Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/84c08845-7c56-3c58-ac59-8a896b8ac0f3.roa
File:                     84c08845-7c56-3c58-ac59-8a896b8ac0f3.roa (raw, json)
Hash identifier:          cT4P+0JJ+8ZkHCkTagqN52sKay5C909yvxf8l5MPwms=
Subject key identifier:   32:9D:B6:B6:9B:FE:14:53:B8:A3:31:09:23:9D:60:C2:C2:8B:86:E4
Certificate issuer:       /CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
Certificate serial:       010D0C9F43285849287E559FBE2C759E3FCF2B80
Authority key identifier: 7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/84c08845-7c56-3c58-ac59-8a896b8ac0f3.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     46427
IP address blocks:        2602:2c1::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:55:9f:be:2c:75:9e:3f:cf:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=f8e9c0c5-9de5-49cc-baa6-2e065392e643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:18:af:0b:6e:ae:b1:3b:0f:b2:42:8c:cd:59:
                    7f:26:c9:33:12:79:02:c6:1e:16:af:48:78:86:64:
                    e1:4b:86:66:81:a4:f7:1d:53:26:36:e7:a9:46:2b:
                    b1:b7:5e:7d:70:c1:35:d2:54:93:e6:1d:45:56:d2:
                    0f:85:74:c3:26:78:84:c9:5f:41:fd:fa:40:ad:41:
                    ef:c0:d1:0f:5f:23:e0:df:90:1a:43:88:57:17:ba:
                    25:b6:38:89:68:cc:bc:25:92:df:63:9f:26:5b:bb:
                    d2:2e:f4:a2:66:e2:c2:97:43:07:3a:ba:28:25:14:
                    44:92:ed:fb:df:be:1e:4e:2f:62:87:65:f6:37:43:
                    7a:be:ee:c1:02:4c:c8:d9:0a:a4:a3:e5:0c:6c:b3:
                    11:80:46:98:e5:2a:c0:54:1f:c1:a5:ac:14:c2:bd:
                    ca:0f:9f:b4:d9:32:09:e8:80:de:fd:cb:fb:48:ac:
                    92:f5:72:fd:1b:62:ff:78:c8:b5:e2:0c:32:2f:2b:
                    23:b2:58:6e:f1:60:e8:42:fd:6c:d9:70:26:5a:a1:
                    82:38:24:88:5f:18:d1:c5:22:c3:58:9c:21:fe:6e:
                    eb:df:b6:95:ca:7e:ae:ee:23:70:5e:3f:e1:2e:9a:
                    18:b9:b7:8c:b8:29:95:a1:18:71:01:66:d0:09:40:
                    36:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9D:B6:B6:9B:FE:14:53:B8:A3:31:09:23:9D:60:C2:C2:8B:86:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/84c08845-7c56-3c58-ac59-8a896b8ac0f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:95:6d:65:08:76:4e:d9:04:db:86:81:68:db:c9:08:53:75:
         1c:fc:cf:eb:46:c3:df:c0:bd:62:3c:1d:3d:7c:dd:56:d8:d4:
         c2:04:0b:b9:d2:99:3c:5c:8e:5b:b5:0a:b4:58:8d:9a:92:9a:
         6d:13:c3:b6:19:dd:7d:d0:46:55:98:f0:81:47:9c:41:d3:fb:
         fd:9d:fb:cc:8b:90:70:ad:3c:d2:cd:65:6f:09:f0:fe:fe:08:
         de:bb:26:50:f3:85:78:e1:44:de:5b:69:22:0a:8d:b4:7e:6b:
         48:45:be:08:8e:95:10:0a:72:2c:e7:17:e9:7f:37:a3:69:98:
         20:40:30:bc:25:1f:60:b9:bb:1f:b8:1f:fd:05:ee:a2:73:31:
         be:d0:b3:f5:67:f3:1d:25:e4:26:f1:60:93:e2:34:42:3a:9f:
         d7:9a:33:83:dc:b2:21:61:1a:08:cd:e4:f2:80:18:59:e8:57:
         5b:89:82:0f:57:0b:63:53:78:6a:14:60:a7:df:6b:66:33:82:
         a4:24:28:87:50:77:8b:79:90:91:ad:b5:b4:03:0e:b5:61:e7:
         11:92:ee:09:19:0e:70:4a:6c:33:03:92:e9:82:53:70:b7:ae:
         f4:26:77:a2:d0:02:0b:33:df:cc:ee:f1:7b:79:4a:e8:f9:3f:
         98:ee:fc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:06:51 2025 by rpki-client