Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/dc8c186a-9539-3a39-b3d5-dd7be763ed95.roa
File:                     dc8c186a-9539-3a39-b3d5-dd7be763ed95.roa (raw, json)
Hash identifier:          HJlS39qUyqT4GbSHuClWo55hDL7kLQuDQvrSjUltzYA=
Subject key identifier:   8A:BC:2B:54:DC:3A:C1:E6:6B:1C:C8:A3:B9:CA:7E:81:A2:F1:C1:53
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F432858497AD9ABB0A521910D8525D200
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/dc8c186a-9539-3a39-b3d5-dd7be763ed95.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     206216
IP address blocks:        2602:fb54:1000::/36 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:ab:b0:a5:21:91:0d:85:25:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=31c93989-d420-44b5-854c-03166b5fc56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:44:dc:53:70:63:e6:7a:f5:2e:14:f1:a7:32:
                    33:72:b7:1c:72:a1:f4:ba:fb:1a:69:4f:30:2f:ab:
                    a0:e8:54:a7:9f:f9:5d:40:1f:12:db:7e:79:58:84:
                    79:c9:9b:37:46:e9:ca:c8:74:fd:30:21:66:ba:30:
                    83:f3:0f:fc:97:86:77:19:44:89:ea:99:b1:47:59:
                    31:6c:b1:16:22:7d:9f:e0:99:ff:0a:89:df:05:30:
                    de:a2:d1:fc:80:6e:d5:99:fd:96:e6:84:98:1b:06:
                    42:e9:90:d9:22:fb:06:97:12:5b:4c:b8:3a:75:cc:
                    68:0b:90:83:b7:36:d9:75:0d:34:f4:21:fb:4c:67:
                    d6:e2:f9:a7:bc:fd:fa:10:4b:e0:a8:4d:66:7c:bd:
                    ac:0a:31:10:c6:e3:90:55:7d:20:cd:e4:fa:79:ff:
                    33:25:15:ee:f7:03:13:af:15:93:44:47:09:21:13:
                    19:5b:04:dc:4b:cb:e4:33:43:d2:56:7a:2b:e2:74:
                    97:6a:98:16:af:40:a0:84:c8:85:93:64:0a:ac:34:
                    a7:b3:cf:0b:a2:6c:e5:b9:e9:68:a3:cd:c8:f9:fb:
                    39:8f:61:92:9d:51:53:32:0e:a8:57:42:8a:b3:ea:
                    9b:48:2b:aa:53:18:7d:82:ea:cc:8a:06:7f:3d:bf:
                    a4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BC:2B:54:DC:3A:C1:E6:6B:1C:C8:A3:B9:CA:7E:81:A2:F1:C1:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/dc8c186a-9539-3a39-b3d5-dd7be763ed95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:e7:0b:71:65:34:31:06:85:ba:13:af:7d:fd:ef:b7:d3:05:
         d4:87:90:bb:29:1b:ab:1a:84:f3:02:53:17:f8:40:36:0a:c9:
         34:35:df:5c:78:ac:82:db:b8:c1:08:3c:fe:b5:a7:48:8e:66:
         fb:fe:7e:14:40:27:ad:d4:a1:da:a3:d8:88:74:cd:02:07:95:
         99:2e:b4:a5:1f:07:28:26:83:45:c5:e9:fc:be:f7:18:48:0d:
         62:31:67:7f:f4:b2:ef:27:b2:8f:17:1c:8d:02:83:76:7f:10:
         c1:11:08:66:31:23:dc:87:35:2e:54:d6:c1:95:ba:c9:50:f4:
         f5:99:cf:54:71:aa:63:db:b6:26:21:ef:fb:2a:60:83:fa:dd:
         3e:ce:70:f0:2e:3e:01:0f:0f:b9:dc:f3:15:5d:b2:6c:5a:25:
         f9:f0:9a:6c:ff:56:e5:bd:0b:fc:3d:56:6b:52:b3:1d:f8:12:
         25:13:8c:84:28:41:75:40:a4:b6:f2:a6:90:57:59:eb:37:51:
         91:e9:91:c5:1d:bb:18:04:5e:ce:ec:98:a3:86:d9:20:06:2f:
         d3:44:6c:fd:5e:c4:da:25:13:71:0a:c2:a5:06:34:c3:cd:3b:
         11:a4:1c:11:d6:cf:30:63:c3:3e:a6:6c:b8:92:ab:74:bb:5c:
         61:6f:60:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:04:10 2025 by rpki-client