Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/a02288ef-b90d-3b6e-ba31-41abbcd19dc0.roa
File:                     a02288ef-b90d-3b6e-ba31-41abbcd19dc0.roa (raw, json)
Hash identifier:          rLmLYbelz726ErLUECvdeOdPLuwNzUCgUxwNfxevbTg=
Subject key identifier:   50:6F:ED:6C:1A:D5:15:58:0D:4C:FD:27:2C:BD:59:20:E4:7C:38:9B
Certificate issuer:       /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
Certificate serial:       010D0C9F43285849955F135CD577EA64610EB540
Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/a02288ef-b90d-3b6e-ba31-41abbcd19dc0.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     21581
IP address blocks:        2606:7100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:13:5c:d5:77:ea:64:61:0e:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=62ede53a-725e-46e4-bacc-05afc5f638ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:16:ce:fb:bf:34:bf:df:90:a8:e8:69:95:db:
                    7f:cc:88:d6:40:e2:ee:cf:65:c5:50:27:27:34:34:
                    fc:dd:fe:d9:8e:90:82:fe:a0:7c:c8:7a:e4:eb:1e:
                    a5:5c:0f:b5:3f:04:c6:0f:c7:ca:e9:24:88:46:7c:
                    0a:43:17:65:4d:35:e0:c5:e6:d9:a5:78:8b:a1:65:
                    58:8f:23:74:88:3f:da:61:e6:54:05:5a:d8:4d:26:
                    bb:56:14:e4:f8:26:a5:a5:7b:fa:73:ce:97:9c:aa:
                    5e:41:1b:6f:98:77:ae:13:b8:b9:35:3e:e3:ee:f2:
                    15:ae:cd:8f:69:c5:e8:ab:d3:94:3f:c5:1f:8f:79:
                    8d:c9:30:b4:82:fb:94:ed:21:6d:4e:c4:e3:04:a8:
                    f2:9b:3c:d5:1f:ec:88:ed:3a:62:ff:33:49:63:0a:
                    8d:0d:c1:f4:09:0d:bc:bd:eb:3d:1b:c6:ed:5b:2b:
                    c0:3b:1b:04:cb:2a:5a:b5:6f:96:3d:98:97:1d:f3:
                    dc:26:ae:b8:c9:a5:77:fb:71:b7:cf:96:dd:5d:31:
                    3e:1a:9b:6f:d4:23:0c:4f:3f:fa:4e:1a:40:ec:77:
                    2c:58:b0:73:cb:fe:61:92:a0:df:53:75:69:3e:39:
                    82:ea:4a:1f:c5:f6:ec:dd:ef:59:1d:d7:bd:02:be:
                    a9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6F:ED:6C:1A:D5:15:58:0D:4C:FD:27:2C:BD:59:20:E4:7C:38:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/a02288ef-b90d-3b6e-ba31-41abbcd19dc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl

            X509v3 Authority Key Identifier:
                keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:9b:16:55:35:0a:1d:f5:a9:4e:92:a2:e6:3e:14:c3:f0:82:
         b2:ab:27:8c:0d:4f:6d:50:7d:ee:88:36:6e:5e:55:d0:7f:eb:
         33:72:68:d6:7c:ae:db:b9:9c:eb:9d:ec:eb:b2:cb:76:0d:dc:
         b9:49:dd:ed:15:18:d4:5a:2c:44:14:03:b7:87:91:d3:28:b7:
         4e:4b:d7:ad:95:8e:22:dd:4c:d6:5f:94:d5:b0:3e:2e:62:48:
         f1:30:96:1f:87:3a:cb:c7:45:01:0f:62:c0:b8:39:7f:15:de:
         ee:6b:37:dc:b9:25:c6:a5:aa:a0:49:50:9b:de:5b:05:45:94:
         57:c3:13:23:5e:db:75:c2:45:77:77:68:99:b7:14:75:7f:f2:
         cf:c6:f5:7d:af:cc:6e:4d:93:1f:c2:6f:4d:14:00:af:1b:26:
         62:8a:7c:e5:b7:ba:12:ce:8a:52:7d:66:37:d6:40:2a:34:54:
         21:ee:9a:b0:f2:f4:75:6b:3c:b6:cd:ef:cf:48:85:03:72:5d:
         e9:dc:24:cd:c8:37:1a:fb:eb:9e:dc:f6:7a:7b:23:f0:22:20:
         8b:7d:66:9d:f9:7d:2b:9d:11:f5:f0:32:72:c0:4e:d1:d6:3f:
         6d:9f:c7:0b:58:a0:25:16:74:3a:cc:e1:d8:fb:3a:6b:fa:1f:
         68:22:06:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:20:36 2025 by rpki-client