Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/68b02c83-df0a-3c30-9ec1-1c171bb74d7e.roa
File:                     68b02c83-df0a-3c30-9ec1-1c171bb74d7e.roa (raw, json)
Hash identifier:          XPBg2m+0iiCm5lzV5xgV3v9GlmpHVkN3sGV8iWip90E=
Subject key identifier:   BE:59:E1:EB:A6:6B:79:22:8E:88:DC:F2:12:BE:47:0F:C1:7E:FE:5C
Certificate issuer:       /CN=f330fac3-f4ae-4421-9305-7e1649195c36
Certificate serial:       010D0C9F4328584A480ADE26FB81B7384B4AFD00
Authority key identifier: EA:67:D0:88:A5:5B:1B:6E:49:1E:AC:DD:45:69:84:05:20:C7:93:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/68b02c83-df0a-3c30-9ec1-1c171bb74d7e.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     401293
IP address blocks:        2602:f848::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:de:26:fb:81:b7:38:4b:4a:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f330fac3-f4ae-4421-9305-7e1649195c36
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=631ce8a6-8091-4c8d-9301-dd82db54ce32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:83:e1:ff:0d:c4:cc:08:fd:31:60:73:02:5d:
                    75:b9:50:70:c5:a1:d8:7e:8c:26:4e:89:15:88:2b:
                    f0:ea:ae:f4:c0:28:7a:d1:39:ed:5a:39:be:b1:ec:
                    c4:87:a9:c7:1e:54:85:13:ef:8a:5d:98:ca:e6:0a:
                    90:91:2f:63:9d:f9:6e:5f:89:9f:60:4a:eb:d1:38:
                    ec:bb:de:50:92:3e:bb:a1:b0:27:8d:86:02:3d:5f:
                    70:dd:82:28:3d:ac:38:c5:ac:b7:e1:f6:37:3d:8b:
                    b7:72:1d:a7:cd:1f:04:96:b0:35:6c:d7:3b:80:14:
                    aa:ad:c8:eb:94:0d:c5:19:a1:b9:7a:1e:24:27:f3:
                    1a:c8:e2:09:81:8d:75:5f:63:3e:2d:46:5a:c5:6f:
                    bf:35:9d:e8:15:5e:47:14:c2:48:c8:f1:1e:69:74:
                    50:79:b8:04:39:bf:fd:05:aa:84:14:a8:1f:47:11:
                    51:f3:5e:fe:24:e7:ee:c5:ff:da:fb:7b:04:42:92:
                    ef:bf:e8:f3:00:d4:c9:f4:9b:bb:48:27:3c:34:1e:
                    53:2e:3c:c5:4d:73:d8:dd:37:a1:d6:45:35:c6:0c:
                    2e:5c:e6:34:b9:2e:24:2b:0f:dd:2c:67:90:39:80:
                    a3:79:6f:aa:1e:6a:32:e5:c2:6f:c9:f3:a0:a1:7d:
                    dc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:59:E1:EB:A6:6B:79:22:8E:88:DC:F2:12:BE:47:0F:C1:7E:FE:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/68b02c83-df0a-3c30-9ec1-1c171bb74d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.crl

            X509v3 Authority Key Identifier:
                keyid:EA:67:D0:88:A5:5B:1B:6E:49:1E:AC:DD:45:69:84:05:20:C7:93:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f848::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:67:3c:19:e5:5e:31:51:f0:c0:27:96:7b:5d:01:df:eb:2e:
         e1:e8:82:dd:82:ec:b3:ff:da:50:e1:e4:66:2d:35:33:b1:d4:
         45:d9:01:ce:38:16:ae:38:e8:58:80:dd:ae:3b:09:7f:89:37:
         16:48:68:47:0a:e8:bb:d9:17:4b:63:0d:84:4d:b6:0c:dc:b3:
         66:ac:c4:29:23:3f:20:4b:0f:70:6d:e8:52:e1:02:69:9c:fb:
         e4:58:7b:1c:09:d4:6c:29:28:9d:35:b6:3e:f8:54:90:1f:7d:
         ee:d0:50:c8:4a:0e:43:a1:55:e2:06:4b:9f:5e:e1:c6:f9:7c:
         c0:66:79:33:90:e6:69:e1:91:c7:89:d8:ae:bf:4f:28:8c:fe:
         34:5c:0c:a4:7e:5d:0b:17:ae:61:8a:a4:5d:95:04:ba:66:77:
         cb:69:fd:11:6f:f8:5c:46:83:b6:fb:29:5f:67:a6:59:70:63:
         0a:78:55:a7:c7:47:c4:6e:73:cb:e1:c2:da:44:64:cb:3a:ad:
         fb:f1:4d:40:65:53:9b:a8:fc:a6:bf:c1:68:a6:84:45:41:1e:
         f6:f6:79:24:fd:25:6d:ad:be:ae:9c:2e:6f:51:7a:4d:cb:a1:
         28:53:41:4f:3d:5c:10:38:b7:62:62:ce:da:e7:73:44:c2:a2:
         9e:0e:57:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:27:32 2025 by rpki-client