Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/4c5676ec-271f-350c-b2f3-e074761d13ff.roa
File:                     4c5676ec-271f-350c-b2f3-e074761d13ff.roa (raw, json)
Hash identifier:          ejqySyVWv9e2J9H+WevNBkG5HKkeZoJhx+gruHaJAic=
Subject key identifier:   85:19:7E:C1:B3:AD:25:F0:62:1B:97:2F:13:CD:70:CE:50:B9:A2:F5
Certificate issuer:       /CN=a67e3748-c8c7-4114-8dc5-c4c18b0f8d30
Certificate serial:       010D0C9F4328584A5B95A71CE80DFA6409EEC140
Authority key identifier: 7F:01:39:18:A5:81:6F:DD:CD:EB:8C:B5:9E:B1:EB:B7:BD:57:2C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/4c5676ec-271f-350c-b2f3-e074761d13ff.roa
Signing time:             Mon 30 Jun 2025 01:00:50 +0000
ROA not before:           Mon 30 Jun 2025 01:00:50 +0000
ROA not after:            Sun 28 Sep 2025 01:00:50 +0000
asID:                     29769
IP address blocks:        2602:f8aa::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5b:95:a7:1c:e8:0d:fa:64:09:ee:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67e3748-c8c7-4114-8dc5-c4c18b0f8d30
        Validity
            Not Before: Jun 30 01:00:50 2025 GMT
            Not After : Sep 28 01:00:50 2025 GMT
        Subject: CN=f114bced-e983-4729-a2b0-762a29323eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5e:53:3f:d7:f2:d1:0e:dd:fa:39:db:24:5a:
                    01:1e:43:4c:0e:1c:30:06:5e:09:71:fd:eb:15:a9:
                    52:9d:04:21:70:67:ba:f3:b3:dc:06:98:d4:95:69:
                    76:8f:aa:a7:12:43:36:3a:fb:97:14:5b:7f:bc:4f:
                    83:3f:38:69:28:21:5a:2a:78:a1:a4:f7:ff:b4:3f:
                    92:fb:76:8b:3e:68:05:84:c7:67:ac:25:ce:22:d1:
                    2e:4d:5a:b7:4c:c1:98:c9:4e:59:b0:59:b7:64:02:
                    4b:ff:57:84:ed:47:bf:19:9f:5a:66:1e:83:59:6d:
                    ec:b5:ed:05:bb:56:73:7f:fa:fd:62:28:f5:f3:4c:
                    2e:ba:3c:55:12:b8:68:65:1c:79:91:de:9c:60:47:
                    52:1f:41:3c:cc:b5:e4:2e:7b:8c:5a:80:7e:ad:b7:
                    c8:a4:4b:4d:ff:f9:41:55:99:67:ca:4f:23:de:fb:
                    57:70:12:8d:7a:32:27:01:d5:7d:d1:49:cd:e3:0b:
                    24:06:16:81:c1:80:57:53:73:61:e8:7d:7b:35:04:
                    fd:a9:01:fa:5e:dd:f3:2e:44:e3:d7:46:ae:62:46:
                    2d:34:1f:e9:87:54:3d:76:5d:39:8e:a6:a0:7e:0f:
                    b7:b7:8c:0c:fa:f9:e8:29:d8:fb:77:48:f5:8a:1c:
                    ed:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:19:7E:C1:B3:AD:25:F0:62:1B:97:2F:13:CD:70:CE:50:B9:A2:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/4c5676ec-271f-350c-b2f3-e074761d13ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.crl

            X509v3 Authority Key Identifier:
                keyid:7F:01:39:18:A5:81:6F:DD:CD:EB:8C:B5:9E:B1:EB:B7:BD:57:2C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8aa::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:9b:24:50:9d:a9:77:5a:47:1e:77:df:9f:eb:ae:d3:e2:4f:
         9c:e0:9c:36:2e:3e:98:17:86:46:f2:39:1f:e3:f7:93:a3:03:
         11:a8:76:65:12:f4:6c:8b:f5:85:7f:4c:36:53:87:a4:1d:26:
         95:9f:1e:f9:ca:9f:29:d0:80:e0:25:4e:8f:7a:a5:3e:f5:5f:
         16:14:b0:3d:19:d7:3a:66:c3:85:e8:d8:ae:b9:5a:77:a7:4d:
         88:e2:fb:80:d8:e7:c7:cd:31:2c:91:cc:05:3b:61:3a:be:6d:
         13:ed:92:08:52:50:e4:1d:26:59:37:95:22:df:44:25:19:37:
         03:6b:2b:ac:97:85:56:85:28:42:dc:a4:4b:3f:80:52:ca:a8:
         7f:f7:05:d5:0c:34:cd:86:ab:3f:96:31:ec:75:a9:cb:70:ff:
         da:11:e2:4f:fd:fa:6f:12:e9:1b:08:3b:8d:69:63:e5:4c:0a:
         9f:ae:1f:2a:6d:7c:ea:6a:d3:fd:aa:5b:25:3b:17:0f:cc:e0:
         70:e7:6f:c4:87:04:25:32:c7:55:68:11:61:d9:d8:19:95:31:
         0e:7e:96:bf:77:d5:21:6b:30:b0:51:f8:2d:3a:45:18:03:96:
         e1:4d:5b:71:a5:48:7d:a1:d7:ca:fa:62:24:4e:e8:29:41:5e:
         fb:a2:87:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:18:37 2025 by rpki-client