0:d6:02:e3:e5:ee:96:72:e6:
         d4:bd:92:d1:f6:c6:9e:58:d5:2b:4d:9d:f0:29:03:69:b9:98:
         7e:7c:bf:69:09:cf:fa:04:18:20:81:3b:da:0e:7d:47:48:80:
         19:44:02:34:3f:d3:11:da:f3:30:1e:d6:20:f9:f4:a9:00:c9:
         b0:9d:67:0d:90:3a:56:22:54:b0:ec:a3:2a:d6:48:9f:89:53:
         df:e6:eb:2d:74:28:b2:2b:ff:a4:49:de:52:f0:8c:13:56:10:
         7e:53:64:a6:aa:d0:18:5e:d7:36:ec:2d:b5:eb:89:51:f0:9e:
         1d:5f:37:53:16:87:d1:76:45:7b:e1:a8:3b:9f:ef:a6:1d:85:
         4c:8a:56:f9:41:ae:ab:5e:a0:34:9f:53:70:6c:87:26:be:3b:
         fd:40:5d:88:e0:9c:7e:a3:59:06:80:f2:17:5c:8a:4e:95:e6:
         25:d0:8b:d0:c5:87:37:18:30:ac:ff:b7:8e:cc:56:1d:72:18:
         64:08:99:e3:13:38:58:af:d4:ca:85:60:6b:b4:5b:aa:67:63:
         9f:07:ae:9a:d2:db:c7:44:86:cd:49:66:68:a8:d5:f8:48:6e:
         a4:09:32:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 22:55:19 2025 by rpki-client