Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/4e3db602-2812-31c2-8bb9-a601c1e8bcab.roa
File:                     4e3db602-2812-31c2-8bb9-a601c1e8bcab.roa (raw, json)
Hash identifier:          I9eXsEIdVzSemoHhq95GyUEz7XglgqeRpROhMvkCoTU=
Subject key identifier:   6F:A5:B6:AB:46:DB:20:E7:39:DA:FD:AF:21:95:9F:50:31:C5:F0:24
Certificate issuer:       /CN=594bef5f-8d11-4b6d-91ca-9cf560ae8674
Certificate serial:       010D0C9F43285849C9716A2FC7C5F6CB1E9A4180
Authority key identifier: D7:DA:E9:99:35:74:C7:76:00:E8:1D:4A:78:CF:9B:37:C7:7E:8E:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/4e3db602-2812-31c2-8bb9-a601c1e8bcab.roa
Signing time:             Thu 08 May 2025 16:39:49 +0000
ROA not before:           Thu 08 May 2025 16:39:49 +0000
ROA not after:            Wed 06 Aug 2025 16:39:49 +0000
asID:                     396891
IP address blocks:        2602:f9f1::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/594bef5f-8d11-4b6d-91ca-9cf560ae8674.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/594bef5f-8d11-4b6d-91ca-9cf560ae8674.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:71:6a:2f:c7:c5:f6:cb:1e:9a:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594bef5f-8d11-4b6d-91ca-9cf560ae8674
        Validity
            Not Before: May  8 16:39:49 2025 GMT
            Not After : Aug  6 16:39:49 2025 GMT
        Subject: CN=aa19806d-dcd3-48e5-b6a1-3939accca549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:46:8e:68:3c:3c:ad:94:0c:05:b5:da:e6:d9:
                    c6:81:93:59:2d:76:af:6c:75:8c:77:10:33:0d:9d:
                    27:ba:9a:ec:11:60:ad:8b:5a:f7:03:6e:e1:b6:6b:
                    25:85:6c:8a:c0:97:35:73:bb:d0:54:14:8e:ab:51:
                    9c:da:64:5e:5d:b6:b4:48:f0:d8:58:3e:10:4e:8b:
                    a6:d3:0a:90:02:5c:8c:f6:86:57:c2:c0:1c:62:ba:
                    0c:1e:49:f9:70:72:60:5a:b7:ab:b0:5b:80:dc:44:
                    42:cd:c0:dd:8d:8f:b3:ff:ca:48:25:f9:11:e7:d0:
                    fc:f8:dc:99:22:9d:2e:90:3c:7e:cb:d1:30:3d:2e:
                    2b:ab:cc:01:5a:d2:f3:bb:07:c1:f4:3b:84:9b:64:
                    1f:1b:f9:a4:aa:d7:12:5f:63:ac:7d:9f:ab:93:ae:
                    06:2d:ab:dd:18:c0:ac:3e:21:b9:dd:87:26:e1:56:
                    5a:2c:d4:59:b1:df:b5:ef:e4:03:ce:c4:3b:05:07:
                    fb:83:a2:e5:07:de:41:3e:3a:b4:1e:94:a3:2e:d4:
                    28:57:da:cd:3d:b8:0f:d3:0c:f4:a6:d4:26:2d:9b:
                    f3:d2:c4:26:cb:a4:93:19:bd:01:c3:9d:6d:dc:2e:
                    f1:16:fb:f3:dc:33:61:ae:51:c3:fa:f5:41:3f:cd:
                    e4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A5:B6:AB:46:DB:20:E7:39:DA:FD:AF:21:95:9F:50:31:C5:F0:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/4e3db602-2812-31c2-8bb9-a601c1e8bcab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674/594bef5f-8d11-4b6d-91ca-9cf560ae8674.crl

            X509v3 Authority Key Identifier:
                keyid:D7:DA:E9:99:35:74:C7:76:00:E8:1D:4A:78:CF:9B:37:C7:7E:8E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/594bef5f-8d11-4b6d-91ca-9cf560ae8674.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:24:c9:b0:d9:82:50:b5:bd:a9:ad:c7:a1:b4:da:51:d7:15:
         aa:a1:62:e6:0b:74:1d:7e:28:77:42:ef:a5:1b:01:47:8b:94:
         af:ec:30:11:59:1f:61:01:56:4f:7f:11:98:a1:8b:6e:06:8a:
         9d:be:57:5a:91:86:ef:58:90:fe:7c:55:96:e4:2d:17:f0:ac:
         a4:e1:c3:a6:26:98:67:98:0f:bd:af:11:f4:84:34:49:aa:54:
         95:6a:7f:65:2e:c2:1e:43:1e:42:68:8f:69:f7:42:35:51:18:
         17:ff:4c:d1:36:cc:df:1e:5d:7d:81:83:30:82:d9:8a:fa:64:
         f1:e5:50:86:69:19:47:0e:9f:5a:38:8a:5b:15:fe:2a:50:44:
         99:41:ea:fe:49:5a:75:7b:51:b4:67:a8:e2:d0:43:f9:24:45:
         22:33:24:a5:ec:62:7e:96:9c:64:26:37:39:59:8a:fe:38:e7:
         b4:61:c6:4d:30:51:76:35:51:fa:76:72:0e:ab:67:76:87:3f:
         4b:ac:fb:db:da:7b:6e:a7:81:f3:ff:16:89:1a:8a:e7:09:e9:
         f9:f1:e0:4f:fe:55:71:f8:ed:f9:95:ef:d1:70:02:d0:fb:1d:
         5c:c3:2a:34:20:7d:35:5c:e9:7d:0d:88:24:2e:71:8a:61:4c:
         89:d1:2d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:55:55 2025 by rpki-client