Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/783845fb-86e3-4591-a105-7b84159dcbed/96f50c02-7a78-3681-a47e-91c88510ce74.roa
File:                     96f50c02-7a78-3681-a47e-91c88510ce74.roa (raw, json)
Hash identifier:          UFgi7Sii1OCWp0kAza5iZlFWXcgHKVH+xDzeSshGc4A=
Subject key identifier:   BF:2E:3D:54:D0:80:F6:90:3F:6B:EE:D5:0A:66:78:1F:8B:A5:93:20
Certificate issuer:       /CN=783845fb-86e3-4591-a105-7b84159dcbed
Certificate serial:       010D0C9F4328584937D93674B7DFCBB6D6605D00
Authority key identifier: E1:8E:DC:2E:02:C7:19:46:AF:47:12:99:12:EE:06:63:23:AE:3C:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/783845fb-86e3-4591-a105-7b84159dcbed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/783845fb-86e3-4591-a105-7b84159dcbed/96f50c02-7a78-3681-a47e-91c88510ce74.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     998
IP address blocks:        2602:f870::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/783845fb-86e3-4591-a105-7b84159dcbed/783845fb-86e3-4591-a105-7b84159dcbed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/783845fb-86e3-4591-a105-7b84159dcbed/783845fb-86e3-4591-a105-7b84159dcbed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/783845fb-86e3-4591-a105-7b84159dcbed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:36:74:b7:df:cb:b6:d6:60:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783845fb-86e3-4591-a105-7b84159dcbed
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=6c92cacf-11f5-40d8-8105-577ee1cb0c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:90:7f:07:4f:d7:9c:1f:79:db:96:bd:56:53:
                    ca:79:7a:64:1d:d0:98:2b:64:e2:03:7b:c7:59:13:
                    43:f3:f4:4c:aa:ac:ba:ba:33:6e:70:0f:0e:76:19:
                    8e:06:46:d9:34:02:2f:f2:5b:28:13:10:17:de:b3:
                    3b:2d:e6:f4:2f:98:24:d1:ec:86:a6:bc:9a:50:af:
                    e4:f3:d6:8e:a5:2f:85:6d:e8:bc:35:1d:13:98:83:
                    fd:4a:d7:29:96:dc:01:22:fe:f2:62:74:7c:dd:65:
                    36:57:fd:79:ae:ff:38:3c:4d:6e:b2:af:cc:2b:5b:
                    57:19:c0:e0:40:7f:1a:cc:2a:28:05:2b:32:3e:3d:
                    ce:d5:7d:32:5c:af:d6:bb:f9:a3:62:0e:1a:a8:9b:
                    2f:76:6c:32:35:6c:ee:f6:4a:26:67:5f:b1:75:45:
                    ab:10:78:a8:c2:5a:8b:bc:ba:8d:5f:d4:63:78:1d:
                    81:43:1a:9b:e3:24:24:68:cd:13:f9:d8:0b:b1:d7:
                    1e:e1:d3:17:d2:47:07:c1:0c:52:50:5a:d6:70:59:
                    80:a8:8c:a2:75:b3:d4:f5:b0:32:53:00:30:56:c7:
                    1e:70:c4:4a:ad:17:64:f2:8b:f3:f8:cb:28:45:7b:
                    28:0f:4b:88:b2:d7:97:63:d5:38:bf:bc:25:c5:97:
                    b5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2E:3D:54:D0:80:F6:90:3F:6B:EE:D5:0A:66:78:1F:8B:A5:93:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/783845fb-86e3-4591-a105-7b84159dcbed/96f50c02-7a78-3681-a47e-91c88510ce74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/783845fb-86e3-4591-a105-7b84159dcbed/783845fb-86e3-4591-a105-7b84159dcbed.crl

            X509v3 Authority Key Identifier:
                keyid:E1:8E:DC:2E:02:C7:19:46:AF:47:12:99:12:EE:06:63:23:AE:3C:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/783845fb-86e3-4591-a105-7b84159dcbed.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f870::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:9b:c5:5a:42:9d:8e:c5:a9:f6:38:19:4d:ca:b1:10:1c:01:
         dc:ca:a4:57:21:0f:3e:80:42:a3:7a:fb:f4:29:02:7e:49:d4:
         08:ea:19:52:6f:54:c9:ca:2a:c3:af:cb:b8:ff:6a:fe:09:d3:
         a1:32:01:bc:fb:fb:f7:30:08:9a:fe:fa:e9:ae:e2:e3:d5:58:
         28:8a:db:1a:bf:64:f8:2f:96:6a:65:d6:04:2b:f2:17:01:fb:
         fb:a7:5f:f0:f5:6d:37:0f:bd:72:76:0a:c3:92:74:2b:34:c8:
         fe:13:fd:a6:b1:e0:c1:a0:b1:88:f2:27:ab:c2:83:af:2a:c9:
         88:00:f6:e0:02:69:57:80:36:c1:fc:5d:90:79:e0:59:a5:13:
         95:2a:bb:23:e3:20:5e:5a:af:c5:34:ba:f1:22:a8:77:19:10:
         ab:bf:08:7f:04:25:79:c4:6a:3f:84:f1:00:c1:f0:2f:95:87:
         19:4a:05:91:42:da:29:67:53:5d:fa:a7:62:b1:29:8e:32:b0:
         71:2e:ec:be:30:11:cd:c0:2e:c5:fd:6c:64:85:94:94:39:35:
         ef:06:7c:2c:20:c1:d1:42:01:8c:47:07:57:d5:65:06:a2:22:
         6a:96:0b:a2:8d:72:23:d8:fd:8a:79:31:23:2b:7c:9d:6d:ec:
         f9:07:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:58 2025 by rpki-client