Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/476de95b-97c9-33fe-b2e8-dc2264b5da8d.roa
File:                     476de95b-97c9-33fe-b2e8-dc2264b5da8d.roa (raw, json)
Hash identifier:          dlipOu/3jhD0MJTEbT2UP/e7fXFrpoFNnnUOqskTQ9E=
Subject key identifier:   C3:E8:A6:86:A3:91:7D:EE:A0:17:13:33:4B:00:5D:F3:F9:EC:74:67
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584A14657A2B2AE4DAE646DAB080
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/476de95b-97c9-33fe-b2e8-dc2264b5da8d.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     399976
IP address blocks:        2602:80c:2057::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:7a:2b:2a:e4:da:e6:46:da:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=bac98226-b2f0-4886-8349-bb1a5aaef409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9f:6f:05:7e:fb:74:57:a7:27:bd:c1:81:2c:
                    b6:35:9e:c7:ba:dd:8d:55:0d:03:09:f8:99:c0:d5:
                    67:1b:86:f3:c6:80:01:32:de:3f:a7:69:a6:6b:1d:
                    df:71:6d:05:3c:4c:28:a8:49:10:7d:cc:f7:51:bf:
                    d0:db:8b:dc:1b:0b:1a:ad:ea:36:98:41:fe:8c:52:
                    fa:73:0e:79:24:f5:ce:e6:b6:f1:bc:93:21:9a:5c:
                    e2:a1:5a:27:3c:ce:97:63:cd:b2:18:02:09:d5:b5:
                    bc:20:88:26:8a:7b:da:98:cd:12:39:9c:aa:8e:e5:
                    fe:4f:b4:d6:d8:02:44:25:5a:3e:31:f1:7a:f8:05:
                    90:cd:4d:2e:ad:85:5a:3f:bc:41:15:69:ab:5e:0c:
                    1a:99:a9:f6:26:1b:a7:27:6e:02:74:a0:19:e1:c6:
                    c3:21:b2:d5:eb:f7:10:de:49:4a:df:a5:20:93:f1:
                    90:69:d6:d0:ca:01:75:64:b1:db:f3:16:1f:8b:74:
                    72:e1:34:04:a4:43:34:38:2f:69:a0:14:22:c6:de:
                    eb:1d:59:7c:e8:ab:e4:7b:79:a7:00:8d:2d:e3:f6:
                    5b:04:7c:c0:59:2c:7d:73:80:72:9f:86:83:7d:f5:
                    23:dd:98:91:ef:d5:b9:d2:ce:8a:5c:6e:b3:25:b3:
                    9f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E8:A6:86:A3:91:7D:EE:A0:17:13:33:4B:00:5D:F3:F9:EC:74:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/476de95b-97c9-33fe-b2e8-dc2264b5da8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2057::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:02:b4:30:bf:a7:15:0a:b0:ac:75:80:d7:a9:a4:a7:55:90:
         5a:bb:bc:03:31:54:ae:97:34:4a:cd:71:f8:03:f3:17:67:63:
         1e:6a:9d:db:4d:e7:a4:a2:17:b5:22:a6:ae:94:a5:be:7a:bb:
         e9:1e:3c:bd:47:4e:0e:d9:16:b1:47:36:37:dc:2e:9d:32:54:
         1b:24:27:dd:35:e5:1c:56:fc:cb:e1:4d:4b:58:7c:9d:ab:ee:
         d0:78:d7:f0:74:8c:48:74:2a:7a:45:7c:59:db:55:67:7c:7f:
         af:d9:f9:29:91:92:2c:95:dd:9e:82:1b:49:9a:25:fa:96:8f:
         65:35:05:23:33:a9:df:5c:54:d9:d2:9f:bb:4e:b0:b0:f4:cf:
         b0:23:ec:b9:0d:32:10:5e:3c:e9:d7:47:56:6f:cd:17:ad:d9:
         8e:8e:49:c7:f5:ff:45:73:ef:ec:68:cd:b2:15:6d:83:2b:59:
         7d:96:89:8a:dd:f8:99:b8:f9:46:7f:71:ce:bd:f3:5a:29:4d:
         fa:67:a9:dc:0e:c4:6f:89:92:4e:e3:cf:87:17:82:62:76:bb:
         38:f8:d9:64:55:bc:89:36:9d:43:6e:33:40:2a:22:eb:58:36:
         55:11:ea:4c:bb:04:5c:54:7b:fe:98:d4:ac:6f:26:ab:89:64:
         de:1b:02:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:44:50 2025 by rpki-client