Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/eba3c881-4793-3d27-b8a0-c5d10a55657a.roa
File:                     eba3c881-4793-3d27-b8a0-c5d10a55657a.roa (raw, json)
Hash identifier:          E0O/dgwQHdDhucMH4i1uNlCJzVMgUlixd1LUXQJApUw=
Subject key identifier:   33:4E:71:3E:FB:1C:E3:67:4A:B7:05:3D:C4:29:4A:6D:34:6D:82:04
Certificate issuer:       /CN=aa34647f-3229-480c-9b05-3cf0b00fa173
Certificate serial:       010D0C9F43285849B85911BB7F5BBE5C0B9D8900
Authority key identifier: F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/eba3c881-4793-3d27-b8a0-c5d10a55657a.roa
Signing time:             Fri 02 May 2025 13:42:01 +0000
ROA not before:           Fri 02 May 2025 13:42:01 +0000
ROA not after:            Thu 31 Jul 2025 13:42:01 +0000
asID:                     26431
IP address blocks:        2602:f666:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b8:59:11:bb:7f:5b:be:5c:0b:9d:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa34647f-3229-480c-9b05-3cf0b00fa173
        Validity
            Not Before: May  2 13:42:01 2025 GMT
            Not After : Jul 31 13:42:01 2025 GMT
        Subject: CN=7e9aa31f-9968-4078-a2bc-54ce9c8ebb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0e:8b:86:95:a1:a6:6e:a1:f9:a9:00:b2:a7:
                    12:19:99:99:01:03:93:95:15:50:56:39:6b:0d:48:
                    05:0e:b8:1a:22:70:88:ba:93:f5:9f:c7:cf:bb:f9:
                    91:93:5d:f3:50:3c:d4:5a:b5:63:f0:9b:ab:47:13:
                    23:4a:66:5f:86:3b:7d:17:7e:44:75:20:06:07:6d:
                    54:bb:ba:a0:d5:4a:99:bd:b5:43:3c:ff:0c:fa:ec:
                    8a:eb:b2:cd:6c:3f:80:16:37:22:9c:6a:20:13:f1:
                    eb:1d:79:09:45:d8:c0:67:b2:f7:73:46:53:b5:0f:
                    fe:3b:98:55:eb:11:7d:14:c5:01:8f:e9:4d:65:44:
                    37:31:56:15:37:5d:47:85:bf:27:d3:41:42:e0:15:
                    d9:ab:e1:97:f8:2a:cb:ba:01:b0:22:1a:69:8e:58:
                    46:cd:4c:c1:86:d6:d0:5b:6b:87:c3:6f:8c:3a:76:
                    4b:0a:63:3e:17:1b:5f:cd:6a:af:f6:ea:91:3d:13:
                    cd:91:7f:3e:1f:85:50:a0:57:6b:92:f8:ac:dd:78:
                    81:44:af:ac:74:d8:0d:9c:d2:52:a1:0d:04:70:a1:
                    09:6b:7d:7a:9e:93:62:f9:21:99:0c:85:d8:d9:14:
                    d4:52:cd:99:a6:d6:da:66:70:87:71:0c:14:e2:7e:
                    b8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4E:71:3E:FB:1C:E3:67:4A:B7:05:3D:C4:29:4A:6D:34:6D:82:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/eba3c881-4793-3d27-b8a0-c5d10a55657a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl

            X509v3 Authority Key Identifier:
                keyid:F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f666:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:54:39:95:8f:8c:5f:4d:af:be:e5:09:66:b8:3c:d4:35:de:
         b7:8b:c9:10:ab:d9:a5:6c:36:8e:44:75:5b:61:2a:72:9c:25:
         b6:1c:b5:4a:9a:29:6d:db:ab:e8:e5:78:cf:3d:60:4f:53:c2:
         ce:d3:2d:fb:e2:b2:5e:61:79:ef:20:5b:96:aa:19:80:fe:b2:
         49:a0:4e:fa:32:bc:66:01:aa:ce:c6:a0:a3:73:88:c2:26:c1:
         ac:12:e5:ac:8d:e9:66:62:8f:c9:ac:9a:8e:98:49:42:6a:58:
         80:0a:4e:f4:33:c0:15:dd:7b:fc:56:ee:9d:62:87:b7:c4:5a:
         4d:88:05:6b:4e:7e:3c:33:9d:2d:b3:38:94:42:8c:79:c5:8d:
         c8:9d:86:d4:d4:27:2c:cd:38:6b:64:bf:a2:b0:dd:53:93:5d:
         3d:19:c0:52:9e:24:de:46:f7:c2:46:b1:83:d0:2a:9f:90:76:
         4d:d9:0a:26:41:98:e9:52:85:5e:88:c6:ef:e4:3e:ca:06:68:
         9f:89:43:d4:cd:54:7b:32:d2:c4:22:c8:46:fc:ab:c8:fc:d9:
         56:1e:06:0c:22:72:62:0c:8c:28:05:48:ca:f5:ea:7e:57:dc:
         de:27:6e:36:24:0f:46:64:76:f5:ba:c5:fb:e4:e6:ce:59:3a:
         70:d1:f8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:02:38 2025 by rpki-client