Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/170203ae-0978-3157-8ec4-a8b053a84694.roa
File:                     170203ae-0978-3157-8ec4-a8b053a84694.roa (raw, json)
Hash identifier:          c3IELOgmrcSIYBrwaeiwFfNzBIU5qUiStqT/ls8C9ZY=
Subject key identifier:   0C:C0:B7:7A:9A:40:79:B1:D9:9D:A5:91:36:6D:34:08:65:5B:AB:AE
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584A146579ABCD51A911498DB880
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/170203ae-0978-3157-8ec4-a8b053a84694.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     399976
IP address blocks:        2602:80c:2050::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:79:ab:cd:51:a9:11:49:8d:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=2434f202-c1cb-4fbd-8c8a-c8a824da9bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:19:37:ca:0e:a4:18:27:48:f9:7b:1f:03:cb:
                    c2:d8:91:e3:cc:cb:d0:94:2f:a4:14:4b:7f:a6:ca:
                    04:c4:8e:20:3d:3b:a1:f3:9d:0b:a9:58:54:94:94:
                    c5:b6:8f:fe:20:62:3e:b1:98:e9:12:37:d0:30:55:
                    ec:23:d0:de:e0:66:04:d1:73:96:b6:46:11:ff:3a:
                    30:36:7b:f2:79:fd:bf:53:fe:9e:c2:eb:44:9b:09:
                    f9:88:64:0c:8f:91:fd:de:77:b5:28:dc:a8:59:fc:
                    ab:69:f9:9f:c3:55:8c:c8:da:0b:dd:61:12:88:7a:
                    2f:55:ff:8f:a7:95:93:12:19:05:c6:f7:16:fa:96:
                    c8:c8:e6:d1:c8:de:47:82:10:23:fc:65:ce:49:b4:
                    a9:63:4c:dd:41:6a:99:ad:78:ab:f0:ff:d9:af:83:
                    3f:d7:66:0e:37:52:e8:ae:56:e7:04:64:65:d1:7f:
                    d8:05:cd:18:73:8f:a8:d5:54:46:34:46:c0:2a:6c:
                    9e:cd:3e:a1:4e:cf:be:7c:c0:75:0d:52:59:36:0d:
                    b8:02:50:35:7c:48:e9:0d:86:21:6e:72:5d:8a:c8:
                    b6:47:e7:fc:59:25:b6:8e:e7:59:19:7c:f8:a2:36:
                    0c:1e:26:4a:2d:dc:b5:21:2f:b7:a0:13:cb:e0:c5:
                    ea:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C0:B7:7A:9A:40:79:B1:D9:9D:A5:91:36:6D:34:08:65:5B:AB:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/170203ae-0978-3157-8ec4-a8b053a84694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2050::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d6:7c:2f:d3:3a:af:b9:8d:5a:e3:1e:08:39:93:4e:3d:37:
         dd:4f:57:a1:b8:bc:10:3f:04:ff:b8:91:16:48:aa:b5:50:82:
         02:4f:55:b9:89:f8:1e:08:9f:56:47:79:de:95:c1:f8:0c:35:
         5d:97:c8:ef:6d:f2:5d:75:cc:a0:27:0f:67:20:61:2f:e7:ed:
         76:d5:aa:17:fd:36:33:9f:cf:e6:98:bb:8d:4c:63:e5:96:44:
         33:91:09:d7:77:bb:d9:c5:68:46:53:d2:41:71:0c:10:08:7f:
         f2:ca:47:b2:c7:59:8f:0a:7d:1f:14:e8:9d:fe:c9:b1:d3:a5:
         4a:a9:7b:bb:52:22:a5:f9:65:5f:f0:81:a9:b2:57:08:3b:89:
         40:3e:e2:5a:3d:b0:db:f2:60:0f:97:cd:24:fe:21:1d:20:c3:
         82:71:d2:7f:f1:ba:bc:29:f9:36:ac:e1:32:0b:ea:f7:c0:d3:
         1e:49:c2:41:c0:84:74:07:5f:fd:5f:73:b3:fa:b2:d4:95:b3:
         6f:f7:a6:b0:3f:e4:4b:86:da:05:31:2a:c9:83:84:2b:81:a9:
         1f:54:15:80:3b:41:13:33:c0:36:56:8a:1c:1b:c5:19:67:1a:
         93:10:5f:4e:4f:c4:c5:3c:bb:82:60:f3:3e:c0:d3:37:eb:a5:
         c8:d9:d9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:46:50 2025 by rpki-client