Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f5257e01-e887-3881-9b9a-10b1b96b1979.roa
File:                     f5257e01-e887-3881-9b9a-10b1b96b1979.roa (raw, json)
Hash identifier:          PeM+6Ev9p5dGRbKJv3X+QT23Mix8DRC1w+XggKM3zW0=
Subject key identifier:   D2:4C:2A:EB:FB:0B:EE:55:B5:4A:02:FC:58:CC:47:00:4B:AB:8F:09
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F432858497AD9ABDA632BEE1C4CBA7800
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f5257e01-e887-3881-9b9a-10b1b96b1979.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     22295
IP address blocks:        2602:fb54:1000::/36 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:ab:da:63:2b:ee:1c:4c:ba:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=a6ef885c-7771-43b5-847a-12e6e54f7ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:11:3d:94:a8:5a:fa:95:f1:66:8c:1f:26:ee:
                    de:64:eb:60:28:67:5d:26:32:80:b0:54:88:06:aa:
                    e1:9d:6f:c2:af:57:1d:ad:70:40:df:26:6f:87:74:
                    41:18:bf:9a:25:5c:03:7f:2c:9e:40:1c:51:a3:cd:
                    c4:b3:f3:5f:54:39:a7:cb:13:60:cc:6c:56:0a:8b:
                    eb:71:96:87:fe:26:ed:65:cc:f2:8b:a8:36:8a:77:
                    c9:14:b7:36:d2:8e:6d:64:a8:b9:e2:32:bf:d0:cf:
                    fa:14:80:49:72:d9:20:4b:c7:2f:33:68:77:04:b8:
                    45:5c:21:b5:3b:40:68:54:07:57:c1:49:70:57:e6:
                    fe:3a:45:5b:0c:00:bb:90:76:9c:54:b6:33:82:c6:
                    71:c3:95:5d:e3:58:af:20:db:c2:82:54:4d:ca:6d:
                    34:0c:d9:d0:ed:7f:91:5a:7d:92:7f:ee:72:ed:f8:
                    4b:da:4d:7f:fe:30:bb:b5:73:b7:60:a4:0c:ca:6b:
                    2e:f9:61:5e:29:8c:c1:6d:2a:ba:c5:9f:13:44:f7:
                    d6:44:63:35:11:06:05:f8:43:eb:e8:da:23:60:0e:
                    6e:c1:66:73:9d:2d:c3:34:34:79:38:d9:a1:70:38:
                    54:26:e3:0b:77:17:a2:94:44:c1:48:3e:3a:ea:ed:
                    bd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4C:2A:EB:FB:0B:EE:55:B5:4A:02:FC:58:CC:47:00:4B:AB:8F:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f5257e01-e887-3881-9b9a-10b1b96b1979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:54:24:bb:b2:a1:30:04:c4:e6:43:1a:ef:58:c1:d4:cb:93:
         07:bb:df:ce:e1:43:e7:4f:a2:35:d5:39:80:2f:14:b0:57:60:
         80:84:b3:65:88:7b:0b:b2:eb:cb:70:04:a1:e5:f9:80:54:3a:
         5b:6d:80:8d:88:31:e2:0d:1e:62:b3:90:63:d3:ac:db:dd:b5:
         e5:4c:96:17:1f:4e:e7:35:35:85:bb:c9:62:6c:cd:36:aa:ed:
         17:06:87:74:8f:99:58:25:34:ca:5a:2d:8d:7c:49:d6:d5:42:
         35:3d:95:6b:a1:2b:39:47:84:af:62:16:a4:9f:76:22:78:e2:
         29:a8:29:50:d0:46:d3:9c:ee:c5:1b:e9:dc:86:67:61:4b:ec:
         4d:cd:8a:b5:51:87:d9:a0:8c:12:9f:7c:72:d0:50:bb:bb:f4:
         05:b8:e7:69:ad:42:0e:f0:32:7b:e5:3e:fb:1b:05:f7:8c:00:
         db:0c:d1:f9:83:0e:b9:b7:04:c9:86:c5:e7:a0:09:b3:c3:d4:
         fc:9d:77:39:e2:35:58:a9:0c:bf:ce:9f:43:2f:ac:aa:db:60:
         3d:30:2d:5a:41:77:ef:4c:14:c6:5b:1a:69:21:94:9b:a9:f3:
         db:07:16:d2:91:b0:92:d1:38:32:77:62:8e:43:07:f2:c1:28:
         7d:ea:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:38 2025 by rpki-client