Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/4a62bdb1-0529-380b-a073-b9db5781902e.roa
File:                     4a62bdb1-0529-380b-a073-b9db5781902e.roa (raw, json)
Hash identifier:          YgK1T1hDycZD9GHCvfpehnOYlY3sZBDG9TRAeU2D7lA=
Subject key identifier:   52:5D:A8:A9:3E:D3:21:03:B0:19:AE:1A:C9:1E:5B:3D:A8:F6:DD:C9
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F43285849F9DFBAC7817B647E0660D6C0
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/4a62bdb1-0529-380b-a073-b9db5781902e.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     19529
IP address blocks:        2602:fd10::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:ba:c7:81:7b:64:7e:06:60:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=1847e60f-e370-4aa1-805c-7d780bd51838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7e:d5:f2:5a:f6:5e:47:d7:ac:eb:5b:1f:cb:
                    af:d1:ce:a6:03:10:96:cf:b9:13:61:67:8f:e5:69:
                    30:48:fe:25:19:c4:f0:42:ee:e5:74:1b:47:e9:fe:
                    07:fa:c6:7c:80:32:de:e4:d7:3f:b8:c1:22:c9:74:
                    b2:76:97:e0:7a:4c:c7:f9:17:95:2b:d9:c9:e5:80:
                    cf:64:bd:8d:00:92:e5:14:d7:bd:61:cd:ab:f5:60:
                    a3:ef:da:aa:6e:66:01:05:da:ec:3c:f3:7e:bd:a6:
                    5d:75:5b:1a:38:27:e7:e9:6b:96:7f:db:ba:1f:24:
                    38:2c:69:e2:76:4d:5c:41:f9:ae:34:dd:e3:f1:b8:
                    c7:1a:d3:09:26:1a:45:ef:96:5d:ab:e2:30:f6:e3:
                    c8:32:95:3f:86:ac:87:72:55:7c:c8:86:f9:98:dc:
                    a7:bc:28:72:52:34:46:8b:f2:53:ac:27:55:be:bd:
                    af:d3:ab:e7:62:4c:90:0f:8e:ac:68:bf:fc:8c:50:
                    cb:a4:35:34:87:ff:4f:a3:86:8b:5a:d9:c6:07:bc:
                    bf:15:da:52:ba:98:81:e9:28:e4:5e:c6:b9:95:02:
                    48:e2:8d:95:27:ef:46:ea:e0:13:77:9a:1a:1f:b6:
                    8c:13:76:68:0c:49:03:63:e5:84:66:e2:61:1c:91:
                    e5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5D:A8:A9:3E:D3:21:03:B0:19:AE:1A:C9:1E:5B:3D:A8:F6:DD:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/4a62bdb1-0529-380b-a073-b9db5781902e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:22:46:e1:1c:20:6e:59:82:71:44:91:3b:5f:6c:05:1f:7a:
         af:52:63:00:a1:43:ec:2e:ae:8c:92:a5:db:5f:f6:b8:58:58:
         11:a4:64:d6:be:17:a4:8b:6a:61:b3:dd:4c:66:35:39:cd:e5:
         49:78:dc:52:8d:7c:c7:fb:9b:95:ca:58:ff:ce:15:f9:4a:24:
         2d:17:76:be:ac:8e:9f:1c:ff:8c:49:5d:fe:1f:03:eb:15:43:
         2e:06:15:5c:18:d1:8a:58:91:f4:14:bd:88:b3:27:c8:d7:d1:
         5a:29:9c:be:29:00:62:1f:fd:72:47:89:c0:df:29:39:f4:0b:
         bf:83:ff:13:b0:58:9d:86:ef:40:e2:6c:9e:26:6e:1b:c6:e7:
         e9:99:4e:ea:e7:18:07:51:a0:48:93:ab:16:4c:7f:e1:f7:24:
         68:73:f4:92:11:a3:f5:18:4c:c6:11:40:a2:d1:89:41:a2:c1:
         2a:23:83:2c:c1:81:60:17:2e:30:df:5e:8f:3a:82:cf:e7:5f:
         52:c8:07:8b:06:11:e4:da:ae:dc:a9:07:37:36:76:1b:9c:1b:
         4b:63:3b:4b:0b:37:e1:09:3e:df:4b:19:43:ba:b3:c0:ad:b8:
         35:2e:79:de:2a:c6:2c:60:d1:69:03:54:77:c2:6a:d5:5c:c9:
         b4:6c:53:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:33:44 2025 by rpki-client