Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/6a093ec8-9aed-3637-8024-8dac0b00cfbd.roa
File:                     6a093ec8-9aed-3637-8024-8dac0b00cfbd.roa (raw, json)
Hash identifier:          UJgjWgu220APJTjZxSL8RjhhPSahfGPgGj9vTTnUnSo=
Subject key identifier:   9B:6C:1A:47:AF:EC:E2:1A:B4:CD:71:73:A0:D2:09:36:42:57:7A:10
Certificate issuer:       /CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
Certificate serial:       010D0C9F43285848DD3BA1EC8C827C7E1106FC80
Authority key identifier: 40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/6a093ec8-9aed-3637-8024-8dac0b00cfbd.roa
Signing time:             Thu 13 Feb 2025 02:00:40 +0000
ROA not before:           Thu 13 Feb 2025 02:00:40 +0000
ROA not after:            Wed 14 May 2025 01:00:40 +0000
asID:                     42615
IP address blocks:        2602:fafb::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:3b:a1:ec:8c:82:7c:7e:11:06:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
        Validity
            Not Before: Feb 13 02:00:40 2025 GMT
            Not After : May 14 01:00:40 2025 GMT
        Subject: CN=2267691c-2b7e-41f0-8775-455a6bf36e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0a:8d:9a:ad:cc:74:07:6b:0a:ac:32:94:11:
                    dd:79:73:58:b4:d4:37:76:b4:99:cb:57:6c:5a:f3:
                    ac:11:89:ed:8a:ce:93:fe:c3:c4:62:fe:30:28:4b:
                    6f:a0:aa:c7:e6:b4:5c:b7:dc:10:54:f5:0f:c0:9b:
                    73:8c:36:53:21:c0:03:9a:e9:6a:8b:5e:dc:ef:75:
                    45:06:6c:54:81:a9:2b:e4:62:75:5f:0f:3f:15:45:
                    5c:c7:6d:10:83:64:53:39:e9:8c:f1:81:2d:1b:9d:
                    9c:fd:af:1d:1a:5b:60:20:14:97:3a:fa:7d:cf:c1:
                    b5:e9:79:9d:67:75:e9:19:2c:9a:3a:ca:38:c2:6e:
                    db:51:a5:05:9b:eb:39:9f:66:52:02:3e:29:3f:31:
                    3b:4f:6f:d9:00:d2:08:c6:82:ae:c4:3a:81:82:39:
                    cb:19:fd:f4:47:7c:63:e2:f7:64:46:ff:9e:cf:76:
                    2e:40:71:9d:6b:dc:75:29:99:aa:ad:9c:5f:88:6b:
                    ac:69:d9:69:25:3a:11:e5:e4:a0:fd:79:d6:fe:e9:
                    a3:11:67:17:6f:7f:7c:b6:8a:d6:bf:25:32:fd:3c:
                    a5:95:5c:12:1b:03:08:38:d8:da:74:76:4e:71:fe:
                    3d:85:16:46:1b:dd:0e:17:9a:44:ee:07:9a:6a:11:
                    08:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6C:1A:47:AF:EC:E2:1A:B4:CD:71:73:A0:D2:09:36:42:57:7A:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/6a093ec8-9aed-3637-8024-8dac0b00cfbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl

            X509v3 Authority Key Identifier:
                keyid:40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:1a:c1:ad:73:cc:46:2e:30:98:f6:29:05:7d:16:e2:fd:a8:
         50:47:db:de:37:e0:f2:5e:ee:77:d6:10:91:56:8d:32:6c:7e:
         e3:d2:a2:ba:a1:27:7d:7f:fd:0c:64:66:57:31:14:97:4d:3a:
         2f:cb:d1:a8:e8:01:86:0c:3f:2d:42:55:d8:3c:93:f1:7f:29:
         14:e0:f2:c9:58:13:a0:75:8f:53:96:ad:84:8b:ab:5d:36:93:
         5a:23:6f:34:8c:c5:c6:c9:15:b7:7b:30:1d:da:d2:cd:ca:e4:
         0d:93:97:70:4a:11:30:16:1c:14:6d:1d:93:c1:4b:36:2d:df:
         93:2c:86:30:d3:6d:36:25:7f:63:c1:f7:95:11:b7:9d:c8:23:
         e4:d8:63:ce:94:4e:12:cf:9c:9e:9f:a2:9b:af:50:c4:c6:05:
         68:46:06:71:4e:db:a6:1f:46:22:56:8d:fe:db:17:8a:ee:dd:
         12:54:4d:64:fc:89:a4:34:35:ea:5f:04:c1:41:60:30:2e:c0:
         96:d7:bb:32:54:83:bc:a6:5e:a9:34:8b:a4:d3:3b:ff:ca:cd:
         43:3e:36:0d:02:cd:19:35:48:ce:36:7b:da:e0:2f:15:74:db:
         fd:ea:41:f3:d0:5d:bf:f8:e3:68:96:2f:0d:d5:96:fe:8a:94:
         5f:4a:b8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:21:38 2025 by rpki-client