Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/3009b715-8196-3a24-8bd7-58ab776a5a57.roa
File:                     3009b715-8196-3a24-8bd7-58ab776a5a57.roa (raw, json)
Hash identifier:          aA5SErQ8+k4aPJfcPXlLECylJJMv0zysq+EGMywS5es=
Subject key identifier:   01:D6:A5:19:05:66:08:5F:F9:83:8C:E2:BD:D7:85:D8:88:39:8B:A9
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F43285849F9DFBF162BD23495B6005B80
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/3009b715-8196-3a24-8bd7-58ab776a5a57.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     206216
IP address blocks:        2602:fb54:c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:bf:16:2b:d2:34:95:b6:00:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=5c1e3996-606a-44e1-b60c-ecb404c8e601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:60:10:83:23:1e:6e:34:ad:4f:df:5a:ce:f8:
                    e8:87:8c:c8:b8:c7:3e:da:c9:a6:2a:fa:ee:61:8f:
                    6a:56:a6:81:6c:dc:ed:40:f5:83:64:69:fd:b3:4a:
                    95:62:fa:50:7f:1a:28:56:12:6c:a4:62:4c:c3:74:
                    1f:2f:53:a8:0b:b5:73:dd:2d:67:fa:c5:81:eb:a4:
                    7a:7d:4f:8c:ef:b4:c5:29:29:6e:14:59:37:64:77:
                    d2:01:14:a7:59:58:2a:6c:e8:02:33:a7:89:55:ea:
                    29:62:5b:80:fc:3e:79:62:e9:bf:27:ea:fa:b4:5c:
                    f3:e5:74:54:ec:9b:38:f3:66:6b:9f:d9:6d:69:47:
                    ae:11:55:c3:02:38:c1:9a:b8:56:5b:23:a3:9f:c3:
                    19:0b:f5:57:22:1c:9a:ea:bd:aa:fb:c9:6b:90:1a:
                    92:23:68:02:09:ab:95:03:d3:6f:b9:f1:4a:62:d9:
                    1d:97:e0:00:08:7c:23:35:85:c7:27:78:f6:cc:1e:
                    49:b7:c3:c0:24:1c:fa:5f:5d:fa:74:21:65:14:38:
                    5e:f3:89:cf:0a:b2:79:29:34:92:94:e0:71:55:ec:
                    13:6f:46:41:14:6f:b2:26:16:c3:40:1f:95:be:c0:
                    6b:94:4a:a2:ed:ac:5d:60:d0:13:f2:b9:18:e6:49:
                    3c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D6:A5:19:05:66:08:5F:F9:83:8C:E2:BD:D7:85:D8:88:39:8B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/3009b715-8196-3a24-8bd7-58ab776a5a57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:7b:69:a0:4b:04:02:34:22:83:4e:00:f9:3f:9e:7c:29:46:
         71:cc:c6:85:8c:be:ae:01:9a:f1:0a:22:aa:17:7f:13:4a:45:
         36:93:9d:64:d1:11:b6:43:f7:e6:74:e2:2f:8a:da:d5:7e:c9:
         81:3c:3f:a2:5a:63:73:23:68:9e:04:79:f4:40:c7:5a:61:ce:
         12:ff:89:2a:78:dc:af:46:07:a2:7c:a7:0d:5c:06:85:f2:08:
         18:c5:b3:0a:63:e8:a2:8a:4d:ea:b4:91:96:09:d2:c9:a8:05:
         98:59:e8:48:3d:5e:4b:48:8b:96:bf:e6:39:db:ab:3d:34:75:
         e7:c6:63:77:45:32:e8:3a:f2:f7:7f:83:6d:38:0c:f7:73:b2:
         58:3e:2f:ae:07:9b:cf:b2:06:e2:73:8e:f3:8d:7f:d3:f7:f8:
         af:d2:7a:d0:1d:e3:d0:3b:df:8c:57:64:7a:b7:3a:c5:49:9e:
         39:20:7e:8f:1b:ce:d7:b4:48:8e:ac:a6:e0:a7:f5:22:0a:23:
         05:fb:c7:48:f1:e3:34:a1:b3:19:22:ee:b4:35:68:6b:87:42:
         e0:6f:58:25:53:e9:fb:ce:7e:63:93:2f:e5:7b:5d:2a:98:2a:
         e0:a9:2d:64:c3:de:7f:ab:33:b4:49:46:64:b8:77:c5:ab:6f:
         89:0c:b4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 00:02:28 2025 by rpki-client