Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/700a3682-aed5-38cd-9733-139d2b4668a7.roa
File:                     700a3682-aed5-38cd-9733-139d2b4668a7.roa (raw, json)
Hash identifier:          g0LOFjrJI2v7F43wwGN2rsuaRfew64EhwLouuesW2wA=
Subject key identifier:   E9:58:64:96:AF:E3:25:C0:EF:7D:68:BC:5F:D0:45:54:1F:D2:D5:B3
Certificate issuer:       /CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
Certificate serial:       010D0C9F43285849F17FD878B6D76C40E4523780
Authority key identifier: 1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/700a3682-aed5-38cd-9733-139d2b4668a7.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        2602:f775:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:d8:78:b6:d7:6c:40:e4:52:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=167cf94a-bae3-4a55-9763-301d26d38c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:14:2c:cf:94:76:5c:16:98:1d:34:e6:47:98:
                    6f:e5:99:fc:7f:e7:33:58:f9:98:88:2c:1d:54:4d:
                    ae:af:1a:3b:da:69:88:72:06:c6:9a:ae:20:44:62:
                    1f:ab:14:48:77:36:7f:fc:99:e0:bf:6e:54:b0:e7:
                    41:5a:dd:dd:2b:2f:26:5c:06:1a:e2:1d:6b:aa:dc:
                    db:87:94:1e:ff:1b:97:22:76:fd:b6:00:04:f7:10:
                    65:41:9c:74:54:0d:27:95:1c:8f:d2:5a:07:3d:3c:
                    35:2e:9c:21:73:5f:5b:81:a8:00:99:f0:1a:78:d7:
                    ad:e3:80:1c:ed:9c:e4:80:39:95:90:24:1e:88:39:
                    ee:e2:4f:89:9a:a2:01:44:9e:40:c9:58:53:ee:14:
                    c0:ed:03:e7:61:b6:5b:91:97:b3:67:5e:ad:b9:99:
                    10:05:c5:59:0d:74:a5:8f:93:f3:c7:9b:7f:c6:e9:
                    ba:c7:72:98:c2:1c:04:c5:c9:25:e5:14:90:6d:87:
                    d3:0a:31:fc:96:5d:a8:a4:30:b2:82:9f:3e:f8:3c:
                    e0:e9:cb:ad:f5:18:0f:23:31:ed:c8:ff:69:49:83:
                    1b:4f:ef:78:f6:ba:aa:04:42:6d:de:28:c2:71:2a:
                    70:8d:1f:d3:43:61:ab:18:e2:94:7b:93:94:22:a8:
                    a3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:58:64:96:AF:E3:25:C0:EF:7D:68:BC:5F:D0:45:54:1F:D2:D5:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/700a3682-aed5-38cd-9733-139d2b4668a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl

            X509v3 Authority Key Identifier:
                keyid:1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f775:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:77:9e:60:40:61:5e:3b:b8:7e:28:37:11:cc:ee:78:37:ac:
         a2:2b:21:f8:23:5c:ae:98:81:fe:83:ac:fd:46:34:c3:d1:97:
         f7:08:78:e8:69:6c:0b:3a:19:cb:ea:06:f0:56:5a:31:04:09:
         67:a8:aa:78:83:8b:b3:40:7b:55:77:48:04:25:79:2b:1a:6b:
         c0:86:5a:18:da:ac:85:34:17:0a:f9:09:00:d1:43:0d:d2:31:
         0d:93:33:7b:92:fc:0b:74:9d:84:a4:cd:bd:cc:09:47:7a:fc:
         4f:ff:16:d8:17:2e:88:08:f3:f3:bd:21:a0:6b:2f:12:19:7c:
         9b:69:63:d7:6c:09:51:6d:fb:13:f9:19:d0:d0:00:0a:aa:1c:
         f5:50:80:01:0d:e2:24:e5:0f:58:3a:d6:23:a3:ac:26:9c:be:
         58:5a:73:55:49:f8:84:2c:53:81:70:df:9d:e7:35:3b:0d:35:
         47:a5:76:75:12:0a:db:ac:d6:67:d0:3e:2c:22:57:da:e8:1d:
         a5:80:47:ef:2c:92:7b:41:b7:f0:fd:b1:ab:b2:e9:9e:87:66:
         54:f7:3b:b0:62:43:52:96:1e:d6:76:d3:3d:ca:c5:e3:44:61:
         72:9a:2c:ce:9a:54:b5:10:8b:42:7e:60:c7:6c:77:e9:e3:4c:
         cc:81:de:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:57:59 2025 by rpki-client