Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/a30773b3-ae2d-3bb5-bb55-d152a655d7a7.roa
File:                     a30773b3-ae2d-3bb5-bb55-d152a655d7a7.roa (raw, json)
Hash identifier:          QSt/c9by2HlFKWv55TcjekOWNyom0C6DxWAg0FgOgXA=
Subject key identifier:   6A:BD:09:B9:48:65:8E:02:76:16:79:C2:2B:D7:0E:9D:31:96:54:4E
Certificate issuer:       /CN=f2560405-675d-4c58-8230-db678dbdf9bb
Certificate serial:       010D0C9F4328584A34801AC2C3AE92C1164D0880
Authority key identifier: A8:33:45:BA:2C:CF:CB:8C:34:05:68:8F:36:2D:1B:46:75:38:3C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/a30773b3-ae2d-3bb5-bb55-d152a655d7a7.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     22348
IP address blocks:        2602:f6f9::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/f2560405-675d-4c58-8230-db678dbdf9bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/f2560405-675d-4c58-8230-db678dbdf9bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:1a:c2:c3:ae:92:c1:16:4d:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2560405-675d-4c58-8230-db678dbdf9bb
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=035abaee-2482-448a-9e70-6df81601ec86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:36:13:81:85:45:f5:4e:8e:02:af:df:2b:20:
                    d2:e4:6f:e1:34:38:ad:8b:14:4d:f0:52:9a:b6:e2:
                    eb:9a:46:e7:1f:b9:9d:15:9c:6b:a6:a4:7f:77:f2:
                    72:34:c5:d8:ca:d0:ef:a9:fd:7e:9c:62:ca:48:f1:
                    ee:3f:a4:8a:80:ff:26:ad:5e:15:9f:20:eb:24:80:
                    78:52:86:d6:25:98:18:85:63:6c:b7:69:4b:df:d3:
                    a0:74:44:e6:6f:25:cd:f1:39:f1:7c:c2:08:9b:a4:
                    04:c3:67:bd:20:b8:44:89:b6:93:c9:15:e8:59:f8:
                    9e:9f:b7:60:da:0a:a7:83:af:8c:61:e4:8f:4e:4f:
                    1e:e9:ea:db:26:a7:65:c8:02:30:1a:ef:e7:65:5a:
                    23:45:e0:88:f6:90:65:29:1f:50:00:af:3b:c6:a2:
                    43:4c:08:ec:70:cc:42:4f:4a:0d:53:5a:3d:cc:38:
                    83:31:4a:bc:b2:e1:23:fd:33:9f:5d:50:8f:9a:f0:
                    b1:27:f1:20:55:68:77:61:f4:69:4b:2c:c0:99:99:
                    4e:54:15:85:f4:1b:30:cd:07:a0:79:c9:9c:6d:83:
                    d2:6c:ee:c0:43:aa:a6:42:cf:1b:d5:76:c2:a3:3c:
                    39:0a:7d:e3:77:79:e8:2e:7d:7c:54:d2:9d:4d:eb:
                    49:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BD:09:B9:48:65:8E:02:76:16:79:C2:2B:D7:0E:9D:31:96:54:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/a30773b3-ae2d-3bb5-bb55-d152a655d7a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb/f2560405-675d-4c58-8230-db678dbdf9bb.crl

            X509v3 Authority Key Identifier:
                keyid:A8:33:45:BA:2C:CF:CB:8C:34:05:68:8F:36:2D:1B:46:75:38:3C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f2560405-675d-4c58-8230-db678dbdf9bb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6f9::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:76:7e:8b:97:e6:5e:67:7c:f2:99:8c:ce:fe:87:f3:ac:97:
         e5:d9:b2:99:b1:d8:a0:f0:3c:00:50:67:ad:2f:45:2e:cf:14:
         bc:fb:65:c0:e7:a5:10:4e:72:d0:f8:6c:96:dc:e3:d5:07:01:
         ba:41:61:5c:00:5e:19:26:a7:2b:b9:c6:96:fe:99:f5:4a:0c:
         fa:e6:04:98:b8:c8:67:9f:61:eb:ce:09:0d:66:20:bc:a9:11:
         89:67:fe:6d:f8:49:2e:01:af:da:35:db:c4:84:07:4d:54:1c:
         6e:ab:a6:ef:39:b3:2b:b1:7d:d4:9c:19:38:53:b1:d1:87:44:
         f1:fd:d1:64:d6:aa:bd:65:42:1f:99:2e:07:f6:73:ab:39:bb:
         2d:65:cd:84:5d:8d:92:66:92:36:19:0d:2c:37:b0:77:5d:7c:
         d5:e0:1a:41:91:29:62:8e:78:dc:60:50:9a:bd:e9:bf:42:86:
         11:9d:2e:03:e7:5a:46:f7:36:67:5e:b5:d8:63:1a:b1:78:58:
         11:56:12:03:62:a8:2d:6a:2c:ca:96:b3:62:8a:a7:c9:a9:6c:
         6c:5e:a4:1d:d0:97:bc:5d:34:43:7e:9d:4f:44:d5:2e:d9:92:
         33:9d:ef:de:61:bf:3b:b8:05:58:dc:9e:75:95:0a:a8:72:76:
         09:aa:a1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:27:20 2025 by rpki-client