Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492/659c52ff-5983-3d6f-9c69-58d48fcb3c32.roa
File:                     659c52ff-5983-3d6f-9c69-58d48fcb3c32.roa (raw, json)
Hash identifier:          PlfzLEX1KXzUkjgOBZ9k08KzeuXAbJ9Tps1N2iNyt9k=
Subject key identifier:   5D:83:FF:4A:29:02:0D:EE:51:E8:2F:5A:97:7A:D5:C7:D3:CF:24:D8
Certificate issuer:       /CN=cfd19080-dcb6-4ec7-82bd-8ac83510c492
Certificate serial:       010D0C9F432858499F2491D58CA4DFA038BC0D00
Authority key identifier: 81:20:02:8B:31:FF:8B:40:BF:2D:78:2D:9F:E4:29:63:8E:CC:F8:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492/659c52ff-5983-3d6f-9c69-58d48fcb3c32.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     401294
IP address blocks:        2602:f84b::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492/cfd19080-dcb6-4ec7-82bd-8ac83510c492.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492/cfd19080-dcb6-4ec7-82bd-8ac83510c492.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:91:d5:8c:a4:df:a0:38:bc:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfd19080-dcb6-4ec7-82bd-8ac83510c492
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=05ebf388-bbd8-43eb-a27f-bdeca5ebb3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:b0:09:2e:1f:76:62:d3:44:c1:97:d6:8a:
                    76:6e:71:5c:e3:14:8f:f7:8e:5e:bf:0c:76:91:9b:
                    69:4b:c9:77:3d:8e:73:b9:f2:51:c3:ec:c4:6a:85:
                    0a:d0:af:06:91:c9:be:f8:57:d1:89:b6:aa:f7:5c:
                    5d:58:09:ab:5d:b9:ee:dd:99:30:d3:8f:d0:6b:39:
                    17:e8:7c:23:16:9a:32:2f:2f:4f:38:a7:dd:0a:72:
                    8d:c1:97:27:56:5a:17:c7:05:9e:23:25:02:04:62:
                    5d:e5:7e:dd:d5:53:6a:fa:e8:18:7b:d9:9f:70:0f:
                    e3:f4:16:51:41:d7:15:62:1b:be:1d:76:f0:d8:0e:
                    93:15:d6:4e:ea:be:6f:3d:6e:03:65:e7:c3:81:ca:
                    d8:79:f6:8e:34:bc:fd:54:58:d3:4a:f7:df:55:99:
                    19:64:f7:f9:2e:88:66:81:62:18:6c:9e:95:d6:90:
                    5e:57:fc:b5:88:ea:3c:91:38:4a:14:5e:f5:e1:dd:
                    d9:50:65:01:7a:85:c4:c3:bc:98:74:fb:79:11:9c:
                    f0:d6:ec:85:cf:41:a6:76:b5:52:1b:45:dc:53:68:
                    32:86:cf:59:94:77:36:38:d7:df:c0:48:40:97:4d:
                    0b:ed:3c:ee:30:a0:e7:f1:85:fa:56:95:bc:3b:cc:
                    37:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:83:FF:4A:29:02:0D:EE:51:E8:2F:5A:97:7A:D5:C7:D3:CF:24:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492/659c52ff-5983-3d6f-9c69-58d48fcb3c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492/cfd19080-dcb6-4ec7-82bd-8ac83510c492.crl

            X509v3 Authority Key Identifier:
                keyid:81:20:02:8B:31:FF:8B:40:BF:2D:78:2D:9F:E4:29:63:8E:CC:F8:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f84b::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:50:b2:52:d6:90:c4:86:69:46:d2:69:7f:3d:62:77:d6:fc:
         ec:44:25:46:ab:b7:6d:ca:56:b4:28:fe:70:3c:fa:53:99:ee:
         e0:a2:87:b7:46:90:f5:3e:91:44:32:bb:52:60:60:06:b6:52:
         f8:ac:db:82:64:fb:94:3c:0a:4a:7c:c9:ee:32:29:8e:29:c8:
         de:61:49:ce:8f:91:41:8f:09:f5:27:dd:3d:c6:c2:f9:fb:d9:
         bc:52:af:06:4d:4d:c1:af:8c:7b:c6:aa:dc:cb:df:17:a4:76:
         ae:7a:1e:d9:c6:4e:c3:8e:2b:97:1c:2f:e2:be:ee:00:72:66:
         f9:89:4f:9e:b6:28:d1:e2:9c:4d:2d:42:5e:f9:c5:ff:7a:45:
         1c:f6:3c:34:f2:fc:54:90:9f:99:99:62:c0:58:e4:a8:25:5f:
         1d:60:53:b9:77:17:72:57:fb:2d:80:64:3a:5a:f4:83:25:02:
         b8:d9:d1:99:ef:51:ab:dc:85:b5:0a:43:b2:df:47:32:d9:3f:
         1b:2c:b5:a8:a2:e1:83:d1:17:a3:58:09:22:80:08:66:91:bb:
         b6:52:4e:da:e2:b2:57:81:4c:4f:d9:4f:cf:c0:90:44:6c:20:
         27:25:a9:fc:65:fc:12:70:38:37:97:c0:35:b5:72:48:a8:f8:
         be:6a:8c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:00:32 2025 by rpki-client